How to create a hidden wallet on Trezor? (Passphrase feature)

Understanding the Hidden Wallet Concept

1. A hidden wallet on Trezor is not a physically separate device but a cryptographically distinct derivation path generated by combining the original BIP39 mnemonic with a user-defined Passphrase.

2. The device treats each unique Passphrase as an independent seed source, producing entirely new sets of addresses and private keys unrelated to the default wallet.

3. No metadata or traces of the hidden wallet exist on the device unless the exact Passphrase is entered during boot-up or wallet access.

4. Every time the Trezor firmware initializes, it computes a deterministic key using PBKDF2-HMAC-SHA512 with 64,000 iterations, mixing the mnemonic and the ASCII-encoded Passphrase.

5. This computation occurs exclusively inside the secure microcontroller; the raw Passphrase never leaves the device nor gets cached in memory after session termination.

Step-by-Step Activation Process

1. Connect your Trezor Model One or Model T to a computer and open https://trezor.io/start in a supported browser.

2. Navigate to Settings > Security > Passphrase and toggle the feature ON — this action does not require internet connectivity beyond initial firmware verification.

3. When prompted, enter your chosen Passphrase directly on the device screen using the physical buttons to avoid keyboard logging risks.

4. Confirm the input twice on the hardware display — case sensitivity and whitespace are preserved exactly as typed.

5. After confirmation, the device will reboot into the newly derived wallet space, showing zero balance and no transaction history until funds are manually transferred.

Fund Migration Mechanics

1. To move assets into the hidden wallet, initiate a standard send transaction from your default wallet to any receiving address displayed under the Passphrase-enabled session.

2. Each address shown belongs to the BIP44/BIP49/BIP84 derivation tree rooted in the combined mnemonic–Passphrase seed — never reuse addresses across different Passphrases.

3. Transaction fees and confirmation times remain identical to regular transfers since the blockchain layer cannot distinguish between wallets derived from the same mnemonic.

4. Once confirmed on-chain, those funds become irretrievable without that exact Passphrase — even if the device is factory reset or replaced with identical firmware.

5. Repeating the process with a second Passphrase creates a third isolated wallet space, fully decoupled from both prior instances.

Operational Discipline Requirements

1. Never store the Passphrase alongside the recovery seed — physical separation must be enforced, ideally across geographic locations.

2. Avoid predictable patterns such as dictionary words, birthdays, or sequential numbers; instead use grammatically coherent phrases with intentional misspellings and symbol substitutions.

3. Disable auto-fill features in browsers and password managers when entering the Passphrase on desktop interfaces.

4. Perform all Passphrase-related operations only on air-gapped machines or verified Trezor Suite installations signed by SatoshiLabs’ GPG key.

5. Test recovery flow annually by restoring the hidden wallet on a spare Trezor using only the written seed and memorized Passphrase — do not skip this validation step.

Frequently Asked Questions

Q: Can I use the same Passphrase on multiple Trezor devices?A: Yes, but only if they share the identical original mnemonic. Entering the same Passphrase on two devices with different seeds produces unrelated wallet spaces.

Q: Does enabling Passphrase affect my ability to access the default wallet?A: No — leaving the Passphrase field blank during device unlock always restores the original wallet, regardless of how many hidden wallets exist.

Q: What happens if I mistype one character in the Passphrase?A: The device derives a completely different wallet with zero balance and no transaction history — there is no error message or warning.

Q: Is it safe to write down the Passphrase on paper?A: It is acceptable only if stored separately from the recovery seed and protected against fire, water, and unauthorized visual access — consider using metal backup plates for long-term durability.