Trezor Suite questions, answered without the sales pitch

It is the desktop and web application that pairs with a Trezor hardware wallet. The wallet stores the keys and signs every transaction; the app shows balances, prepares payments, keeps account labels and history, and exposes device settings such as PIN, passphrase and firmware updates. It is a companion, not a wallet in its own right — which is why it never needs your recovery backup to show a balance.

You need some compatible software to see balances and prepare transactions, but it does not have to be this one. Trezor Suite is the app built by the wallet's maker, so it is the default choice and usually receives new device support first. Other third-party wallets can also connect to the device if you prefer a different interface.

The app itself is free to download and use, and it does not require an account. Money changes hands in two places only: network fees paid to the blockchain when you send, and whatever a third-party buy, sell or swap provider charges if you use those services inside the app.

The desktop app is the better default: it installs on Windows, macOS and Linux, updates on its own schedule, can route traffic through Tor, and cannot be reached by a mistyped web address. The web version needs nothing installed and is convenient on a computer you do not own, but it puts the address bar in the security chain, so it is worth reading the safe-use checklist first. The desktop and web pages compare them in detail.

Only from the wallet manufacturer's own published channels — its official website, reached by typing the address or following a bookmark, or a signed release from its official repository. Search results and sponsored links are the usual route to a look-alike installer. If a site offers the app through a download portal, a bundled archive or a "fast mirror", close it.

Updates arrive regularly. Apply them: they carry device support, bug fixes and security patches. Two habits keep it safe — let the app update itself rather than installing a file a stranger sent you, and check firmware on the device screen before approving the install.

Yes. The app holds no keys of its own, so installing it on a second machine adds no risk in itself — you simply plug the wallet in there. Remember that a computer you do not control end-to-end sees your addresses and balances, so it is a poor place for the everyday view of a large portfolio.

Because that confirmation is the whole point. A compromised computer can change an address or inflate a fee in the app's window, so the device screen — which the computer cannot rewrite — shows the real recipient, amount and fee. Approve what the device shows, not what the app said a moment earlier.

Yes. With a passphrase, each passphrase opens a separate wallet on the same device, and the app can switch between them. Multiple physical devices work with one installation too — useful for separating long-term storage from spending funds.

Labels are the names you give accounts, addresses and individual transactions so a history stays readable months later. They are metadata about you, not about the blockchain, so treat them as private notes: on some configurations they sync through a provider's service rather than staying only on the machine in front of you.

Balances and history come from public blockchain data, so a watch-only view is possible. Anything that moves funds still requires the device. Receiving to a displayed address is safe whenever the address was shown and confirmed on the device at some point — for the first receipt from a new counterparty, check it on the screen.

The app offers economy, normal and high priority settings, plus a custom rate when you want to be precise. Lower fees mean slower confirmation and a longer wait if the network is busy; the fee is a payment to the network, not to the app. See fees and coin control for how the levels are chosen.

Coin control lets you decide which specific coins an outgoing transaction spends, on the chains that support it. It matters for consolidation, for keeping a KYC-associated coin separate from the rest, and for privacy. Beginners can ignore it; anyone handling larger balances usually ends up using it deliberately.

Those features hand your order to a third-party provider. You get convenience, and the provider gets your identity and order details to the extent its rules require — so it is a privacy trade-off, not a free extra. Read the provider's terms before a first trade, and check the destination address on the device.

No limits imposed by the app. What exists is practical: network fees on small payments, minimum trade sizes at third-party providers, and the coins or tokens the app supports — covered on the supported assets page.

On the device screen only, during setup or a recovery. Write them on paper or metal, in order, and store them where a fire, a flood or a burglar cannot reach them all at once. Never photograph them, never type them into a computer or phone, and never send them to anyone — including a "support agent".

No, and any prompt that does is an attack. Recovery is entered on the device's own buttons. There is no legitimate exception: not a migration, not a fix, not an audit, not a giveaway. The full reasoning is on the security page.

Do not put recovery words in a cloud note, a password manager entry you did not design for it, or a photo library. An encrypted digital backup is better than nothing, but it turns one physical secret into a file that can be copied — paper or stamped metal kept somewhere separate remains the standard for a reason.

The funds are on the blockchain, not in the device. A replacement wallet plus your written backup restores access to the same addresses. Losing the device with the backup intact costs you the price of a new device; losing both costs you the funds.

No account, email address or identity document is required to install it or to see a balance. Identity requests come from third-party buy, sell or swap providers, and only if you choose to use those services.

Blockchain data is public: your addresses, balances and history are visible to anyone who knows an address, including the servers your app queries. What the app's privacy settings change is whom you ask for that data — Tor and a custom backend keep the request away from a single default provider, and label sync decides where your notes go. See privacy features.

The wallet signs offline, but balances and broadcasting need a connection. Signing a transaction on an air-gapped setup with a saved transaction file is a deliberately more private workflow — worth it for large sums, more friction than most people want day to day.

Start with the cable: charge-only cables and worn connectors cause most of these. Then use a port directly on the computer rather than a hub or dock, close other wallet software that may already hold the device, and reconnect. For the web version, grant the browser's device permission when it asks and try a browser without aggressive extension blocking. The troubleshooting section walks through the remaining cases.

Almost always it is a view problem, not a loss: the wrong wallet is selected (a passphrase typo opens a different one), the wrong account type or network is being shown, or the backend cannot reach the network. Check the address in a block explorer before assuming anything worse. Never "fix" it by entering your recovery words into an app you reached through a link someone sent.

A fee below the current network rate can leave a transaction waiting. Options depend on the chain — you can wait, and in some cases replace the transaction with a higher fee. Whatever the route, the replacement is signed on the device just like the original.

Nowhere. Labels, account names and settings live in the app on your machine; the funds live on the blockchain under the device's keys. Reinstall, reconnect, and the balances return — the notes are the only part that may need re-entering. That is a good argument for not treating labels as a ledger of record.

Hang up, close the chat, delete the message. Legitimate wallet support does not initiate contact about your funds, does not request recovery words or a PIN, and does not need screen sharing or remote access to your computer. Anyone who does one of those things is attempting theft regardless of how official the message looks.

The only real test is a recovery — and it should be done before you need it, on a spare device, with a small balance rather than an empty wallet you are about to load. Practise it once. Discovering a mistranscribed word during an emergency is the expensive way to learn it.