Trezor Model One

The Trezor Model One is the original Trezor, a two-button hardware wallet that Trezor’s fundamentals guide says launched on 29 July 2014 “as the world’s first hardware wallet”. It is discontinued: Trezor’s support notice says it left the Trezor e-shop on 8 January 2026, with official resellers selling remaining stock “for a limited time”. The Model One page says its “spirit lives on in the Trezor Safe 3”. Current models: Safe 3, Safe 5 and Safe 7.

Is the Trezor Model One still supported?

Yes, with limits. The notice promises basic maintenance until at least 2031 and critical security updates until at least 2036, and says the device remains “safe to use”. It promises new coin support until at least 2031 for the Model T, but makes no such promise for the Model One. On post-quantum cryptography it says “it’s uncertain whether future standards will be fully supported due to hardware limitations.” Trezor’s firmware changelog lists Model One firmware 1.14.1, released on 18 March 2026.

Who is the Trezor Model One for now?

Mainly people who already own one. For a new device, Trezor points to the Safe 3. For a Model One bought from a reseller, Trezor’s authentication guide says to check the two silver seals on the packaging and notes that every Trezor ships without firmware, installed during setup.

It is a weaker fit if you want:

• a secure element: it has none (see below);
• to type secrets on the device: passphrases and, in standard mode, recovery words are entered on the computer;
• SLIP39 backups: Trezor lists BIP39 only;
• USB-C or wireless: it uses Micro USB;
• multisig inside Trezor Suite: Trezor says Suite does not support multisig wallets directly; it works through compatible third-party software.

How do you use a Trezor Model One?

Trezor’s Model One page lists a 0.96-inch monochrome OLED, a two-button pad and a 60 x 30 x 6 mm body weighing 12 g. Its hardware page gives an ARM Cortex-M3 processor at 120 MHz and a Micro USB port. The authentication guide says there is no battery.

With only two buttons, much of the input happens on the computer:

• PIN: Trezor’s PIN page says the Model One uses “a blind matrix”, a grid of dots on the computer screen. The device display shows where the randomly arranged numbers sit, and you click the matching tiles.
• Passphrase: the passphrase guide says “Trezor Model One has no on-device entry”, so you type it in Trezor Suite, and warns that anything typed on a compromised computer or phone can be captured.
• Recovery: words are entered on the computer. Trezor’s advanced recovery instead has you enter letters on a PIN-pad whose layout keeps changing, so the computer never knows which letter you chose.

Does the Trezor Model One have a secure element?

No. Trezor’s Safe 3 FAQ says that when the Model One and Model T were designed, available secure elements required non-disclosure agreements that conflicted with its open-source approach, so it relied on alternatives such as the passphrase and Shamir backup, though the Model One itself has no Shamir option.

On 31 January 2020 Kraken Security Labs published an attack on both models: voltage glitching extracts the encrypted seed, then the PIN is brute-forced, with about 15 minutes of physical access. Kraken wrote the flaw was difficult to fix “without a hardware redesign” and recommended a BIP39 passphrase, which is not stored on the device. Trezor’s PIN page adds that 16 wrong PIN attempts reset the device and erase the wallet.

Is the Trezor Model One open source?

The device software is: Trezor’s security page says it “has always been open-source” and can be verified and built from the public code. So is the hardware design: Trezor’s hardware page says “Trezor device hardware is open-source” and points to the Model One files in the trezor-hardware repository, whose README dual-licenses its contents under the GNU AGPL v3 and the CERN Open Hardware Licence v2 (strongly reciprocal). We have not assessed how complete those files are.

How does Trezor Model One backup work?

The Model One uses BIP39 only. Trezor’s backup guide says 24 words are the default because “Model One relies on entering words on your computer for recovery.” The product page lists a 12-word backup too, but says it “Requires an advanced setup”, and the 1.14.1 changelog in Trezor’s firmware release index says the firmware now enforces advanced recovery for phrases shorter than 24 words.

The guide’s compatibility table lists no SLIP39 format for the Model One. A BIP39 phrase can be restored in other compatible wallets, and an optional passphrase is supported; losing that passphrase means losing the funds behind it. See our seed phrase guide.

What coins does the Trezor Model One support?

Our dataset has no verified count. Trezor’s coin list can be filtered to the Model One. The same release index lists a Bitcoin-only build of Model One firmware.

Has the Trezor Model One been hacked?

The security history below this article includes the 2020 Kraken research and the January 2026 discontinuation, plus brand-level incidents that were not device flaws: a January 2024 support-portal breach, a June 2025 phishing campaign and a shipping-provider breach that Trezor disclosed in August 2026, exposing names and contact and shipping details. Trezor says hardware wallets, private keys and backups were not affected.

What replaced the Trezor Model One?

The Safe 3, which Trezor’s Safe 3 product page listed at $59 on 14 October 2026. It keeps two buttons and a 0.96-inch monochrome screen, and adds USB-C, an EAL6+ certified secure element and SLIP39 backups. The step up is covered in Trezor Safe 3 vs Safe 5; for other makers see Ledger vs Trezor or the wallet database.

What we could not verify

• Supported coins. We found no current count for the Model One.
• Post-quantum support. Trezor itself says this is uncertain for the Model One.
• Basic maintenance. Trezor does not define what the 2031 commitment covers.
• Hardware design files. Trezor publishes them; we have not assessed their completeness.
• Country of manufacture. Our record (Czech Republic) rests on a February 2025 forum reply, not a product page.