Trezor Safe 3, Safe 5 and Safe 7 protect the same basic secret and run open-source Trezor firmware. The useful differences are how comfortably you can verify transactions, whether you need mobile wireless signing, and how much hardware complexity you are willing to maintain.
We make and sell none of these wallets. Prices (Trezor’s own US list prices at trezor.io, not sale prices) and specifications were checked on 24 September 2026. For most Bitcoin and long-term holders, Safe 3 is enough. Safe 5 buys a better interface without a battery; Safe 7 buys the largest screen and mobile convenience.
Safe 3 vs Safe 5 vs Safe 7
| Safe 3 | Safe 5 | Safe 7 | |
|---|---|---|---|
| Approximate price (trezor.io, US list) | $59 | $129 | $249 |
| Controls | Two buttons | 1.54-inch colour touchscreen with haptics | 2.5-inch colour touchscreen |
| Connection | USB-C | USB-C | USB-C and Bluetooth |
| Battery | None | None | Rechargeable LiFePO4; Qi2 charging |
| Secure elements | One EAL6+ chip | One EAL6+ chip | TROPIC01 plus OPTIGA Trust M |
| Water/dust rating | Not published as IP-rated | Not published as IP-rated | IP54 |
| Best for | Value and infrequent signing | Touchscreen without battery upkeep | Frequent mobile use and detailed review |
What all three models do
All three keep wallet secrets off the connected computer, require on-device confirmation and support Trezor’s 20-word wallet backup. They also support multi-share backup, PIN protection and passphrases. Since Trezor announced Clear Signing on 7 September 2026, all three on updated standard firmware also decode supported Ethereum and EVM smart-contract transactions into plain language on the device; contracts outside the ERC-7730 registry still fall back to a blind-signing warning. A backup can restore the funds even after the device fails, which is why recovery quality matters more than upgrading for cosmetic reasons.
The Safe family also corrects an outdated comparison claim: current Trezor models do have secure elements. On Safe 3 and Safe 5, the EAL6+ chip protects the PIN and secrets alongside the main processor. Safe 7 adds two different secure elements as a layered design. On 3 June 2026 Trezor disclosed that Ledger’s Donjon lab had found a vulnerability in one of those layers, the TROPIC01 chip, using a laser fault-injection attack that needs the device in hand, disassembly and specialist lab equipment. Trezor says the attack, as extended by the chip’s maker Tropic Square, can extract one of three secrets that protect the PIN and some device-attestation material, but cannot reach the PIN, funds or wallet backup on its own; a firmware update cannot fix it, and Trezor says owners need take no action. The PIN itself stays the final barrier, so a strong one adds margin. No secure element makes any model immune to a malicious transaction, exposed backup or coerced owner.
Safe 3 is the value choice
Safe 3 uses physical buttons and a compact monochrome display. It is slower for entering a PIN, reviewing long details and managing a passphrase, but the smaller interface does not weaken a simple send when you read the address and amount carefully.
Buy Safe 3 for a long-term wallet that signs occasionally, especially when the extra $70–$190 would be better spent separating or upgrading the backup. Do not choose it for frequent smart-contract use if the small screen will train you to approve mechanically.
Safe 5 is the practical touchscreen
Safe 5’s 1.54-inch touchscreen and haptic feedback make PIN entry, word confirmation and transaction review more comfortable. It still draws power over USB-C and contains no battery, so it can sit unused for years without charging maintenance.
That combination makes Safe 5 the balanced option for a desktop-led workflow: enough screen for routine verification, no wireless pairing and no battery lifecycle. Its security outcome is not automatically $70 better than Safe 3; the benefit exists only if the interface makes you review more accurately.
Safe 7 is the mobile and premium model
Safe 7 adds a 2.5-inch 520×380 touchscreen, Bluetooth, Qi2 charging, a rechargeable LiFePO4 battery, two secure elements and an IP54 enclosure. It weighs 45 grams. The larger display is the strongest reason to upgrade: more legible transaction details reduce the temptation to turn signing into a blind tap.
Wireless signing changes transport, not custody. The device still verifies and signs locally. Bluetooth is useful when a phone is your regular interface; it is unnecessary cost and maintenance for a vault opened twice a year.
What “quantum-ready” does—and does not—mean
Safe 7 uses post-quantum signatures in two places: SLH-DSA-128, paired with a classical Ed25519 signature, to verify firmware and the boot chain, and ML-DSA-44 for device authentication. It does not use either scheme to sign Bitcoin or Ethereum transactions because those networks do not currently accept them. A wallet maker cannot unilaterally change a blockchain’s signature rules.
Therefore, quantum readiness is a meaningful improvement to Safe 7’s internal update and authenticity checks, not a reason to claim the coins themselves are protected from a future cryptographically relevant quantum computer. See what quantum computers could actually break.
Which Trezor should you buy?
- Choose Safe 3 for the best value, infrequent sends and a USB-only workflow.
- Choose Safe 5 when a touchscreen materially improves verification but you do not want Bluetooth or a battery.
- Choose Safe 7 for regular phone use, the most readable screen and the layered premium hardware.
- Choose none yet if the protected amount is modest, your software wallet is already well secured, or you have no safe place for a recovery backup.
Whichever model you choose, initialise it yourself, install official software, verify the device on receipt, and complete a recovery test with a small balance. Our setup mistakes guide covers the sequence, and Tangem vs Safe 7 compares the premium Trezor with a seedless card design.
Two 2026 incidents at Trezor’s third-party providers exposed contact details. On 13 August 2026 Trezor disclosed that its shipping provider ShipMonk had exposed customer names and email addresses and, for most of those affected, phone numbers and shipping addresses; by its 4 September update the total was 80,689 customers, including about 67,000 US customers with 2019–2021 orders. On 9 September 2026 an unauthorised actor who had gained access to Brevo, Trezor’s newsletter provider, sent a fake “STM32 Entropy Vulnerability” alert from Trezor’s newsletter account, linking to an app that asked for the wallet backup; 347,149 newsletter addresses were exported. Trezor says its devices and wallet systems were not compromised in either case. After the ShipMonk incident, Trezor advised ordering with an email address not tied to your identity, paying with crypto or a disposable card, and using a P.O. box where practical. Treat unexpected emails, calls or letters about your wallet as phishing, and never enter a wallet backup anywhere except on the device itself; anyone who has should move their funds to a new wallet immediately.
Sources checked
- Trezor Safe 7 product specifications
- Trezor Safe 5 product specifications
- Trezor Safe 3 product specifications
- Trezor hardware security and model comparison
- Trezor firmware and security architecture
- Trezor SLIP39 backup documentation
- Trezor Safe 7 post-quantum design choices
- Trezor device authentication check
- Trezor Clear Signing announcement (September 2026)
- Trezor response to the TROPIC01 chip disclosure (June 2026)
- Trezor explainer on the TROPIC01 chip vulnerability
- Trezor notice on the ShipMonk shipping-data exposure (August–September 2026)
- Trezor notice on the Brevo email incident (September 2026)
Get the SteelPhrase Self-Custody Brief
Email me SteelPhrase about twice a month: security changes, practical checklists, and carefully reviewed wallet guides. Unsubscribe anytime.