h5 · Best practices
h2 · Security Essentials
h3 · Verify URLs
Only use trezor.io domains. Bookmark the official pages below and avoid sponsored search results that mimic official branding.
h3 · Keep firmware & Suite current
Updates include security patches and compatibility fixes that keep connectivity smooth without legacy components.
h3 · Confirm on‑device
Always confirm addresses and actions on your Trezor screen. If the device shows a warning, stop and verify the app and URL.
Official Link — Open Suite
h5 · Watch out
h2 · Phishing & look‑alike “Bridge” pages
Scam sites may claim to be “Trezor Bridge” and prompt fake downloads. The legitimate connectivity method is through Trezor Suite and WebUSB. Do not enter recovery seeds into any website or extension. Your seed belongs only inside the physical device.
h4 · Red flags
- Non‑trezor.io domains (e.g., random Google Sites, teaching platforms, or misspellings).
- Demands to type your recovery seed into a web form or app.
- Unsigned downloads or “security checks” requiring payment.
Official Link — Safe Onboarding