- Trezor invented the hardware wallet in 2014 and now sells three: the Safe 3 (£49), Safe 5 (£109) and Safe 7 (£209). All keep your keys offline, all run open-source firmware, and for most people the cheapest one is the right one.
- Prices fell this year. The Safe 3 now sells for £49 and the Safe 5 for £109, both well below where they launched; most of the internet still quotes the old, higher numbers.
- The honest history: Trezor’s retired older models could be cracked by someone holding the device, which is exactly why the Safe range added a certified secure chip. Its mailing list has leaked more than once, so owners get phishing emails. Nobody has shown a way to take coins from a Safe remotely.
Trezor is where hardware wallets started. SatoshiLabs, the Prague company behind it, shipped the first one in 2014, and the idea has not changed since: your secret keys live inside a small device that never connects to the internet, every payment must be confirmed on its screen, and malware on your computer can watch but cannot sign. Our self-custody guide explains why that matters; this page is about whether Trezor specifically deserves the job, and which of its three current devices to buy.
Everything below was checked against Trezor’s own shop, documentation and published security advisories in September 2026. Unlike our exchange reviews, this page is monetised: buy a Trezor through a gold link here and Trezor pays us a commission, at no extra cost to you. That does not soften the verdict, and the history section below is the proof; the full arrangement is in our affiliate disclosure.
What you get
The current range is three devices called Safe 3, Safe 5 and Safe 7. The old Model One and Model T, the wallets that made Trezor’s name, have been retired from the line-up. All three Safes do the same core job with the same cryptography: they hold keys for thousands of coins and through the free Trezor Suite app, they support standard 12, 20 or 24-word wallet backups plus an unusually good multi-share backup that splits your recovery into several pieces, and each carries a certified secure element, the tamper-resistant chip the old models famously lacked.
| Model | Price | Screen and controls | Connects by | Buy |
|---|---|---|---|---|
| Safe 3 | £49 | Small monochrome screen, two buttons | USB-C | Buy |
| Safe 5 | £109 | Colour touchscreen with haptics | USB-C | Buy |
| Safe 7 | £209 | Large colour touchscreen, aluminium body | USB-C and Bluetooth | Direct from Trezor |
The Safe 7, released in late 2025, is also a security step up rather than just a comfort one: it pairs the certified chip with TROPIC01, a new secure element designed to be auditable rather than secret, made by a sister company of Trezor’s. The two chips have to agree before anything is signed. Its Bluetooth, the feature hardware-wallet people argue about most, has a physical kill switch, and exists mainly to fix Trezor’s long-standing weak spot: proper use from an iPhone rather than a desktop.
Which one to buy
Buy the Safe 3 unless you know why you are not. The £49 device signs with the same cryptography as the £209 one; the extra money buys screens, comfort and Bluetooth, not better protection for your coins. The Safe 5 earns its price if you will genuinely use the device often, because typing a passphrase on two buttons is a chore and on a touchscreen is not. The Safe 7 is for two kinds of buyer: people who want to run their wallet from a phone properly, and people who want the newest security architecture and are happy to pay for it.
Buy direct from Trezor. Tampered devices have turned up on Amazon and eBay, and a hardware wallet with a stranger's fingerprints on it is worthless.
Our budget pick of the category. Buttons rather than a touchscreen, and the same security architecture as its bigger sibling.
The comfortable all-rounder: colour touchscreen, secure element, fully open source.
Links marked Ad earn us a commission. It costs you nothing extra, and we chose what to recommend before we chose who to sign up with. How we make money
Is your crypto safe?
The architecture is the point. Keys are generated on the device and never leave it; transactions are signed inside and only the signature comes out. A hacked laptop can propose a payment but the device shows you the real destination and amount on its own screen, and nothing moves until you physically confirm. That defeats the malware that quietly rewrites addresses, which our account-security guide covers in detail. The firmware is open source, so researchers can and do check the claims rather than take them on trust.
