Yes. The Trezor Safe 5 is safe to use, and the Safe 7 chip flaw does not apply to it.
The Safe 5 has no TROPIC01 chip. It keeps its secrets in an EAL6+ Secure Element paired with a separate microcontroller. Its trade-offs are no iPhone signing, no Bluetooth and a small screen. We score it 8.4 out of 10.
1. Phishing is the live threat. In September 2026, scammers used a breach at Trezor’s email provider to send fake security alerts. Trezor will never ask for your recovery words. Check alerts in Trezor Suite only.
2. Buy directly from Trezor.io. Trezor says its devices and keys were not touched by its 2026 data incidents. Tampering before sale is still the main risk with resellers, as our report on the Ledger CryptoBilis attack shows.
Wondering about the Safe 7 chip flaw? We answer that in the first section below.
Ease of use 8.4
Value 9.0
- ✓ EAL6+ Secure Element with open-source firmware
- ✓ 1.54-inch color touchscreen with haptic feedback
- ✓ No TROPIC01 chip, so the Safe 7 flaw does not apply
Trezor Safe 5 rating breakdown
Category |
Weight |
Score |
Why |
|---|---|---|---|
Security architecture |
35% |
8.7 |
EAL6+ Secure Element, a separate microcontroller and open-source firmware. No disclosed flaw applies to it. |
Backup and recovery |
20% |
8.5 |
Single-share or multi-share backup, optional passphrase and an optional microSD access secret. |
Ease of use |
20% |
8.4 |
Touchscreen with haptics is easy to use, but the 1.54-inch screen is small. |
Connectivity and compatibility |
15% |
7.0 |
USB-C only. It works with computers and Android, not iPhone signing. |
Value |
10% |
9.0 |
$129 gets an EAL6+ chip and a color touchscreen. |
Overall |
100% |
8.4 |
Very Good |
Does the Safe 7 chip flaw affect the Safe 5?
No. The Safe 5 does not contain the TROPIC01 chip that Ledger’s researchers attacked in the Safe 7. Its key hardware is an OPTIGA Trust M Secure Element plus an STM32U5 microcontroller.
The Safe 5 also escaped the 2025 Safe 3 disclosure. Early headlines listed it, but Trezor clarified that the issue affected only the Safe 3, and that the Safe 5 uses a different chip with a higher security level.
This, however, does not make the Safe 5 unbreakable. Trezor itself says no system is entirely immune to physical attacks. It means no disclosed hardware weakness applies to it today. Our Is Trezor Safe 7 safe? guide explains the Safe 7 flaw in full.
What protects your keys on the Safe 5
The Safe 5 relies on one certified chip, a PIN and your own passphrase. It is a simpler design than the Safe 7, and that simplicity has a benefit: fewer parts that can fail.
The Secure Element
Trezor lists an EAL6+ Secure Element with no NDA, which means outside researchers can discuss it openly. Certification covers that chip only. It does not cover the whole wallet or every firmware release.
PIN and lockout
Per CryptoSlate’s review, the device resets after 16 wrong PIN attempts. Set a long PIN anyway. Trezor’s 2025 guidance said a longer PIN makes physical attacks harder.
Open firmware and a tamper-evident case
Trezor’s core firmware is open source under the GPLv3 license, so researchers can read it. The case is tamper-evident, which helps you spot a device that someone opened before it reached you. Check it when the box arrives.
What you verify on the screen
The 1.54-inch touchscreen shows the amount and address. You confirm on the device, so malware on your computer cannot approve for you. Trezor adds haptic feedback on confirmations.
Limits to know before you buy
The Safe 5 trades convenience for simplicity. Check these four limits against how you use crypto.
- No iPhone signing. It has no Bluetooth, so an iPhone cannot sign with it. Computers and Android phones work over USB-C.
- No battery. It draws power from the cable. That also means there is no wireless radio to worry about.
- A small screen. At 1.54 inches, long contract details are harder to read than on the Safe 7.
- Limited clear signing. Readable contract details cover supported EVM contracts only. Unsupported ones trigger blind-signing warnings, so reject what you cannot read.
If the first limit rules it out, step up to the Safe 7. If you only need a cheap wired signer, see our Ledger Nano S Plus safety guide.
Backup, passphrase and microSD on the Safe 5
Your backup is the wallet. The box holds two 20-word backup cards, a USB-C cable and a start-up guide.
- Single-share (SLIP39). One set of words restores the wallet.
- Multi-share (SLIP39). You split the backup and set a threshold, such as 2 of 3.
- Standard BIP39. Works with many other wallets.
- Passphrase. Creates a separate hidden wallet. It is case-sensitive, and support cannot reset it.
- microSD access secret. Optional. You need the card and your PIN to unlock the device. The card is not a backup.
Never type your backup into a website, an app or an email link. Trezor says it will never contact you by phone or ask for your backup.
