Skip to main content
Trezor raises wallet passphrase limit to 128 characters
Image for illustrative purposes only. Not a real photo.

Trezor raises wallet passphrase limit to 128 characters

Share

Key points

  • Trezor has increased its hardware wallet passphrase limit from 50 to 128 characters.
  • The change follows a July 2026 Coldcard firmware flaw that exposed wallet backups to offline attacks.
  • The October update also adds Arc network support, mobile Cardano transfers and trade-history exports.

Trezor has doubled its hardware wallet passphrase limit from 50 to 128 characters through its October 2026 software update.

The change follows a July 2026 firmware flaw affecting some Coldcard devices, which exposed wallet backups to offline attacks.

Attackers recreated vulnerable backups and drained funds from thousands of addresses, while strong, unique passphrases protected some users.

The longer limit allows users to create separate passphrase-protected wallets with additional characters in their secret credentials.

Users must update their device firmware to access the 128-character limit, while older firmware retains the previous restriction.

A passphrase creates a separate wallet with its own addresses, balances and transaction history, adding another layer of access protection.

The October release also adds Arc network support, mobile Cardano transfers, expanded Stellar token functions and CSV trade-history exports.

The update gives Trezor users longer passphrases and additional tools for managing digital assets across supported networks.


Frequently asked questions