Skip to main content
Your Trezor PIN is your first line of defense against physical theft. If someone gets hold of your device, the PIN ensures they cannot access your funds without knowing the correct code. Unlike a software password, the PIN is enforced directly by the device hardware — no bypass exists.

​
How PIN Entry Works

Trezor uses a randomized keypad to keep your PIN safe from keyloggers and screen-capture attacks. When you enter your PIN, the device displays a grid of numbers in a shuffled order on its screen. Your computer shows only blank, numbered positions — not the actual digits. You click the positions on your computer that correspond to the numbers shown on the device screen. This means your computer never transmits or records the actual PIN digits. Even if malware is monitoring your keyboard and screen, it cannot reconstruct your PIN from what it observes on the computer side.

​
Setting Your PIN

You set your PIN during the initial device setup at trezor.io/start. Follow these steps:
1

Begin device setup

Connect your Trezor and follow the on-screen instructions in Trezor Suite until you reach the PIN setup step.
2

Choose your PIN

Enter a PIN of 1–50 digits using the randomized keypad. A PIN of 6 or more digits is strongly recommended for meaningful protection.
3

Confirm your PIN

Re-enter the same PIN when prompted to confirm. The device will verify that both entries match before saving.
4

PIN is active

Once confirmed, your PIN is set. You will be required to enter it every time you connect and unlock your Trezor.
Choose a PIN that is long, unique, and not used for any other account or device. Avoid obvious sequences like 123456 or repeated digits. The more random and lengthy your PIN, the harder it is to guess under time pressure.

​
Changing Your PIN

You can update your PIN at any time through Trezor Suite:
1

Open Trezor Suite

Connect your Trezor and unlock it with your current PIN.
2

Navigate to Device settings

Go to Settings → Device → Change PIN.
3

Enter your current PIN

Confirm your identity by entering the existing PIN using the randomized keypad.
4

Set and confirm the new PIN

Enter your new PIN, then re-enter it to confirm. The device saves the new PIN immediately.

​
Wrong PIN Attempts

Trezor applies an escalating time penalty for each incorrect PIN entry. After the first few wrong attempts, the device requires you to wait before trying again — and that wait time grows exponentially with each subsequent failure. This makes brute-force attacks impractical even with physical access to the device. After 16 consecutive incorrect PIN attempts, the device performs a factory reset and wipes all data stored on it.
After the device wipes itself, your funds are not lost — but you must use your recovery seed to restore your wallet. Without the recovery seed, access to your funds is permanently gone. Store your seed securely before this situation ever arises.
Technically, PIN protection can be disabled in Trezor Suite under Settings → Device, but this is strongly discouraged. Without a PIN, anyone who physically obtains your Trezor can immediately access your funds. There is no fallback protection if the device is lost or stolen. Keep your PIN enabled at all times.
If you forget your PIN, you will eventually trigger the 16-attempt wipe. Once wiped, you can restore your wallet using your recovery seed. See the Lost PIN recovery guide for step-by-step instructions. Make sure your recovery seed is safely stored before you need it.