Topic: I thought Trezor's were suppose to be secure? (Read 411 times)

It is worthwhile investing in one, especially if you posses or plan to purchase a significant amount of coins.
Electrum is a safe software wallet, sure, but it will never be as safe as having your private information on a paper wallet stored away safely or on a hardware wallet where the private keys never leave the safe environment of the device in the first place.

Thank you for that explanation and analogy.  I am just getting interested in hardware wallets and don't fully understand them yet, and I am bewildered by how many are on the market too.

If I had another merit to give, you would have it for your post.  That was very helpful.

I'm still not sure if I truly need a hardware wallet, as I haven't had any issues with Electrum and keeping my seed phrases safe, but there is something elegant and simple in the designs of some of these hardware wallets and I really want to get one.  It is nice to hear an explanation of some of the security stuff beforehand, so thank you for that.

If you are 110% sure that you are using exactly the same passphrase... then the only other explanation would be that the recovery seed mnemonic you have used is "wrong". That is to say, it's a valid seed mnemonic (otherwise you would not have been able to restore using it), but it isn't the seed mnemonic that was used to generate the seed your wallet was actually using.

If you had any transactions conducted before you used the passphrase feature, then they should show up just with the seed mnemonic and an empty passphrase, which would at least confirm you have the correct seed mnemonic.

Have you ever restored using this seed mnemonic before?

Thank you.

What bothers me the most is that before the update to Trezor I was able to login with the passphrase I had with no problems. Once I updated the Trezor this all started to happen.

I have retried the passphrase that I was using before with no luck. This is just so frustrating....

Let this be a lesson that the passphrase feature in the Trezor is for advanced users only: https://wiki.trezor.io/Passphrase

Each passphrase is mixed with the seed stored in the Trezor to create a unique wallet. The confusing thing here is that the OP says he has a record of that passphrase and it's not working to recover his wallet. Could it be that he copied and pasted and is somehow off by a character, or something strange like that? Passphrases are case sensitive. The only thing I'd suggest, as someone else posted, is to brute force it - though this may just be a time-waster.

Here is more information.

Yes, that is the standard recovery method using your 24 words..


That is correct... when you use the "passphrase" functionality, you are effectively adding a "25th word"... this "extra word" results in the wallet generating a completely different seed, from which it will logically generate a complete different set of private keys and addresses (ie. a different wallet).

Note:  It could actually be a sentence or multiple words rather than a single word... "25th word" is just used for convenience.


Yes


Your 24 words + passphraseA = WalletA
Your 24 words + passphraseB = WalletB
...
Your 24 words + passphraseX = WalletX

So, if you enter the same "wrong passphrase"... you will generate the same "wrong wallet"


ANY passphrase used will generate a valid seed and therefore a valid wallet... it might not be the wallet you want, but it will be valid. Therefore, there is simply no way that any wallet software would be able to determine if your passphrase is wrong.


Using that information alone, the answer is NO. The only way to recovery that cryptocurrency, is to have the appropriate private keys... the only way to get those private keys is to restore your Trezor.

Using some of that information (ie. the address in your Trezor that you sent the funds to) + your 24 words + What you believe your passphrase is + LOTS of time... you might be able to discover what your passphrase was using some "brute force" methods using tools like "btcrecover"... However, it isn't very likely unless your passphrase is VERY simplistic (ie. less than 8 characters and only numbers/letters)... Anything longer or more complicated than that, and your chances of recovery go from very very very small to nonexistent

Thank you for you response.

Here is what I would really love your help with guys. I have read all the articles you guys have sent me a few times to see if I understand this a lot better. I want to thank you for that. These have been a lot of help.

I thought I did know the passphase I sent up with the Trezor originally, it was one I normally used and for some reason it is not working.

Here is the process I have been doing to try to recover my wallet

1 - Wipe the device
2-  Go to trezor.io/start
3- Click on recover wallet
4- Click on 24 words
up to this point I have no errors so I am doing this correctly... I think

Here is where I need help with, on step #5 below. I used a passphrase and a pin number to encrypt my account when I originally set up my Trezor wallet. I know what the passphrase is, I am sure. It appears here might be the issue because from what I read on line even if I am successful in entering the 24 words for the recovery if I do not use the correct passphrase that I configured with the wallet I will be just creating new wallets each time and will not recover my original wallet with my cryptocurrency.

5- Click on "I used passphrase before" click no this only if.....
 

My questions to you is:

1) If I configured a passphrase when I originally setup my wallet as I go through the recovery of my wallet on step #5 do I click on "I used a passphrase before"?

2) If I enter in the wrong passphrase does it just keep creating a new wallet each time?

3) Why in this process if I enter in the wrong passphrase does it not just say wrong passphrase and the process does not let me create a new wallet?

4) If I have the original transfer information from the Exchange I purchased the Cryptocurrency and then transferred it from. Is there a a manual way to recover the Cryptocurrency? For example I have the

Date
Amount
TXID:
Address:



Thank you,



P.S. remember I am still a Newbie at this and am learning as you guys have been great teaching what I should have know all of this before and wrote more down when I originally set up my Trezor.

