How to factory reset a Trezor device? (System wipe)

Factory Reset Initiation Procedure

1. Connect the Trezor device to a computer using a certified USB cable and launch Trezor Suite.

2. Ensure the device is unlocked with the correct PIN before proceeding; failure to authenticate will block access to advanced options.

3. In Trezor Suite, navigate to the wallet dashboard and click the gear icon located in the top-right corner.

4. Select Advanced Settings from the dropdown menu, then scroll down to locate the Erase Device button.

5. Click the button and confirm the action on the device screen by pressing the right button twice—this triggers irreversible firmware-level erasure.

NORCOW Storage Layer Behavior During Erase

1. The erase command forces NORCOW to execute a full-sector purge across all active flash blocks, including those marked as reserved or wear-leveled.

2. Each physical sector undergoes atomic write-erase cycles synchronized with index pointer updates to prevent partial state persistence.

3. Versioned metadata headers are invalidated using NORCOW_MAGIC checksum removal, rendering prior key material unrecoverable even via chip-off analysis.

4. Compact() routines are bypassed during factory reset, eliminating any chance of data migration or shadow copy retention.

5. Power-loss resilience mechanisms remain active throughout the process, ensuring no intermediate garbage state survives unexpected disconnection.

Post-Erase State Validation

1. After completion, the device reboots into unconfigured mode displaying only the lock icon and prompts for new setup.

2. All stored credentials—including PIN, passphrase slots, and account labels—are purged from volatile RAM and persistent NOR memory.

3. The bootloader verifies integrity of the erased storage region before loading the initialization firmware image.

4. No residual entropy or cryptographic artifacts remain in flash buffers, OP areas, or ECC correction tables.

5. Device serial number and hardware ID persist solely for warranty and diagnostics—not linked to any user key material.

Recovery Seed Independence

1. Factory reset does not affect the recovery seed itself—it exists outside device memory as a user-managed mnemonic phrase.

2. Users must retain their 12- or 24-word seed offline; no backup is generated or transmitted during the wipe.

3. A new seed cannot be derived from the wiped device—the original mnemonic remains the sole source of private key reconstruction.

4. If the seed was never recorded, funds become permanently inaccessible after reset, regardless of hardware functionality.

5. Recovery attempts using brute-force tools against erased devices fail due to absence of encrypted key containers and zeroized derivation paths.

Frequently Asked Questions

Q: Can I recover funds after performing a factory reset without the seed? A: No. The reset removes all cryptographic material stored on-device. Without the original recovery seed, private keys cannot be regenerated.

Q: Does factory reset remove firmware updates permanently? A: No. Firmware binaries reside in read-only sections unaffected by NORCOW erase operations. The device retains its current version unless manually upgraded post-reset.

Q: Is there any difference between erasing via Trezor Suite versus bootloader mode? A: Yes. Suite-initiated erase uses authenticated host commands and full NORCOW coordination. Bootloader mode performs low-level flash partition wipe but skips some metadata validation steps.

Q: Will my device still function normally after factory reset? A: Yes. Hardware components remain fully operational. The device enters fresh setup mode identical to out-of-box behavior, ready for new seed generation or restore.