Trezor hidden wallet vs. standard wallet: when should you use each?

06 November 2026

A Trezor hidden wallet and a standard wallet differ in how they are accessed and what they protect. Use a standard wallet for everyday transactions and general holdings. Use a hidden wallet when you need plausible deniability - a separate, secret account that exists only after you enter a passphrase, and that cannot be detected by anyone who gains access to your device and PIN alone.

What a standard wallet is

A standard Trezor wallet is the one you create during initial setup. It is derived directly from your recovery seed (the 12, 18, or 24-word backup phrase). To access it, you enter your PIN on the device. This wallet holds the first set of addresses and keys generated from your seed.

• Visibility: The standard wallet is always present. Anyone who steals your device and guesses or extracts your PIN can see its balances and transaction history.
• Use case: Daily spending, receiving payments, and holding the majority of your funds that you are comfortable managing with PIN-only security.

What a hidden wallet is

A hidden wallet is an additional wallet created from the same recovery seed, but with an extra secret component: a passphrase (sometimes called a "25th word" or BIP39 passphrase). This passphrase is a word, phrase, or string of characters you choose. It is not stored on the device and is never written into the recovery seed backup.

• How it works: The Trezor combines your recovery seed with the passphrase to generate an entirely separate set of keys. Enter a different passphrase (or no passphrase) and you get a different wallet. The hidden wallet does not exist on the device until you enter the passphrase.
• Visibility: Without the passphrase, the hidden wallet is invisible. An attacker who has your device, your PIN, and even your recovery seed cannot see or access the hidden wallet unless they also know the passphrase.
• Use case: Storing larger sums you want to protect from physical coercion, or funds you want to keep separate from your everyday wallet for privacy reasons.

When to Use a Standard Wallet

Use the standard wallet for funds you need to access regularly and that you are willing to risk losing if an attacker obtains your PIN. Examples:

• Pocket money or small balances for daily transactions.
• Funds you plan to spend or trade soon.
• Testing new addresses or receiving small payments from acquaintances.

The standard wallet is convenient because you do not need to remember or enter a passphrase each time you use it.

When to Use a Hidden Wallet

Use a hidden wallet when the consequences of someone forcing you to reveal your PIN are serious. The hidden wallet provides plausible deniability: you can honestly show a thief or an official that your standard wallet has only a small balance, while your main funds remain secret.

• Coercion scenarios: If someone compels you to unlock your Trezor, they see only the standard wallet. The hidden wallet remains hidden unless you also reveal the passphrase.
• Large holdings: Many users keep the bulk of their cryptocurrency in a hidden wallet and only a small amount in the standard wallet.
• Separation of concerns: You can use different passphrases for different purposes - for example, one passphrase for savings, another for business funds, and a third for experimental coins. Each passphrase creates an independent hidden wallet.

How to Set Up a Hidden Wallet

1. Choose a passphrase. Make it long, random, and memorable. Do not store it digitally. Write it on paper stored separately from your recovery seed. A passphrase like "correct-horse-battery-staple-1972" is far stronger than "password1".
2. In Trezor Suite, enable passphrase entry. Go to Settings > Device > Passphrase and set it to "On device" (recommended) or "On host." "On device" means you type the passphrase on the Trezor's screen, which is more secure.
3. When you unlock your Trezor with your PIN, you will be prompted to enter the passphrase. Enter it on the device using the on-screen keyboard.
4. After entering the passphrase, Trezor Suite shows the wallet derived from that passphrase. This is your hidden wallet. It will appear with a different wallet name or label than your standard wallet.
5. Send funds to an address from this hidden wallet. Those funds are now protected by both your seed and your passphrase.

To access the hidden wallet again, you must repeat the passphrase entry each time. There is no "switch" to toggle between wallets - the device derives the wallet on the fly.

Risks and Limitations

• Forgetting the passphrase is irreversible. There is no recovery mechanism. If you lose your passphrase, the hidden wallet and all its funds are gone permanently - even if you have the recovery seed.
• Passphrase entry is tedious. On button-based Trezors (Model One, Safe 3), typing a long passphrase on the small screen takes time. On touchscreen models (Model T, Safe 5), it is faster but still slower than PIN-only access.
• No backup of the passphrase. Your recovery seed backup covers only the standard wallet. The hidden wallet is not part of that backup. You must back up the passphrase separately.
• Do not reuse the same passphrase across multiple seeds. Each combination of seed + passphrase is unique. If you lose your seed and your passphrase is the same across devices, you still lose everything.

Summary

If you only hold a small amount of cryptocurrency and are not concerned about physical coercion, a standard wallet is sufficient. If you hold significant value or worry about being forced to give up access, set up a hidden wallet immediately and keep your standard wallet balance low.

Back to trezor