Trezor.io/start.

Authenticity is more than a symbol

The registered trademark symbol, written as ®, is a typographic notice that a mark is registered in at least one relevant jurisdiction. It is not a security certificate, a domain check, or an endorsement of the page where it appears. A genuine company may use a registered mark, but anyone can copy that character into a message or a website. Treat it as punctuation, not proof. This demonstration shows the symbol to explain its meaning and does not claim to be an official Trezor property.

Brand names and familiar visual language can be copied. A convincing logo, reassuring badge, lock icon, or polished design does not establish who operates a website. Scammers may deliberately reproduce these cues to make a fake page feel routine. Do not decide that a page is safe because it looks familiar, uses a trademark symbol, or appears near the top of a search result. Search advertisements, unsolicited messages, and links in comments can all lead to places that imitate an established service.

Check the address with care

Before using a wallet-related service, independently verify its official domain using a trusted source that you already know how to reach. Read the hostname from right to left and look for extra words, substituted characters, unexpected punctuation, or a different ending. A string that contains the familiar brand name is not necessarily controlled by that brand. For example, a brand name placed before an unrelated domain can still belong to the unrelated domain owner. A padlock in the browser only indicates an encrypted connection to the displayed site; it does not prove that the site is honest.

Prefer a bookmark you created after careful verification over a link in an email, direct message, social post, search advertisement, QR code, or pop-up. If an instruction tells you to move quickly, claims your wallet will be suspended, or offers help only if you reveal recovery words, stop. Close the page and reach the organization through a route you independently trust. Never let a caller or support agent take control of your screen while a wallet is unlocked.

Protect recovery words as offline secrets

A recovery seed is not an ordinary password reset code. It can recreate the wallet and control the assets associated with it. Anyone who obtains the words may be able to move funds, and transactions may be irreversible. A legitimate helper does not need your complete recovery phrase to diagnose a problem. Never type recovery words into a website, search box, support chat, email, text message, computer, or mobile app. Never read them aloud on a call. Do not photograph the paper, scan it, save it in a notes app, or store it in cloud storage.

During initial creation, follow only the trusted instructions displayed by the device and verified software. Write words carefully and in the correct order on an appropriate offline backup. Keep the backup away from casual view, moisture, heat, fire, and unauthorized access. Consider how you would recover access if the paper were lost or damaged, without creating a digital copy. A passphrase, when supported and deliberately configured, can add complexity and also create another way to lose access if forgotten. Understand the consequences before enabling advanced options.

Confirm actions on the hardware device

A hardware wallet is designed so that sensitive signing operations can happen on a dedicated device while private keys remain isolated from a general-purpose computer. This design can reduce exposure to some malware, but it is not a guarantee against every threat. A compromised computer can still display a misleading address, manipulate transaction details, or trick you into approving an action. Read the recipient address and transaction information on the device display itself before confirming. If the details differ from what you intended, reject the transaction and investigate.

Use a PIN that is difficult for someone nearby to guess, and shield the screen when entering it. Keep device software current by following instructions from a verified official source, not from an unsolicited pop-up or an unknown download. Firmware authenticity checks are important because they help verify the origin and integrity of software; when official guidance explains how to verify a signature, follow that guidance carefully. Do not install files sent by a stranger or use a device that arrives with an unexpected prefilled recovery phrase.

Purchase and support with caution

If buying hardware, research the manufacturer’s current recommendations for purchasing directly or through authorized sellers. A second-hand device can have an uncertain history. Packaging can be copied, and a tamper-evident seal alone should not be treated as conclusive evidence. Follow the official onboarding checks for the specific model. A device that asks you to use recovery words supplied in the box should be treated as suspicious; recovery information should be generated through the trusted setup process, not handed to you by a seller.

Be cautious of fake support accounts and sponsored search results. Official-looking profile pictures and copied help articles are easy to make. Do not pay a stranger to “unlock” a wallet, reveal a seed to “synchronize” an account, or install remote-access software to receive help. If you think you have exposed recovery words, consider the wallet compromised. Using a separate trusted device and verified instructions, seek qualified support and move remaining assets to a newly created wallet where appropriate. Do not reuse a phrase that has been exposed.

Make a routine you can repeat

Security is a series of small habits rather than a single mark or device. Verify the destination before sending, consider a small test transfer when suitable, and remember that a blockchain transfer may not be reversible. Keep records of important public transaction details if useful, but never include recovery words or private keys in those records. Enable two-factor authentication on relevant online accounts such as email or exchange accounts; understand that it protects those accounts and does not replace safe handling of a hardware wallet’s recovery backup.

Cold storage generally refers to keeping keys offline, while a hot wallet is connected to an internet-enabled environment. Each approach involves trade-offs in convenience, exposure, and recovery planning. Choose tools that suit your situation, read current documentation, and do not assume that any wallet makes risk disappear. Keep your operating system and browser maintained, use a unique password for important accounts, and be skeptical of urgent investment claims. If a request feels unusual, pause before you approve it.

This page is a static educational mockup. It does not provide actual software, firmware, wallet setup, account support, or financial advice. It does not collect data and it has no operational relationship with SatoshiLabs. Product names, marks, and brands belong to their respective owners and are used here only for identification and educational explanation. If you need product-specific instructions, leave this demonstration and independently locate the organization’s authentic resources. The final responsibility for verifying a site and protecting secret recovery material remains with the person using the wallet.