Affected scope
Trezor One / Model T · Legacy models
What the attack requires
Physical access to a legacy Trezor One or Model T.
What changed
Passphrase mitigation; hardware limit
What this finding establishes
Trezor describes a strong passphrase as mitigation for the associated wallet because that passphrase is not stored on the device. This historical finding should not be generalized to Trezor’s Safe series or confused with a remote attack.