Trezor Expands Passphrase Length to 128 Characters Amid Security Concerns

Trezor Enhances Wallet Security with Longer Passphrases

In response to a series of security incidents, hardware wallet manufacturer Trezor has announced an update that increases the allowable length for optional wallet passphrases from 50 characters to an impressive 128 characters. This enhancement, detailed in a report published on Sunday, comes as part of the latest firmware available on Trezor's Suite. It's important to note that users with older firmware will still face the previous 50-character limit.

Background on Security Incidents

The decision to extend the character limit for passphrases is closely linked to alarming events that occurred in July, when certain Coldcard wallets were compromised. In that incident, a flaw in device firmware led to the creation of recovery phrases that lacked adequate randomness, enabling malicious actors to potentially reconstruct them. Nonetheless, many users who employed robust and unique passphrases managed to safeguard their assets despite the breach, which highlights the importance of this additional layer of security.

Recent Alerts and Vulnerabilities

Additionally, Trezor recently issued alerts concerning the security of its own devices. On Friday, the company cautioned customers who had purchased wallets from a previously authorized reseller, CryptoBilis, since March, urging them to transfer their assets to new wallets. This warning followed a report from an Indonesian user claiming that their Trezor Safe 5 device might be compromised with a hidden implant capable of capturing sensitive on-screen data, including recovery phrases, and sending this information via cellular networks.

While Trezor has not yet examined the suspect device and has no confirmed reports of financial loss, the company remains vigilant in addressing these vulnerabilities.

Commitment to Security

The update and warnings illustrate Trezor’s commitment to security, especially in light of significant hacking incidents within the cryptocurrency sphere, including the recent FBI accusations linking North Korea to a $6.3 billion hack of Binance. As cryptocurrency users become increasingly targeted, robust security measures like enhanced passphrases are crucial for protecting digital assets.