Author

Topic: Worried my Trezor, could have been tampered with. (Reset can help?) (Read 185 times)

legendary
Activity: 2576
Merit: 1860
If you're sure that it was bought from an official retailer, then you should not worry about it possibly tampered.

Trezor has a lot of official resellers such as Amazon. If you can still remember the reseller you bought your Trezor from, you may check it on their official site here: https://trezor.io/resellers/. Look for the name of the shop from where you bought your Trezor.

If you have some serious doubts, however, then don't risk. Buy a new one from their official site and sleep better.  
sr. member
Activity: 1918
Merit: 370
If you bought it from an authorized seller you can worry less about it especially if that is the main business of them coz they are building reputation of their own too on this field, but it is best if bought directly from the supplier you can guarantee its not tampered 99%, like a freshly made wallet with brand new smell. There were cases reported of missing funds in an hardware wallet, most probably they acquire it from a random seller in an online shopping store like Amazon coz they are likely to be scammed by it, tampered somehow. You can reset it as many times as you want to be safe, no need to be anxious about it lol.
hero member
Activity: 3038
Merit: 634
If the Trezor arrived to you already have the recovery seed printed then that's a red flag. But if you are the one that generated it, you don't have anything to worry with.

But if that doesn't convinces you, transfer the balances you have there to another wallet temporarily and just generate a new recovery seed.
legendary
Activity: 2590
Merit: 3015
Welt Am Draht
If it was from an authorised seller and arrived sealed then that's about as promising as it gets.

If you don't have any money tied up on it then doing a new seed is no hassle and should put your mind at rest.

I've never heard of sold hardware arriving tampered with yet, plenty of those pre printed seeds though. All of the hardware hacks require physical access to the device with the seed already created.
member
Activity: 200
Merit: 12
Hello,
I bought my Trezor online some years back. (it's the original not the new one)

For a long time I have been worrying - what if the seller, tampered with it before sending it to me.
 {it was an authorized seller~ from memory}

I've never stored much crypto on it due to this concern. While I've not had any problems so far, I also haven't put enough worth stealing on it yet.
------

Is this a valid worry, is it technically possible to receive a device with the equivalent of a key-logger or something in it? Or maybe a pre-made duplicate ?
I seem to remember that when you use the device for the first time - it generates a new and unique set of mnemonic passwords - to transfer ownership of the device.
So surely someone else couldn't have access to these backup pharses/mnemomics unless they had physical access to my device/menomic phrases? As they were created; after I created them, and weren't present before I hit the 'create' button..{or started it for the first time e.t.c}

Just getting a bit paranoid...
Would re-booting / resetting my Trezor to default and starting with a new set of mnemomics remove any chance of the above?  

Thanks.
TG
Jump to: