How safe are the wallet apps we are using?

[standardnepo]

Hey guys,

This might sound delusional, but I think a year ago we would have found it delusional to put a eSIM in Ledger devices too. My question is: how safe is the Trezor Suite app we are using? I mean is it possible for hackers to put something into the app to follow other people’s activity etc?

Please tell me the reason if my question is not a valid one.

p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

[salad daging]

I use Trezor Suite, as long as you download on its official site it is safe, never enter seed phrase to anyone, the last as long as your computer is not infected with a virus it will be fine.

Here is the answer from Trezor developers about risk considerations and they explain it there.
- https://forum.trezor.io/t/desktop-suite-vs-web-suite-risk-consideration/15732

And make sure you officially update Trezor suite.
- https://github.com/trezor/trezor-suite/releases

[tbct_mt2]

This might sound delusional, but I think a year ago we would have found it delusional to put a eSIM in Ledger devices too. My question is: how safe is the Trezor Suite app we are using? I mean is it possible for hackers to put something into the app to follow other people’s activity etc?

Please tell me the reason if my question is not a valid one.

p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

You can not be sure about that but with wallets that had problems and security incidents in the past, you can exclude them to your considering list.

You have to check wallet reviews, and make sure reading guides on how to use wallets rightly from hardware wallets to software wallets, creation, verification and backup.

Scrutiny reviews including open source, reproducibility.
https://walletscrutiny.com/

[GUIDE] How to buy a Hardware Wallet the right way.
How To Verify the Downloaded Version of Ledger Live.
[GUIDE] How to Safely Download and Verify Electrum.

Ledger had data breaches, problems with resellers, so you can consider Trezor as a better hardware wallet to use.

[YOSHIE]

p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

I have been using the Trezor wallet application to store Bitcoin for quite some time, for now it is still safe without any problems, the point is that I keep my "private key" completely confidential.
For this reason, with the recent attacks on Bitcoin Hardware Wallets, it can be said that there is no guaranteed method of storing Bitcoin without risk, However, if you can classify the security level of Bitcoin wallets well, I think there is no problem with security.

In essence, if you leave the highest security on your Hard wallet such as Ledger, Trezor and private keys stored offline, and follow the steps as in @dkbit98's thread, I think you will be safe to use the Trezor wallet.

[Patrol69]

No matter what kind of hardware wallet you use, you will not be 100% secure anywhere, but if we maintain some privacy when using software wallets, we may be able to prevent such unpleasant incidents to a large extent. The first important thing is to keep your wallet's personal information completely safe. Do not discuss with anyone how much Bitcoin you have in your wallet. If someone wants to know about investments or wallets through private messages, block them immediately, it would be best to ignore such personal messages. Do not save the wallet's private information in the mobile notepad or any other place on the mobile.

I think if we are aware like this, we can prevent our account hacking to a large extent.

[348Judah]

how safe is the Trezor Suite app we are using? I mean is it possible for hackers to put something into the app to follow other people’s activity etc?

We never knew things could get worse this way when using hardware wallet, but the warning signal begin to show up the moment some wallet privacy got compromised like that we have with Ledger, some have already been raising this alarm before this major attack took place, the incidence of using a third party retailers is also one of the worst scenario to experience with some of these hardware wallets, this is where it is never advised to secure one through any of these agents done to buy directly from the manufacturers if possible.

But if you see that you can derive satisfaction in any of the above suggestions, it is more important for you to switch from hardware wallet to any other non-custodial wallet for your safety, even Trezor is not 100% safe as at now because the recently released an update on possible threats in a similar way.

[coinlary]

If you're specifically concerned about the Trezor suite app, you should follow the normal procedure to make sure you truly downloaded official wallet, which is verifying of the signature. They have a guide for that https://trezor.io/guides/trezor-suite/download-verify-trezor-suite, follow the guide if you don't know how to do that.

Apart from this, you should only worry about malware and the hardware wallet itself but Trezor is a reputable wallet.

One more thing, make sure you always verify every details are correct before signing a transaction.

[bitmover]

Hey guys,

This might sound delusional, but I think a year ago we would have found it delusional to put a eSIM in Ledger devices too. My question is: how safe is the Trezor Suite app we are using? I mean is it possible for hackers to put something into the app to follow other people’s activity etc?

Please tell me the reason if my question is not a valid one.

p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

I  think it is safer  to use Electrum. The best bitcoin wallet out there. You will also have a better control over your funds.

you can connect electrum to your trezor using this guide

https://trezor.io/guides/third-party-wallet-apps/bitcoin-apps/electrum-and-trezor

[hd49728]

I  think it is safer  to use Electrum. The best bitcoin wallet out there. You will also have a better control over your funds.

you can connect electrum to your trezor using this guide

https://trezor.io/guides/third-party-wallet-apps/bitcoin-apps/electrum-and-trezor

Electrum is a very good Bitcoin wallet, non custodial, open source, long history, and good reputation. It's a SPV wallet so with less storage space requirement, it can be used by everyone, and it's available on mobile for Android.

For OPSEC, there are guides to use Electrum wallet rightly & safely.
[GUIDE] How to Safely Download and Verify Electrum.
The paranoid user's security guide for using Electrum safely.
Tor proxy option with Electrum.
Creating a cold storage wallet in Electrum.

[Fivestar4everMVP]

Hey guys,

This might sound delusional, but I think a year ago we would have found it delusional to put a eSIM in Ledger devices too. My question is: how safe is the Trezor Suite app we are using? I mean is it possible for hackers to put something into the app to follow other people’s activity etc?

