TREZOR Wallet Christmas (2017) Update — Release 16.8
Introducing Receive Address Verification in TREZOR Wallet.
The TREZOR Team would like to wish you Merry Christmas and Happy New Year! But, holidays notwithstanding, our team is still hard at work, especially our developers. Thanks to them, today, we are bringing you a small update to make your experience with the TREZOR Wallet even more convenient and safe.
Receive address verification
As this is a small incremental update, there are not many changes on the surface — most affect the logic underneath the application.
The first visual change you will notice is located under the Receive tab— we added receive address verification. Previously, you were not obliged to verify the address before copying it; your addresses were shown to you without a further process. Yes, you could have chosen to verify the authenticity of the address with the Show on TREZOR feature, however, this was an opt-in feature. To make your Wallet experience more secure and battle phishing and address-replacement attack vectors, we have decided to make the feature more straightforward and prominent.
In the new Wallet, your receive addresses will not be fully displayed straightaway. Only their first part will be visible, prompting you to view the address on your TREZOR device. At this point, you should compare and check the address shown in TREZOR Wallet against the address shown on your TREZOR device. You should continue and accept funds to the address only if the addresses match.
In case the address differ, the address on the device is authoritative. Please contact our Support Team with the details immediately, and we will start our investigation.
Show unverified address
Of course, should you be willing to take the risk, you can choose to show an unverified address as well. This option might be useful when you do not have your TREZOR device ready with you, and the Wallet remembers your accounts. However, please be warned that there are many address-replacement malware out there, which may substitute the address shown in the Wallet, causing you to send your coins elsewhere. Opting out from the verification process is at your own risk.
What about third-party addresses?
This entire article concerned itself with your addresses, generated by TREZOR. These are easier to verify, as you hold onto the hardware wallet — your TREZOR. When it comes to sending coins away from your TREZOR, you will have to take a different kind of precaution.
As our documentation advises:
If you wish to make a payment to someone on the Internet, you need to know their address. Unlike TREZOR, computers are not necessarily secure and it is possible that the bitcoin address displayed on your computer screen has been maliciously modified.
To be safe, we recommend confirming the recipient’s bitcoin address through a second channel, such as SMS, a phone call, or an in-person meeting.
About Us
TREZOR Model T is the next-generation hardware wallet, designed with experiences of the original TREZOR in mind, combined with a modern and intuitive interface for improved user experience and security. It features a touchscreen, faster processor, and advanced coin support, as well as all the features of the TREZOR One.
TREZOR One is the most trusted and ubiquitous hardware wallet in the world. It offers an unmatched security for cryptocurrencies, password management, Second Factor, while maintaining an absolute ease-of-use, whether you are a security expert or a brand new user.
SatoshiLabs is the innovator behind some of the most pivotal and influential projects with Bitcoin and cryptocurrencies, mainly TREZOR, the world’s first cryptocurrency hardware wallet, or CoinMap.org, the primary resource for bitcoin-accepting venues.
Links
Documentation: Threats — Phishing
