Trezor lifts password ceiling after Coldcard’s $100M wallet thefts
Summary
Trezor raised the maximum optional wallet passphrase length from 50 to 128 characters in updated Trezor Suite and device firmware; older firmware retains the 50-character limit. The company says passphrases add protection if a recovery phrase is exposed, citing July’s Coldcard firmware flaw, which created insufficiently random recovery phrases. The change comes after Trezor urged customers who bought devices through former reseller CryptoBilis since March to transfer funds to new wallets. An Indonesian customer reported a suspected implant in a Trezor Safe 5 that could capture and transmit screen data, including recovery phrases. Trezor said it had not inspected the device and knew of no related losses.