Two things a hardware wallet does not do. It does not remove responsibility: whoever holds the recovery words holds the money, there is no FSCS and no password reset, and Trezor’s multi-share backup exists precisely so that one house fire or one forgotten hiding place is not fatal (it is also the backbone of a sensible inheritance plan). And it does not protect coins you have not moved to it: a Trezor in a drawer secures nothing while your balance sits on an exchange.
The history you should know
Trezor’s older models had a real flaw, openly documented: with the device in hand and some equipment, an attacker could extract the keys in minutes using a voltage-glitching attack demonstrated by researchers in 2020. Software could not fully fix it, the workaround was a passphrase, and the entire Safe range is the structural answer, adding the secure-element chip the old design lacked. That is the pattern worth noticing: the weakness was acknowledged, the fix was architectural, and the vulnerable models are gone.
The newest chapter is more flattering than it first sounds. In June 2026 Trezor disclosed that Ledger’s in-house security lab, its main rival’s researchers, had succeeded in a laser fault-injection attack against the new TROPIC01 chip in January. The attack needs physical possession of the device and laboratory equipment, no user funds were ever at risk, and it was disclosed and handled through the normal responsible process. A rival attacking your chip in a lab and you publishing the result is the security industry working as designed, and it is a better trust signal than a marketing page claiming nothing can ever go wrong.
The genuine irritation is data leaks. Trezor’s newsletter list leaked through its email provider in 2022, and a support-system breach in January 2024 exposed contact details of around 66,000 people. It happened again the day after this review first went up: on 9 September 2026 attackers breached the third-party service that sends Trezor’s email and used the company’s own legitimate domain to send a fake security alert urging readers to enter their recovery words. Trezor’s warning followed within hours, and no incident of this kind has ever touched keys or coins directly, but the lesson compounds: owners should assume their email address is on phishing lists, and treat any message claiming to be from Trezor as hostile until proven otherwise, including ones that pass every technical check for being genuine. Trezor will never email asking for your recovery words; nobody legitimate ever will.
Who it’s for, and who it isn’t
A Trezor suits anyone holding more crypto on an exchange than they would happily carry as cash in a coat pocket, anyone planning for inheritance or disaster with the multi-share backup, and anyone who rates open, auditable security over sealed-box security. At £49 the entry price is no longer a serious obstacle for either camp.
It is the wrong pick if you trade so often that coins never rest anywhere long enough to store, if you want to run everything from an iPhone and will not stretch to the Safe 7, or if you know you are careless with important pieces of paper, because moves the single point of failure from the exchange to you. Holders of unusual smaller coins should check theirs is supported before buying; Ledger still covers more of the long tail, a difference we weigh properly in Trezor vs Ledger.
Common questions
Trezor or Ledger?
Trezor for open source, the built-in multi-share backup and a cleaner record on customer data; Ledger for the widest coin support and slicker mobile apps. Either is a huge upgrade on leaving coins on an exchange. The full argument, including Ledger’s 2020 customer-data leak and 2023 recovery-service controversy, is in the head-to-head.
Is Bluetooth on the Safe 7 a security hole?
Keys never travel over Bluetooth, only the transaction being signed, and every payment still needs confirmation on the device screen. There is also a physical switch that cuts the radio entirely. Reasonable people still prefer cables on principle, which is what the Safe 3 and 5 are for.
What happens if I lose the device, or Trezor disappears?
Nothing happens to your coins. The recovery words restore your wallet on any compatible device from any maker, because Trezor uses open standards rather than a proprietary format. The device is replaceable; the backup is the thing that is not.
Is the £209 Safe 7 worth it over the £49 Safe 3?
Not for security of your coins in any everyday sense. Both demand physical possession before the known attacks even begin. Pay more for the touchscreen, the phone connection and the dual-chip design if those matter to you, not out of fear that the cheap one is unsafe.
Checked against Trezor’s shop, documentation and security advisories in September 2026. This review is updated on a schedule and when something material changes. Trezor pays us a commission on purchases through the gold links above, which never changes what we write, in line with our affiliate disclosure and editorial policy.