Trezor Suite Journal → Trezor → Official Trezor Suite Login: One PIN and a Passphrase Unlock Your Crypto Wallet
Trezor Suite doesn't have accounts, so there's nothing to log into the way you'd sign into a website. What people call the Trezor Suite login is really device access: you connect your Trezor, type the PIN on the device itself, and then choose which wallet opens.
Your keys never leave the hardware. The desktop app and the web version at suite.trezor.io only see the public side of your accounts, which is why no username or password exists anywhere in the flow. Once the device is unlocked, you can view, send, receive, buy, sell, and swap coins without ever typing a seed phrase into a browser.
That single design choice is the whole point of self-custody. Access is something you physically hold, not something a server can hand out or take away.
Now that the access model is clear, let's look at the two wallets sitting behind it.
A standard wallet opens from your recovery seed alone. A passphrase wallet (the hidden wallet) needs that same seed plus the exact passphrase you chose, which is why the two can look completely different while living on one device.
You get one PIN, one optional passphrase, and two wallet types visible in one switcher. The PIN protects the device; the passphrase protects the hidden wallet and is never stored on the Trezor at all. Forget it and no support line on earth can bring that wallet back, because the passphrase is not written to firmware, backup, or anywhere else.
| Access step | Where it happens | What it unlocks |
|---|---|---|
| PIN entry | On the Trezor screen | The device itself |
| Passphrase entry | Device or computer keyboard | The hidden wallet |
| Wallet switcher | Top-left of Trezor Suite | Standard and passphrase wallets |
An empty wallet screen usually means one of two harmless things: the passphrase was mistyped, or the network and account you expected isn't enabled yet. Neither one means your funds vanished.
This is the moment where people say "my balance said zero" and start to panic. Here's the thing: every passphrase generates a valid wallet, so a typo doesn't produce an error message. It quietly opens a different, genuinely empty wallet that has never held coins. Trezor Suite cannot tell a wrong passphrase from a correct passphrase that leads to an empty wallet, and that ambiguity is deliberate, because flagging it would leak information about your setup.
Re-enter the passphrase character by character from your written copy, watching for a trailing space or a capitalized letter. Then open the account and network list and confirm the coins you expect are switched on, since a disabled Bitcoin or Ethereum account will also look blank. Only after both checks should you think about anything more drastic.
The worst move is treating a typo as "the app forgot my wallet" and re-running recovery on a wiped device. That path risks real loss for a problem that was never real.
Empty screens are one thing; where you type the passphrase is another, and it matters more than most people realize.
It's weaker than entering it on the device. A passphrase typed into the app passes through your computer's operating system, where malware or a keylogger could capture it, while on-device entry keeps it inside the Trezor.
Support for on-device passphrase entry depends on the model. Trezor Model T and Trezor Safe 3 and Trezor Safe 5 let you type the passphrase directly on the touchscreen. Older devices such as the Trezor One rely on the computer keyboard through an obscured entry method, which is convenient but less private.
If you handle meaningful amounts, an on-device model is worth the upgrade. The Trezor Safe 5 ships with an EAL6+ certified secure element, the same certification tier used for the element in the Safe 3, and that chip is what guards the PIN and the device's own secrets.
Trezor Suite is the official desktop and web application for every current Trezor model, and it's the only place where firmware updates are signed and verified.
The app runs on Windows, macOS, and Linux, and the browser version lives at suite.trezor.io. The current firmware line covers Model T, Model One, Safe 3, and Safe 5, with version numbers published on the official site each release. Always update from inside Trezor Suite rather than a third-party tool, and never from a link someone sends you, because a fake update is one of the oldest tricks aimed at hardware wallet owners.
| Model | On-device passphrase | Secure element |
|---|---|---|
| Trezor Safe 5 | Yes, touchscreen | EAL6+ |
| Trezor Safe 3 | Yes, buttons | EAL6+ |
| Trezor Model T | Yes, touchscreen | No |
| Trezor Model One | No, keyboard only | No |
For regular use, the desktop app is the safer default. The web version is fine for quick checks, and both talk to the same device, but the desktop build avoids browser extensions and phishing pages entirely.
Desktop wins on two counts. It updates itself, so you're never running a stale version with a known bug, and it can't be reached by a lookalike domain. The web app is genuinely useful when you're on a borrowed machine, though you'll still need your Trezor plugged in and your PIN typed on the device screen.
Neither option stores your passphrase. That detail stays with you, on paper, forever.
If you maintain a written passphrase copy and want a second wallet on one device, the hidden setup earns its place. If not, the honest answer is simpler.
It suits people who want a second wallet that only appears with a passphrase, and who will keep an exact written copy somewhere durable. It doesn't suit anyone who'd rather not manage that extra secret.
If you're unwilling to maintain a written passphrase copy, don't use hidden wallets at all. There's no reset, no hint system, and no recovery path, and a forgotten passphrase means the coins in that wallet are gone permanently. A standard wallet with a well-backed-up seed is a perfectly serious setup for most holders.
One honest caveat: the empty-wallet screen has other possible causes beyond a typo or a disabled network, so treat those two as the first checks rather than the complete list. Verify deliberately, fund slowly, and the whole access model becomes boring, which is exactly what you want from a cold storage wallet.
There is no login. Connect your Trezor, enter the PIN on the device, and pick a wallet in the switcher inside Trezor Suite.
The standard wallet opens with your seed alone. A hidden wallet needs the same seed plus the exact passphrase you used before.
Usually a mistyped passphrase or a disabled network. Re-enter it from your written copy and check enabled coins before assuming loss.
No. Every passphrase opens some valid wallet, so the app cannot label one as wrong. Only your written copy is the source of truth.
Yes, after each connection or lock timeout. The PIN is typed on the device screen, never inside a browser.
The wallet switcher at the top-left of Trezor Suite lists open wallets. You can open the standard and passphrase wallets side by side.
Yes. The official desktop and web app is free, and firmware updates are signed and delivered inside Trezor Suite itself.
It is. The Safe 5 supports on-device passphrase entry on its touchscreen and uses an EAL6+ certified secure element for PIN protection.