What's the difference between a standard and hidden wallet on Trezor Model T?

Understanding Wallet Types on Trezor Model T

The Trezor Model T supports both standard and hidden wallets, each serving a distinct purpose in securing digital assets. These features are built into the device’s firmware to offer users layered control over privacy and access.

Differences Between Standard and Hidden Wallets

1. A standard wallet is the primary wallet created during the initial setup of the Trezor Model T. It uses the default 12- or 24-word recovery seed and is accessible whenever the device is unlocked with the correct PIN. This wallet is intended for everyday use and straightforward management of cryptocurrencies.

   2. A hidden wallet, also known as a duress wallet, is an additional wallet stored on the same device but protected by a secondary passphrase. This passphrase acts as a secret key that, when entered during device unlock, reveals access to a completely separate set of accounts and balances. Without knowledge of this passphrase, the existence of the hidden wallet remains undetectable.

   3. The security model of the hidden wallet relies on plausible deniability. If someone is coerced into revealing their wallet access, they can provide the standard PIN and primary passphrase—revealing only the standard wallet—while keeping the hidden wallet’s contents secure and invisible.

   4. Both wallets derive their keys from the same root seed, but the addition of the secondary passphrase creates a unique cryptographic path. This means the private keys for the hidden wallet are entirely different from those of the standard wallet, even though they originate from the same recovery phrase.

   5. Setting up a hidden wallet requires deliberate action during device use. Users must manually enable the passphrase feature in the Trezor Suite or compatible interface, then input a custom passphrase to generate the isolated wallet environment. Once activated, switching between wallets is done simply by entering different passphrases at login.

   Security Implications of Passphrase Usage

   Enabling a passphrase introduces a powerful layer of security but also increases responsibility for the user.

   1. The passphrase is not stored anywhere—not on the device, not in backups. Losing it means permanent loss of access to the hidden wallet and all funds within. There is no recovery mechanism, unlike the standard recovery seed.

   2. An incorrect passphrase generates a different, valid wallet that appears empty. This protects against brute-force attacks because each wrong attempt leads to a plausible but empty account, making it impossible for an attacker to know if they are close to the correct combination.

   3. Users must remember that disabling the passphrase option in the settings will prevent access to any hidden wallets. The device defaults back to the standard wallet only, which can lead to confusion if the user forgets they enabled a hidden wallet.

   4. Physical access to the Trezor device combined with knowledge of the passphrase fully compromises the hidden wallet. Therefore, the passphrase should never be written down in proximity to the device or recovery seed.

   5. The strength of the passphrase directly affects security. Simple or commonly used phrases can be vulnerable to dictionary attacks. It is recommended to use long, randomly generated passphrases for maximum protection.

   User Experience and Practical Considerations

   Managing multiple wallets on a single device offers flexibility but demands careful planning.

   1. Users often allocate the standard wallet for small, frequently accessed funds while reserving the hidden wallet for long-term savings or high-value holdings. This separation helps minimize risk exposure.

   2. Transactions from the hidden wallet appear identical on the blockchain. There is no technical distinction that reveals the source wallet, preserving anonymity across both environments.

   3. Backup procedures do not change—the original recovery seed remains sufficient for restoring both wallets, provided the passphrase is remembered. However, the seed alone cannot restore the hidden wallet without its associated passphrase.

   4. When using third-party services such as exchanges or lending platforms, users must ensure they are withdrawing to addresses belonging to the correct wallet instance. Mistakenly sending funds to an address in the wrong wallet (e.g., standard instead of hidden) can result in loss if that wallet is unused or inaccessible.

   5. Firmware updates and device replacements require re-entering the passphrase to regenerate the hidden wallet. The process remains consistent across devices, allowing migration without exposing sensitive data.

   Hidden wallets offer a critical privacy safeguard by enabling undetectable asset storage behind a secret passphrase.

   The standard wallet serves as the default, easily accessible interface for routine transactions.

   Passphrases transform a single hardware device into multiple independent financial identities.

   Frequently Asked Questions

   Can I have more than one hidden wallet on a Trezor Model T?Yes, technically there is no limit to the number of hidden wallets. Each unique passphrase generates a new wallet, so users can create multiple hidden wallets by using different passphrases.

   What happens if I forget my passphrase?There is no way to recover a forgotten passphrase. The funds in the corresponding hidden wallet become permanently inaccessible. The recovery seed alone cannot restore access without the correct passphrase.

   Is the hidden wallet feature available on other Trezor models?Yes, the passphrase-based hidden wallet functionality is supported on both the Trezor Model T and the Trezor Model One, as long as the firmware is up to date.

   Does using a hidden wallet affect transaction fees or speed?No, transaction costs and confirmation times depend solely on network conditions and fee settings. The origin wallet—standard or hidden—has no impact on blockchain processing.