Trezor raises passphrase limit to 128 characters after Coldcard attacks
The hardware wallet maker has extended optional passphrases from 50 to 128 characters in its Trezor Suite, citing July's Coldcard attacks in which strong passphrases protected some affected users.
Why it matters: The update ties wallet security to passphrase strength, after a firmware flaw in Coldcard devices let attackers reconstruct recovery phrases in July.
Key points
- Trezor raised the maximum optional wallet passphrase from 50 to 128 characters, available in Trezor Suite with updated firmware; older firmware keeps the 50-character limit.
- Trezor cited July's Coldcard attacks, where a firmware flaw produced recovery phrases with insufficient randomness, and said strong passphrases protected some affected users.
- On Friday, Trezor advised customers who bought wallets from former reseller CryptoBilis since March to move funds after a suspected implant was reported in a Trezor Safe 5.
Trezor has raised the maximum length of its optional wallet passphrases from 50 to 128 characters, Cointelegraph reports. The hardware wallet maker said on 1 November that the change is available in Trezor Suite with updated device firmware, while older firmware still caps passphrases at 50 characters.
Trezor describes a passphrase as an extra password set alongside a wallet's recovery phrase.
According to Trezor, strong and unique passphrases protected some of the affected users.
The update also comes after a separate warning about Trezor's own devices.
Live updates on NewsFeeds:AltcoinsDesk editor: Keshav Aggarwal (accountable for this page; this summary was not edited by hand)
How this was produced: an AI model wrote this summary of Cointelegraph’s report, which we credit and link above. Read our Editorial and AI policy. Spotted a mistake? See Corrections.
Not investment advice. Read the risk disclaimer.