Forgot password? | Set up your device
Logging into your Trezor account is the gateway to managing your crypto assets securely. It’s essential to understand the principles behind a secure login flow, how to recognize phishing attempts, and what steps you can take to protect your credentials.
Your Trezor login lets you access your account, view dashboard settings, manage devices, and more. A compromised login can allow attackers to manipulate account details, trigger phishing prompts, or mislead you into unsafe operations. Therefore, the login process is guarded by multiple layers of protection: email verification, session controls, device binding, and 2FA (where applicable).
Malicious actors may try to clone login pages or send you deceptive emails that direct to imposter domains. Always verify:
https://trezor.io or another official domain you trust.If something feels off — a wrong domain name, no lock icon, strange popups — navigate manually to Trezor.io/login rather than clicking any link.
For additional protection, Trezor supports 2FA (Time-based One-Time Passwords) which require you to enter a temporary code from an authenticator app (e.g. Google Authenticator, Authy) after entering your password. This ensures that even if someone acquires your password, they cannot log in without the second factor.
When enabling 2FA:
To minimize exposure, Trezor’s login sessions expire automatically after a period of inactivity. We recommend you manually log out after use, especially on shared or public devices. Always close the browser window when done.
Since your login is tied to your email and password, securing those is crucial:
If your email is compromised or inaccessible, contact support immediately. In many cases, identity verification and account recovery procedures will be required. Until access is restored, avoid logging in from unfamiliar devices or responding to unsolicited requests.
While your Trezor hardware device handles your crypto operations, the login password secures your account interface (account settings, device linkage, etc.). 2FA is an extra layer; it does not replace your password but complements it.
If you see repeated failed login notifications, or alerts for new device sign‑ins, treat them seriously. Change your password immediately, revoke active sessions, and review your account activity logs.
No — this is your account login, not the device unlocking itself. The Trezor hardware is unlocked via PIN on the device, not via this web login. The web login gives you access to your Trezor account portal (settings, firmware, device management, etc.).