Trezor lifts password ceiling after Coldcard’s $100M wallet thefts

Trezor cited July’s Coldcard attacks, in which strong passphrases helped protect some users whose wallet recovery information was compromised.

Hardware wallet maker Trezor has increased the maximum length of optional wallet passphrases from 50 to 128 characters. 

On Sunday, Trezor said the change is available in its Trezor Suite with updated device firmware. Older firmware still limits passphrases to 50 characters. 

According to Trezor, a passphrase acts like an additional password that users set alongside their wallet’s recovery phrase. An attacker who obtains the recovery phrase would still need the correct passphrase to access funds in that wallet.

Read more