Maybe the hardware is faulty and its internal storage is corrupted. Have you bought the wallet from SatoshiLabs (trezor.io) directly or did you purchase via a 3rd party reseller?

Either way worst case you should be able to retrieve your funds either via (a) a new Trezor or (b) Electrum. With (a) likely leaving a bit of a bitter taste in your mouth while (b) will expose your private keys to an online device.

Should you want to give (b) a try, look at the instructions here ("Recovering funds without Trezor device"):
https://wiki.trezor.io/Apps:Electrum

To reduce the risk from exposing your private key to an online device, consider booting from a tails disk, which comes with Electrum preinstalled:
https://tails.boum.org/install/

If you have a second device at hand that you could use for cold storage (ie. kept offline at all times), consider wiping this secondary device clean and setting up cold storage using Electrum:
http://docs.electrum.org/en/latest/coldstorage.html

Come to think of it, you could also go with option (c), restoring your Trezor wallet to a Ledger Nano S:
https://www.reddit.com/r/ledgerwallet/comments/7tdm1y/can_i_restore_a_trezor_on_to_a_ledger_nano_s/

As everyone else has explained... Seed Mnemonic (ie. 24 words) + Passphrase = Used to generate actual seed that your wallets are built off of.

For Trezor, the Seed mnemonics adhere to a set standard (BIP39) which includes a limited set of words and a checksum to determine if the mnemonic is "valid". Given that you are NOT getting any seed mnemonic errors, then the issue is likely with the "passphrase" that you are attempting to use.

As described here: https://wiki.trezor.io/Passphrase
Do you have a 25th word writtent down on your recovery card? Trezor ONE seeds are generally only 24 words... So, If you don't recognise that "25th word" as the passphrase that you think you were previously logging in... perhaps it is actually a "hint" that you left yourself as to what your passphrase was?

Hi BitMaxz,

I went through that process they explained, thank you for providing that. 

1) I wiped the Trezor
2) Restored wallet using the recovery seeds, and enabled the passphrase. Then when it asked me to login I used the 25th word from the recovery seed to see if that was the passphrase for the wallet.

nope that didn't work. Which I was hoping it would have.



Same issue no transactions, no coins, and the logo on the device didn't change.


I was hoping that would of worked

If you don't know if what is the passphrase you use before you can not recover your exact wallet.

Please read this below and understand the security of Trezor and how it works.
https://blog.trezor.io/seed-pin-passphrase-e15d14a0b546

As the blog said that the trezor used the passphrase as the 25th word in your seed.

Read this

So as suggested above you must enable the passphrase in order to get the exact wallet.

If you still having this issue much better to contact the trezor support https://trezor.io/support/

Also, found this post from reddit but it seems no one solves this issue.

Note: keep in mind that the passphrase and seed phrase is different.

I have re wiped the Trezor

I have gone to trezor.io/start clicked on Recover wallet

Go through the process of entering in the Recovery Phrases as the it instructs through the process.

Tried several times but doesn't seem to be working.

Try restoring with your seed and then re-enable the passphrase option. Use the passphrase you have been using to access the trezor previously.

I lost a couple of grand, which sucks. I was trying to see my crypto on my Trezor but it kept asking me to update to see everything. I just assumed it would go smoothly.

What the funny part is, after I updated the device I was able to recover the Trezor with the passphrase I have been trying. The old logo came up on the Trezor. But I still wan't able to see any transactions.

When you wipe the device and then restore it with the Recovery seed, what is recovered exactly?

first off how much did you lose

and I am sorry for your loss

Never never never never never never never do a firmware update with coins in the wallets.

have a second trezor  that is fully updated and empty.

move all coins from outdated trezor
update it
check that your passwords are good.
doublecheck your seed.

move coins back to  updated wallet.


I have 3 trezor wallets
coinbase wallets
blockchaininfo wallets
and some core wallets on pc's with clones of the hdds

it is easy to lose your coins  without a shit ton of backup options.

If there was, Trezors wouldn't be secure.

You need the seed+passphrase(s) to recover a wallet after enabling passphrases.

Is there a way to recover the passphrase?

Actually, it lets you login with any passphrase. It's not an authentication, each passphrase creates a different wallet. When it's disabled and/or you use an empty passphrase you see the default seed balance.

So if you don't see the funds, try to check variations of the passphrase (as if it was a password and you had used the wrong one), or even an empty one.

Passphrase is enabled, I just realized that because when I connect my Trezor is it asking for the passphrase and it is letting me login with the original passphrase I used before.

When I go to the advance settings it says

Passphrase
If you disable passphrase encryption, your current funds will not be shown. You will have to enable passphrase encryption again to see your current wallet.

• Click the name of your device above the accounts balance
• Click the "Advanced" tab
• Enable passphrase there