How to use Trezor with MetaMask | All you need to know

[@TrezorWallet]

Update: ‘Hidden Wallet’ is now renamed to ‘Passphrase Wallet’ in Trezor Suite version 24.7.

[@TrezorWallet]

Hi, we wanted to make it in line with standard industry terminology so that it's not confusing to our users. Most wallets still refer to it as a "Passphrase Wallet".

[@condor484]

new to the crypto world. when i pair my metamask with my trezor safe 5 it shows over 30 accounts/ public keys to share and i have no idea what these address are wether its for bitcoin etherium etc. Which one do i Choose?

[@TrezorWallet]

Metamask does not support Bitcoin. Which coins do you intend to use in Metamask?

[@Josh-wb6ri]

How do you set up a wallet on meta mask, for a coin like xdc, and have it secured by Trezor? This video shows you how to import a wallet from Trezor, but you can treat the other “supported” coins…?

[@TrezorWallet]

Simply connect your Trezor to Metamask by following this tutorial trezor.io/learn/a/metamask-and-trezor and then you have basically your Trezor wallet used in Metamask interface. And in Metamask you can find the XDC coin.

[@hanionline563]

For the Trezor account with passphrase can i deposit USDT-BEP20 or TRX20 on it ? and if my computer hacked and the hacker was able to extract my metamask seed phrase can he also steal my coins that stored on the Trezor account that has passphrase in metamask? where the passphrase of the Trezor account in metamask stored ?

[@TrezorWallet]

Hi, so the passphrase protects the entire wallet - all the coins (Trezor does not support Tron and TRX20 tokens, however). If a hacker hacks your computer, they won't be able to access your Trezor-that's the main role of Trezor - to protect you from hacks. Trezor keeps your coins offline. In order for your coins to be protected by Trezor when using Metamask, you need to connect your Trezor to a Metamask and have your coins in the Trezor wallet connected to Metamask, not the default Metamask wallet (this one is a hot wallet). The passphrase is not stored anywhere on the device, so it cannot be extracted from it. Only you carry the passphrase "in your head."

[@colinpowda]

So any coins that Trezor does not support - such as Avalanche - are only as secure as Metamask seed phrase. Trezor do not offer any security to AVAX whatsoever! I feel like I am ripped off buying Trezor as it was advertised as it was supporting over 7000 coins.

[@TrezorWallet]

Hi, AVAX is supported by Trezor with 2rd party app: trezor.io/coins/wallet/avalanche-2 This means that private keys are protected by Trezor and you only manage the coin using 3rd party wallet app such as MetaMask.

[@hanionline563]

but you can use a passphrase i think which is not stored on your pc like metamask seed phrase

[@TrezorWallet]

Passphrase is a different thing from the wallet backup (aka seed). It's an additional security layer and it's not stored on your computer or Trezor indeed.

[@pbrninja19]

Guys, what the actual F is going on with the popup that Metamask goes to? Every time I sign a tx I'm supposed to go to some Trezor domain and download 1.5M of minified JS? What is the point of this thing?

[@TrezorWallet]

Hi, that's Trezor Connect - our tool that allows 3rd party apps to integrate Trezor as a private key storage. To ensure your private keys are only used when you want to sign a transaction, you need to confirm this action on your Trezor.

[@pbrninja19]

@@TrezorWallet First, thank you for answering. But what I mean is, what possible justification can there be to open a Trezor domain and download a ton of software on every single tx? I can't be the first person to notice that Metamask is capable of sending a tx to a Ledger device without opening a popup that retrieves a ton of software from some HTTP server. In the case of Trezor, when the popup opens and the page retrieves the gigantic blob of JS, what does that stuff actually do?

[@TrezorWallet]

Hi, so basically it works similar just Ledger has its code embedded into Metamask. Also we handle passphrases differently then Ledger - we do not store them on the device. Therefore we want to offer input in the safe environment (the popup) for our users. This way, our users do not have to trust 3rd party wallet (such as Metamask) that passphrases and PIN won't be misused. Also using a popup ensures that any operation related to a Trezor device happens in the well-known Trezor UI with Trezor UX, not related to a 3rd party app. This keeps the process the same and familiar to users across different 3rd party apps, which may reduce user errors.

[@pbrninja19]

@@TrezorWallet It's very hard for me to understand how you can refer to opening a browser tab and going to a Trezor domain and downloading a ton of weird software (possibly different software on every tx) as "the safe environment". Suppose a user isn't using a passphrase. In that case, was there any technical need or benefit to opening the popup? If so, please explain what the software in the popup needed to do. Thanks.

[@TrezorWallet]

The popup provides a secure environment created for handling sensitive operations, such as entering PIN (for Trezor One) or passphrase. Implementing popups simplifies the integration process for 3rd party developers. They can use all the features Trezor devices support without needing to develop custom designs for specific flows. And it also ensures that the application works consistently across different platforms. We are currently working on reducing the amount of loaded code and improving the flow of the passphrase. Thanks for your feedback on this; we've passed it on to our product team.