Trezor PIN vs Passphrase: What Is the Difference and Why Use Both

02 September 2026

A Trezor hardware wallet uses two separate security layers: the PIN and the passphrase. They are not the same thing. They protect different things in different ways. Understanding the difference matters.

The PIN is a short numeric code, typically 4 to 9 digits long. You enter it directly on the Trezor device every time you connect it to a computer or phone. Its job is straightforward: stop an unauthorized person from using the physical device.

If someone steals your Trezor, they cannot access your funds without the PIN. The device has a built-in escalation mechanism. After a few wrong guesses, the delay between attempts grows longer. After enough failures, the device wipes itself completely. This makes brute-force attacks impractical. The PIN protects the device itself.

The passphrase is something else entirely. It is an optional, advanced feature. You enable it in the Trezor settings. Once enabled, the device asks for the passphrase after the PIN is entered correctly.

Here is the critical distinction: the passphrase is not a password for the device. It is a wallet generator. Every unique passphrase you enter creates a completely separate set of accounts. These accounts are derived from the same master seed phrase, but they are cryptographically distinct. Think of the seed phrase as the master key to a building. The passphrase selects which floor you enter. Each floor is a different wallet.

This means you can have one seed phrase and multiple passphrases, each opening a different hidden wallet. A common setup is to use a regular passphrase for daily use and a different one for savings. No one can tell from the outside how many passphrase-protected wallets exist, or which one holds funds.

Why use both? The security model is layered.

The PIN stops a thief from using your Trezor. If they grab the device, they face the PIN lockout and wipe. Without the PIN, the device is a brick.

The passphrase protects your funds even if your seed phrase is exposed. Consider a scenario: someone finds your written seed phrase. They can restore it into any wallet software and steal everything from the standard accounts. But if you used a passphrase, the standard accounts (entered with no passphrase or an empty passphrase) might contain only a small amount as a decoy. The real funds live in accounts protected by the passphrase. The thief has the seed but not the passphrase. They cannot access those hidden wallets.

This is a powerful protection against physical seed theft, social engineering, or a compromised backup.

There is a common misconception that a passphrase is just a stronger password for the device. It is not. The PIN is the device password. The passphrase is a wallet derivation key. You can change the PIN without affecting your wallets. If you forget or lose the passphrase, those wallets are permanently inaccessible. There is no recovery. The seed phrase alone is not enough.

Best practice for most users: set a strong PIN, enable the passphrase feature, and use a passphrase that is memorable but not written down with the seed. Store the passphrase separately. Test the setup with a small amount first.

The Trezor wallet selection - Model One, T, Safe 3, or Safe 5 - does not change how PIN and passphrase work. All models support both features. The difference is in the hardware interface and screen size, not the security logic.

In short: PIN protects the device from physical theft. Passphrase protects your funds from seed theft. Use both. They solve different problems. One without the other leaves a gap.

Back to trezor