Top all-time · #2587
Trezor Blog
Company blog · blog.trezor.iosecurityhardware
Trezor Blog is the company blog at blog.trezor.io, writing about security and hardware. Since 2016, 30 different Hacker News readers have linked it 38 times, most often “OpenSSH with FIDO2 and Trezor”. It is still writing: the last post was on 2026-02-05, and you can follow it by feed.
Too few sampled comments (19) to say how often HN recommends it.?
Why HN links it
HN readers link Trezor's blog to explain hardware wallet features such as seed backup, U2F and password management, and to support points about bitcoin security, firmware updates and fake devices.
Summarised by Claude from a sample of 19 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- OpenSSH with FIDO2 and Trezor3 people · 4 mentions · first linked 2020-02-25
- /secure-two-factor-authentication-with-trezor-u2f-e940fd5a60af3 people · 3 mentions · first linked 2017-02-13
- SatoshiLabs Response to Ledger's MITBitcoinExpo Findings2 people · 2 mentions · first linked 2019-03-12
- TREZOR Firmware Security Update – 1.5.22 people · 2 mentions · first linked 2017-08-16
- Why You Should Never Use Google Authenticator Again2 people · 2 mentions · first linked 2018-01-16
What Hacker News says?
A 2012 Bitcoin hack victim was none other than a lead developer of Bitcoin. Back then, they ran a Bitcoin faucet on it that gave out a paltry 0.25 Bitcoin at a time. I never bothered to jump through those hoops for like a dollar (now about US$10k): http://gavintech.blogspot.com/2012/03/bitcoin-faucet-hacked.... He only lost 5 bitcoin (like $20 then or $200k today), but another lost 3100, or around… $124 million toda…
Comment linking /how-trezor-was-born-from-a-hacking-attack-that-affected-slush-pool-7a538f03fd8f
on “Akamai to Acquire Linode”Submitted OpenSSH with FIDO2 and Trezor as a story · 6 points
HN discussionI was wondering the same thing - here's an article I found that describes both approaches. Not being in the cryptography space myself I can't comment on how accurate it is, but passes my engineering smell test. https://blog.trezor.io/why-you-should-never-use-google-authe... Edit - sorry that this is really an ad for the writer's products. On the other hand, there's a hell of a bounty for proving them insecure / untr…
Comment linking /why-you-should-never-use-google-authenticator-again-e166d09d4324
on “I read the federal government’s Zero-Trust Memo so you don’t have to”Submitted Our Dive into Secure Element, NDA chips and how we broke them as a story · 4 points
HN discussionThe Trezor [1] hardware device supports backing up (at initialization) and restoring of the secret seed which is quite useful. It can also be used as a password manager [2]. [1] https://blog.trezor.io/secure-two-factor-authentication-with... [2] https://trezor.io/passwords/
Comment linking /secure-two-factor-authentication-with-trezor-u2f-e940fd5a60af
on “AWS now supports U2F/Yubikeys”Submitted Trezor's Multi-Layer Defense Against Supply Chain Attacks as a story · 3 points
HN discussionIt depends on the country but I agree. Being programmable money I expect better solutions to come in the future. This is a recent and interesting one https://blog.trezor.io/shamir-backup-the-revolution-of-priva...
Comment linking /shamir-backup-the-revolution-of-private-keys-backup-is-here-858687ed7fe7
on “Kik, once valued at $1B, is to be closed”Submitted Details of the Mailchimp Data Breach as a story · 3 points
HN discussionWow lots to unpack there. For those reading, the title says "Trezor Ditches a Controversial KYC Feature, Plans Features to 'Cut Off Regulatory Overreach'" Apparently Trezor added a KYC system called AOPP. Then backlash. Then they said they would roll it back (as of the article). Have they rolled it back yet? They said it will be rolled out in February. Edit: Trezor blog post about the rollback here: https://blog.tre…
Comment linking /a-decision-on-aopp-789540c2930b?gi=f39ad0a68391
on “Bitcoin's fungibility graveyard”Submitted Trezor Suite Launches as a story · 3 points
HN discussionHas anyone used hardware-based password manager like Trezor Password Manager? [1] [2] Initially Trezor was created as a bitcoin wallet but is much more these days. The issue with 1Password is that it's not accessible in Linux and no U2F (yubikey etc) support AFAIK... [1] https://trezor.io/passwords/ [2] https://blog.trezor.io/satoshilabs-launches-trezor-password-...
