Welcome — power on with confidence
Thank you for choosing the Trézor hardware ecosystem. This guide walks you through powering up your device, completing the secure initial setup, and understanding essential terminology. We use bright, mixed colour accents and clear steps so you can follow confidently — whether you are a first-time user or revisiting settings.
Keep your recovery material offline, follow the steps in order, and never share secret phrases or private keys. If you are deploying the device for institutional or multi-user use, consult your organization's security policy in parallel.
Quick-start checklist
Ensure the seal is intact and accessories (USB cable, welcome card, recovery card) are included. If anything looks tampered with, stop and contact official support channels.
Plug the device into a reliable power source or into your computer using the supplied cable. Wait for the boot screen and a readiness message.
The device will show a model splash, firmware version prompt, and an option to set a PIN and generate a recovery phrase. Always confirm on the device's screen — never trust prompts shown only on a computer.
Write the recovery words only on the supplied card or another secure medium. Store multiple copies in separate secure locations. Do not photograph, screenshot, or type them into a cloud-synced document.
Use official client software at the recommended web address, connect, and verify that device and client firmware versions match expected values. Confirm device fingerprints displayed match the client.
Step-by-step: First-time startup (detailed)
- Boot & welcome — Press the device power button (if present) or connect with USB. The screen will show a welcome logo and device information. Verify this visually and compare the sequence to the printed quick-start sheet.
- Set a PIN — Choose a PIN that is memorable yet not easily guessable. Use 6+ digits if supported. The PIN is stored encrypted on the device; it prevents local theft but does not substitute for your recovery phrase.
- Generate recovery phrase — The device will create a random recovery phrase (usually 12–24 words). Write each word in order and keep the card safe. The device will ask you to confirm some words to ensure correct recording.
- Firmware verification — If prompted, update firmware only through the official channels. Some devices require a verification step; always read the fingerprint and ensure it matches what's displayed in the official client software.
- Pair with companion app — Open the official Trézor web or desktop client, choose "connect new device", and follow the on-screen instructions. Approve pairing on the device screen. Never accept pairing requests you didn't initiate.
- Secure storage — Place the written recovery phrase into a fireproof, waterproof storage method. Consider distributing copies in geographically separated, trusted locations for redundancy.
Troubleshooting & safety
Problems can usually be resolved by carefully following verification steps. If the device won't boot, try a different cable and port first. Persistent hardware problems should be addressed by official support — do not accept unsolicited repair offers.
Security notes: never reveal the recovery phrase, and treat phishing attempts with suspicion. If someone asks you to reveal your recovery words to restore funds or to confirm identity, it's a scam.
Advanced configuration
After initial setup, explore optional features such as passphrase-protected wallets, hidden wallets, and multiple account management. Passphrases add plausible deniability but increase complexity; document your passphrase strategy and test recovery thoroughly.