Trezor’s track record, and the Safe 5
No hardware flaw disclosed since 2025 applies to the Safe 5. Its recent exposure is customer data and phishing.
Incident |
Did it affect the Safe 5? |
What it means for a Safe 5 owner |
|---|---|---|
Safe 3 supply-chain vulnerability (March 2025) |
No, per Trezor |
Ledger’s Donjon team showed supply-chain protections on the Safe 3 could be bypassed. Trezor says only the Safe 3 was affected. |
TROPIC01 laser-fault flaw (June 2026) |
No |
The flaw is in the Safe 7’s TROPIC01 chip. The Safe 5 does not contain that chip. |
ShipMonk shipping-partner breach (August and September 2026) |
Data only |
Customer names, addresses and phone numbers leaked. Trezor says devices and keys were not affected. |
Email-provider phishing campaign (September 2026) |
Data only |
Fake alerts reached about 347,000 opted-in addresses. Trezor says no other Trezor system was touched. |
The common thread is scammers using leaked data. Treat any message about your wallet as hostile until you verify it in Trezor Suite.
Trezor Safe 5 pros and cons
- CC EAL6+ Secure Element, as Trezor lists it
- No TROPIC01 chip, so the 2026 Safe 7 flaw does not apply
- Open-source firmware that outsiders can inspect
- Color touchscreen with haptic feedback at $129
- Tamper-evident casing, 23 g and travel-friendly
- Single-share, multi-share and passphrase options
- USB-C only: no Bluetooth and no wireless
- iPhone cannot sign transactions
- 1.54-inch screen is small for long contract data
- Clear signing covers only supported contracts
- Suite software uses a restricted source license
- Trezor 2026 customer-data incidents raise phishing risk
Trezor Safe 5 vs Safe 7 and Ledger Nano S Plus
Pick the Safe 5 for open-source firmware at a mid price. Pick the Safe 7 for iPhone and Bluetooth, or the Nano S Plus for the lowest price.
Trezor Safe 5 |
Trezor Safe 7 |
Ledger Nano S Plus |
|
|---|---|---|---|
List price |
$129 |
$249 |
$79 |
Security chips |
OPTIGA EAL6+ and STM32U5 |
TROPIC01, OPTIGA EAL6+ and STM32U5 |
ST33K1M5, CC EAL6+ |
Known chip flaw |
None applies |
TROPIC01 (lab only, hardware) |
None disclosed |
Firmware |
Open source |
Open source |
Partly closed |
Connection |
USB-C only |
USB-C and Bluetooth |
USB-C only |
iPhone signing |
No |
Yes |
No |
Screen |
1.54-inch color touchscreen |
2.5-inch color touchscreen |
1.1-inch OLED, 2 buttons |
Best for |
Open-source fans who use a computer or Android |
Phone-first users |
The lowest price |
Prices are list prices and can change at checkout. Chip details are as each maker lists them. For deeper comparisons, read our Trezor Safe 7 vs Safe 5 guide and our Trezor Safe 5 vs Safe 3 comparison. You can also read our full Trezor Safe 5 review.
Safe 5 setup checklist
- Buy from Trezor.io and check that the tamper-evident case is intact.
- Install firmware through Trezor Suite and let Suite verify it.
- Set a long PIN and store it apart from your backup.
- Write your backup by hand and keep two copies in separate secure places.
- Add a passphrase if you hold a large balance.
- Ignore email alerts. Check security notices in Suite only.
New to cold storage? Start with our guides on what a hardware wallet is and how cold wallets work.
Final verdict: is the Trezor Safe 5 safe?
Yes. The Trezor Safe 5 is a safe hardware wallet, and no disclosed hardware flaw applies to it. It, however, loses points for USB-C only, no iPhone signing, and a small screen. If you use a computer or Android phone and like open-source firmware, it is a strong value at $129. Buy it directly from Trezor.
Trezor Safe 5 FAQ
Sources
- Trezor Safe 5 product page, Trezor
- Trezor discloses potential vulnerability in older Safe 3 wallets, The Block
- Ledger identifies vulnerability in Trezor wallets, Forklog
- Trezor response to the TROPIC01 disclosure, Trezor
- Trezor: 347,000 users targeted in phishing attacks after Brevo breach, BleepingComputer
- Trezor says shipping partner kept customer data, Unchained
Disclosure: MarketsXplora may earn a commission if you buy through our links, at no extra cost to you. Our scores follow our published testing methodology and are not for sale. Crypto assets carry risk, and this article is not financial advice.
About the author
Samson Ononeme is the founder of MarketsXplora, an independent financial education and research platform covering cryptocurrency, forex, brokers, exchanges, trading platforms, and blockchain technology. He has more than 12 years of experience in financial content, with bylines at EarnForex, Kryptomoney, Cryptorunner, and AtoZ Markets. He turns complex financial products into clear, practical information that readers can use when they compare their options. Connect on LinkedIn and X.