Please tell me the reason if my question is not a valid one.

p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

Something i think we have to come to the knowledge of is the fact that security of the wallet app we are using is more on us than the company that built the app, especially for non-custodial wallet apps.
First, it is the company's responsibility to add/implement all necessary security features into an app, and on the other hand, it is our own responsibility to make use of those features to ensure our wallet is well secured.

Now, don't get me wrong, the above is different from a wallet app's database getting hacked, it is the company's responsibility to ensure that an apps database that could expose user's pvt keys or wallet seed phrases is well protected/secured against hackers, but i do not know if such does exist, because if it does, then it simply means that wallets we all assume as non-custodial aren't actually non-custodial if hackers could see the pvt keys or seed phrases of users if or when they break into the wallet's app database.

[ovcijisir]

I use Trezor Suite, as long as you download on its official site it is safe, never enter seed phrase to anyone, the last as long as your computer is not infected with a virus it will be fine.

~

The problem with buying wallets directly from the producer is that you need to give personal information and both Trezor and Ledger had data leaks. That puts customers in vulnerable position, specially in countries with high risk of violent crime.

On the other hand buying wallet anonimously from third party makes customer vulnerable to buying fake copy or wallet with implant - which is maybe even worse than having your prrsonal data leaked.

Maybe it is the best to buy wallets directly from producers on Bitcoin conferences, if they sell them there...

[The Cryptovator]

This might sound delusional, but I think a year ago we would have found it delusional to put a eSIM in Ledger devices too. My question is: how safe is the Trezor Suite app we are using? I mean is it possible for hackers to put something into the app to follow other people’s activity etc?

To be honest, I don’t trust app update notifications from the apps. We have remembered about Electrum wallet exploits; hackers managed to update apps with the fake wallet from the notification. So if you download apps from the official source and verify it, then it’s safe.

Always I update apps from the official website or from the Play Store directly. Never update apps from the apps notification; it’s not for Trezor, for all the wallets I have been using. I have Trezor as well, but I always update this way. Always you have to make sure your apps are downloaded or updated from the official source.

[BlackHatCoiner]

To be honest, I wouldn't completely blindly trust even the most reviewed piece of software right now, because of the rapid development on AI frontier models. No, you should consider that the wallet apps you have on your phone can be broken, and have plenty of vulnerabilities. Same goes even for software you use for "long-term funds".

[tbct_mt2]

To be honest, I wouldn't completely blindly trust even the most reviewed piece of software right now, because of the rapid development on AI frontier models. No, you should consider that the wallet apps you have on your phone can be broken, and have plenty of vulnerabilities. Same goes even for software you use for "long-term funds".

AIs create a lot of fear in security because they can work tirelessly, unlike human, and they can find security holes to exploit in a faster rate than human hackers.

We still have to use wallets to store our bitcoin self custodial, and among many Bitcoin wallets, choosing oldest and best reputation wallets to use can give better security with less risk of security exploitation.

Bitcoin Core or Electrum wallet is my choice but if one wallet can be compromised, I have to diversify my fund storage in two or three different wallets (Bitcoin Core, Electrum, and Sparrow wallet.

https://learnmeabitcoin.com/beginners/wallets/

[aoluain]

I dont use any wallet apps on my phone so I have no concern to be worried on that front.
The best advice is to download any apps directly from the official web page.

I definitely wouldnt trust downloading a wallet app from the like of the Google play store
give that Google has in the past advertised fake Trezor wallet web links and such.

How do we know the proper checks are in place and that fake or malicious apps are
not slipping past google security checks? IMO its not worth the risk.

[yudi09]

p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

It depends on the user. Some Trezor users still believe their wallets are secure because they’ve done everything right so far. Hacks are a different story—you never know when they’ll happen, so let’s hope they don’t.

The same goes for other wallets. As long as you’re able to follow all the steps correctly, it’s generally considered safe—provided the wallet you’re using isn’t one with a bad reputation that many have advised people to avoid.

[Yamane_Keto]

official Trezor Suite app is open-source. developers reviewed the code many times. Alternatively connect your Trezor to reputable wallet software like Sparrow or Electrum. Your private key never leaves your device. Always verify that the address shown on your physical Trezor screen matches your address. Ensure you download firmware only from official sources, and consider using a passphrase.

[Ambatman]

I believe 2026 has been a wake up year on security and that you can never be too sure something is really secure.
I make use of electrum and have been using it for years but after all these dramas
I have chosen to move some of my coins to other wallet (Blue wallet)
Not because I trust them but I believe it's better not to place all egg in one basket.

[Odogwu-Blockchain]

Please tell me the reason if my question is not a valid one.
p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

If you simply safe your seed phrase, there could be no problem with it, but if there is a vulnerable point in Trezor that hackers targets, that won't be your fault, and many if you are affected, you'll be compensated, I think Trezor will like to do that.

Have you ever used or heard of electrum wallet before, it's the best and recommended wallet for Bitcoin, it's more safer than others as far as I know.

[suzanne5223]

[snip]
p.s. I used Trezor as an example because I have one, but I’m asking this question about all wallet apps.

[snip]
Ledger had data breaches, problems with resellers, so you can consider Trezor as a better hardware wallet to use.

Trezor is a good wallet, but it will be best to use passphrase protection with the seed based on what happened recent with hardware wallet which is also the reason why I don't consider every hardware wallet connected online to be secure for huge BTC holding in is era where AI is used to exploit vulnerabilities.
For a huge BTC holding, it's best to look into an air-gapped wallet or create an air-gapped wallet ourselves using an old computer.