Trezor lifts password ceiling after Coldcards $100M wallet thefts

Abstract:Trezor raised its wallet passphrase limit from 50 to 128 characters, citing Coldcard attacks and the role of passphrases in protecting compromised wallets.

Hardware wallet maker Trezor has increased the maximum length of optional wallet passphrases from 50 to 128 characters.

On Sunday, Trezor said the change is available in its Trezor Suite with updated device firmware. Older firmware still limits passphrases to 50 characters.

According to Trezor, a passphrase acts like an additional password that users set alongside their wallets recovery phrase. An attacker who obtains the recovery phrase would still need the correct passphrase to access funds in that wallet.

Trezor cited the Coldcard attacks in July, when a firmware flaw caused some devices to generate recovery phrases with insufficient randomness, allowing attackers to reconstruct them. Trezor said strong, unique passphrases protected some affected users.

The update follows a separate warning involving Trezors own devices.

On Friday, the company advised customers who bought wallets from former authorized reseller CryptoBilis since March to move their funds to new wallets.

An Indonesian customer reported a suspected implant inside a Trezor Safe 5 that could capture on-screen information, including recovery phrases, and transmit it over a cellular network. Trezor said Friday it had not examined the device and had received no reports of related losses.

Related: FBI blames North Korea for record $6.3B Binance hack

Disclaimer

The views in this article only represent the author's personal views, and do not constitute investment advice on this platform. This platform does not guarantee the accuracy, completeness and timeliness of the information in the article, and will not be liable for any loss caused by the use of or reliance on the information in the article.
Previous Post

Hong Kong plans stablecoin trials for tokenized government debt

Next

BTC heads into US midterm showdown: Three things to know in Bitcoin this week