Trezor.io/Start
Set up your Trezor safely — step by step
This official guide walks you through unboxing, initializing, and securing your Trezor device. It focuses on practical, reproducible steps to keep your private keys offline and your recovery seed protected.
Quick start — essentials
Only buy from authorized channels. Inspect packaging and tamper seals. If the seal is broken or package altered, contact support and do not use the device.
Use the official Trezor Suite (desktop or web) to begin setup. Prefer the desktop app for frequent use and better control over updates.
Generate a seed on-device. Write each word on the recovery card — never store it digitally or photograph it.
Choose a device PIN to prevent unauthorized physical access. Avoid simple or repeating digits.
Install the latest signed firmware via Trezor Suite and verify the signature to confirm authenticity.
Detailed walkthrough
Follow these instructions for a complete, auditable setup. Each step is optimized to reduce exposure and ensure you can reproduce the process for audits or team onboarding.
1. Inspect package & device
Check the box contents against your order. Verify serial numbers and tamper seals. If anything appears tampered, stop and contact support. Authentic devices display a unique identifier in Trezor Suite during initial connection.
2. Install & open Trezor Suite
Download the Suite from the official site. When using the web app, ensure the URL is correct and that you are on an HTTPS connection. Prefer the desktop client for higher assurance and offline workflows.
3. Initialize wallet & record seed
Choose "Create new wallet" and allow your Trezor to generate a seed phrase. Write the words in order on the supplied recovery card. Confirm the words when prompted to ensure accuracy. Never enter the seed into a computer or phone.
4. PIN & optional passphrase
Set a PIN to protect the device from physical theft. Optionally enable a passphrase for an additional hidden wallet layer; treat passphrases like an extension of the seed — losing one means losing access.
5. Firmware & verification
After initialization, check for firmware updates. Trezor Suite will fetch signed firmware; verify the fingerprint and follow prompts. Never install firmware from unofficial sources.
Troubleshooting
Device not recognized
Try a different USB cable or port, restart the Suite, and avoid USB hubs. On some OSes, drivers or permissions may block access — consult our support pages for platform-specific steps.
Seed mismatch during confirm
Carefully cross-check the written words and the ordering. If the seed still does not match, restart the initialization and regenerate a new seed on the device, then record it accurately.
Advanced options
Shamir Backup
Split your recovery into multiple shares requiring a threshold to reconstruct. Shamir Backup is suited for organizations and families that need resilient, decentralized backups.
Passphrase hidden wallets
Use passphrases to create distinct hidden wallets on the same device. This is useful for plausible deniability but requires careful passphrase management.
FAQ
Can I setup offline?
Yes. You can initialize the device on an air-gapped computer, generate a seed offline, and transfer signed transactions using QR codes or USB stick workflows supported by certain integrations.
Is it safe to photograph my seed?
No. Photographs are easily stolen. Use durable offline media to record your seed and store copies in separate secure locations.
What if I forget my PIN?
A forgotten PIN requires a device reset and restore from your recovery seed. This underscores the importance of safe seed backup practices.