0

I'm trying to figure out how to use a Trezor for my needs. I'd like to have different "layers" of security, so my plan is to use this setup (less secure on top):

  1. Online wallet for every day usage (1%)
  2. Trezor with passphrase A connected to online computer (19%)
  3. Trezor with passphrase B connected to offline computer (80%)

My question is: does it make sense to separate layers 2 and 3 in online and offline computers? I'm assuming that the Trezor does not store the passphrase, so by using passphrase B only in a secure offline computer to sign transactions this layer is much more secure.

Thanks!

1

No, you can use your Trezor for your everyday use with a usual online computer (or even a computer that has malware). Connecting your Trezor to your computer oftenly doesn't mean it is not secure anymore / it is less secure.

  • A malware could steal your passphrase in an online computer, so in theory it should be more secure to use a separate passphrase for larger amounts and use this second passphrase only in an offline computer. Don't you agree? – Paul Sep 19 '17 at 18:36
  • 1
    @Paul Everything is done on your Trezor, your computer never sees the private keys / mnemonics. So it doesn't matter. If you still have doubts, you can chat with Trezor devs on gitter.im/trezor/community – MCCCS Sep 20 '17 at 13:00
  • I understand the computer never sees the private key or seed, however it's possible that it's extracted from the device (e.g. medium.com/@Zero404Cool/… ), so I believe it's wise to protect the passphrase. – Paul Sep 20 '17 at 16:18
  • The fact that that particular article is supposedly fake doesn't mean the private data cannot be extracted. It's fair to assume it could be extracted with physical access to the device. – Paul Sep 20 '17 at 19:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.