How to enable Shamir Backup on Trezor Model T? (Multi-seed security)

Shamir Backup Overview

1. Shamir Backup is a cryptographic method based on Shamir's Secret Sharing scheme, allowing a single recovery seed to be split into multiple distinct shares.

2. Each share is individually useless; only a predefined threshold number of shares—such as 3 out of 5—can reconstruct the original seed.

3. This approach eliminates the single point of failure inherent in traditional 12- or 24-word backups.

4. Trezor Model T supports Shamir Backup starting from firmware version 2.3.0, released in late 2020 and continuously refined through subsequent updates.

5. The feature is exclusive to Trezor Model T and Trezor Safe 3; it is not available on Trezor One or older devices.

Prerequisites for Activation

1. A Trezor Model T with firmware version 2.4.4 or higher must be installed—verified via Trezor Suite desktop or web application.

2. Physical access to the device’s touchscreen interface is required for confirmation steps during setup.

3. At least two separate, durable storage locations must be prepared—such as stainless steel seed cards or engraved metal plates—to hold individual shares.

4. The user must have completed any existing wallet initialization or recovery before enabling Shamir Backup, as it cannot be retrofitted onto an already-initialized device without wiping.

5. A stable internet connection is needed only to download the latest firmware and verify the backup configuration—not to generate or store shares.

Step-by-Step Setup Process

1. Connect the Trezor Model T to a computer and open Trezor Suite; ensure the device is unlocked and recognized.

2. Navigate to Settings → Security → Shamir Backup, then click “Enable”.

3. Choose the desired threshold and total share count—options include 2-of-3, 3-of-5, or 4-of-7 configurations.

4. Confirm the selection on the device screen using the touchscreen; the device will begin generating shares immediately.

5. Write down each share exactly as displayed—case-sensitive, with no omissions or transpositions—and store them separately.

Verification and Usage

1. After recording all shares, Trezor Suite prompts a verification step: select any threshold number of shares and enter them manually to confirm reconstruction works.

2. During wallet recovery, the device will request shares one by one until the threshold is met; no order is required.

3. If a share is damaged or lost, replacement is impossible—the remaining shares must still meet the threshold to recover the wallet.

4. Each share contains no identifiable metadata linking it to the original wallet or other shares, preserving anonymity across storage locations.

5. Firmware updates do not affect existing Shamir shares; they remain valid unless the device undergoes full reset.

Frequently Asked Questions

Q: Can I convert an existing 24-word backup into a Shamir Backup without losing access to funds? No. Enabling Shamir Backup requires initializing a new wallet. Funds must be transferred to the newly created Shamir-secured wallet after setup.

Q: Is Shamir Backup compatible with third-party software like Electrum or MetaMask? No. Shamir shares are specific to Trezor’s implementation and cannot be imported into external wallets or browser extensions.

Q: What happens if I mix up share numbers or mislabel them? Labels are purely for user reference. The cryptographic content of each share is self-contained; mislabeling does not prevent successful recovery as long as the correct threshold number is provided.

Q: Does Shamir Backup support passphrases? Yes. A passphrase can be added during Shamir initialization, and it must be entered each time shares are used for recovery—functioning independently of the share set.