Comment linking /satoshilabs-launches-trezor-password-manager-the-ultimately-secure-no-master-password-cloud-1b260e5fbe6b
on “LastPass RCE vulnerability fixed”Submitted TREZOR Firmware Security Update – 1.5.2 as a story · 3 points
HN discussionI sincerely hope you're wrong. The only way to store ETH on a Trezor through integration with myetherwallet. Unless you're just referring to seed generation? https://blog.trezor.io/trezor-integration-with-myetherwallet...
Comment linking /trezor-integration-with-myetherwallet-3e217a652e08
on “How a malicious seed generation website stole $4M”Submitted Trezor security alert: Stay vigilant against a potential phishing attack as a story · 2 points
HN discussionThat was addressed in a firmware update. All systems will have vulnerabilities, the important bit is how the companies react. Trezor has been pretty great IMO in that respect and that all their stuff is open gives me a bit more confidence that it has been well attacked and patched. https://blog.trezor.io/trezor-firmware-security-update-1-5-2...
Comment linking /trezor-firmware-security-update-1-5-2-5ef1b6f13fed
on “Breaking the Ledger Security Model”Submitted 66,000 trezor users data leaked as a story · 2 points
HN discussionI haven't used it, but Trezor looks interesting, and there is a Trezor 2 coming soon. https://trezor.io/ The sweet spot is for Bitcoin wallets, but it does the other stuff (U2F, ssh, gpg, passwords). Hardware is interesting. Everything open source. You can add your own "apps". U2F: https://blog.trezor.io/secure-two-factor-authentication-with...
Comment linking /secure-two-factor-authentication-with-trezor-u2f-e940fd5a60af
on “YubiKey 4C”Submitted Trezor ditches controversial KYC features as a story · 2 points
HN discussionThere's a very simple solution if you care about security. Buy a hardware wallet (e.g. Trezor in my example) note down the 24 words that are basically your privatekey. But enable the passphrase (25th word/phrase) which you type yourself and could keep just in your mind. You have the safety of multiple backups for the 24 words and the extra security from burglars and others with the 25th passphrase. https://blog.trez…
Comment linking /hide-your-trezor-wallets-with-multiple-passphrases-f2e0834026eb
on “Regarding the NiceHash security breach”Submitted Phishing Alert: Fake Trezor Wallet Website (possibly DNS or BGP hijacking) as a story · 2 points
HN discussionTrezor? https://blog.trezor.io/secure-two-factor-authentication-with... It is also hackable: https://doc.satoshilabs.com/trezor-tech/resources.html
Comment linking /secure-two-factor-authentication-with-trezor-u2f-e940fd5a60af
on “Ask HN: Alternatives to Yubikey?”Submitted Trezor T announced as a story · 2 points
HN discussionYou can also look into Trezor - it has much better backup system, among other advatages compared to yobikey https://blog.trezor.io/openssh-with-fido2-and-trezor-e565c22...
Comment linking /openssh-with-fido2-and-trezor-e565c2277
on “Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys”Submitted Trezor – Details of the Mailchimp data breach as a story · 1 points
HN discussionYou can also use Trezor.io instead of Yubikey for ssh login. https://blog.trezor.io/openssh-with-fido2-and-trezor-e565c22... Advantage of Trezor is that it has better backup system and can be used for more things in general.
Comment linking /openssh-with-fido2-and-trezor-e565c2277
on “Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys”Submitted Trezor Suite Public Beta as a story · 1 points
HN discussion> Trezor - I've been using one for years and it's great. Also you can backup/restore the seed (so you don't need to register multiple devices). Trezor does not make use of a secure element https://blog.trezor.io/is-banking-grade-security-good-enough...
Comment linking /is-banking-grade-security-good-enough-for-your-bitcoins-284065561e9b
on “YubiKey Bio Series”Submitted OpenSSH with FIDO2 and Trezor as a story · 1 points
HN discussionThe original response about these type of issues [1] rubs me the wrong way In particular this statement: > That being said, we were surprised by Ledger’s announcement of this issue, especially after being explicitly asked by Ledger not to publicize the issue, due to possible implications for the whole microchip industry, beyond hardware wallets, such as the medical and automotive industries. As I understand they are…
Comment linking /our-response-to-ledgers-mitbitcoinexpo-findings-194f1b0a97d4
on “Critical flaw in Trezor hardware wallets”Submitted SatoshiLabs Response to Ledger's MITBitcoinExpo Findings as a story · 1 points
HN discussion
