Markets › News › Security

Trezor Boosts Wallet Passphrase Security to 128 Characters Post-Coldcard Attacks

Trezor has increased its wallet passphrase limit to 128 characters following security incidents involving Coldcard wallets.

Trezor has increased its wallet passphrase limit to 128 characters following security incidents involving Coldcard wallets. This is an original Token Times brief synthesising 2 outlets (Crypto.news, Cointelegraph), plus live market data, as of Mon, 02 Nov 2026 13:15:02 UTC.

Why it matters

This development underscores the growing importance of robust passphrase security in the cryptocurrency space, particularly in light of recent attacks that exposed vulnerabilities in wallet recovery mechanisms.

Covered by 2 outlets over about 59 min — Token Times synthesises them all into one brief
  1. Cointelegraph
    Trezor lifts password ceiling after Coldcard’s $100M wallet thefts ↗
  2. Crypto.news
    Trezor expands wallet passphrase limit to 128 characters after Coldcard attacks ↗
Key takeaways
  • Trezor increased wallet passphrase limit from 50 to 128 characters.
  • Move follows July Coldcard attacks where strong passphrases protected some users.
  • Trezor warns users about passphrase risks despite the update.
What the reporting agrees on

Both Crypto.news and Cointelegraph report that Trezor has expanded its wallet passphrase limit to 128 characters, citing the July Coldcard attacks as a key factor in the decision. They agree that the attacks, during which strong passphrases helped protect some users, highlighted the need for enhanced security measures. However, only Crypto.news mentions that Trezor issued a warning to users about the risks associated with passphrases, suggesting a difference in emphasis on user education.

The story so far · 2 briefs
  1. Karpeles Warns of Trezor Supply Chain Attacks Amidst Crypto Hardware Wallet Concerns
  2. Trezor Boosts Wallet Passphrase Security to 128 Characters Post-Coldcard Attacks — this brief

Trezor has announced an increase in its wallet passphrase limit from 50 to 128 characters, a move aimed at enhancing security in the wake of recent attacks on Coldcard wallets.

The decision follows a series of security incidents in July, where Coldcard wallets were targeted. According to reports, users who had implemented strong passphrases were less vulnerable to the attacks, as the passphrases helped protect their wallet recovery information.

While both Crypto.news and Cointelegraph confirm the increase in the passphrase limit, they differ slightly in their coverage of Trezor's response. Crypto.news highlights that Trezor has warned users about the potential risks associated with using passphrases, despite the enhanced security measures. This warning suggests that while passphrases are a critical security feature, they must be managed carefully to avoid unintended consequences.

The update comes as the cryptocurrency market continues to grapple with security challenges. The total crypto market cap stands at $2.68 trillion, with the overall market remaining relatively flat. Bitcoin, the largest cryptocurrency by market cap, has seen a slight 0.17% decrease in the past 24 hours, while the Fear & Greed index remains at 37, indicating a state of fear among investors.

The move by Trezor reflects a broader trend in the industry towards prioritizing security features that protect users from increasingly sophisticated cyber threats. As wallet providers continue to innovate, users are encouraged to stay informed about best practices for securing their digital assets.

The market when this published · November 2, 2026
Total market cap₹254.67T
Bitcoin 24h-0.17%
Ethereum 24h+0.72%
BTC dominance58.4%
Fear & Greed37 · Fear

Trezor Boosts Wallet Passphrase Security to 128 Characters P — questions & answers

What is the new passphrase limit for Trezor wallets?

Trezor has increased its wallet passphrase limit to 128 characters.

Why did Trezor increase the passphrase limit?

The increase follows July's Coldcard attacks, where strong passphrases protected some users.

What security risks do passphrases pose?

Trezor warns that while passphrases enhance security, they must be managed carefully to avoid risks.

Which outlets reported this story?

This is an original Token Times brief that synthesises reporting from Crypto.news, Cointelegraph, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

Token Times Newsdesk Data-stamped

Token Times's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · November 2, 2026 ⛓ Timestamped at Bitcoin block #974,252 sha256:9d2aef989af7f68c
Corroborated across 2 outlets, reported over about 59 min — this is an original Token Times summary with live market data, not the original article.Cointelegraph · Nov 2 10:46 ↗Crypto.news · Nov 2 11:45 ↗

Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.