The Trezor Safe 5 is what happens when a decade of hardware wallet experience meets a proper touchscreen. Color display, haptic feedback, open-source firmware, Shamir Backup. $169.
The Trezor Safe 5 is what happens when a decade of hardware wallet experience meets a proper touchscreen. SatoshiLabs, the company that invented the hardware wallet category back in 2014, took everything they learned from the Model T and Safe 3 and built a device that is genuinely pleasant to use. Color touchscreen with haptic feedback. Open-source firmware. Shamir Backup for seed splitting. $169.
The honest tradeoff: the OPTIGA Trust M secure element is not fully open source. Trezor publishes firmware and hardware schematics, but the chip itself operates under NDAs that limit how much can be disclosed. This is better than Ledger's situation (completely closed), but not as clean as BitBox02 or Coldcard. Know what you are getting.
The Safe 5 is the right choice for users who want serious open-source security without fighting their device. It is not for beginners who have never owned a hardware wallet, and it is not for advanced users who want features like air-gap signing or BIP-85. For everyone in between, it is excellent.
| Category | Score | Notes |
|---|---|---|
| Security | 8.5/10 | EAL6+ SE, open firmware, but SE not fully open |
| Ease of Use | 9/10 | Best touchscreen UX in its price range |
| Open Source | 8/10 | Firmware + hardware public, SE chip has NDA limits |
| Features | 8.5/10 | SLIP-39, passphrase, microSD, Bitcoin-only option |
| Price / Value | 8/10 | $169 is fair; Safe 3 at $79 is better value for basics |
| Overall | 8.5/10 | Best touchscreen hardware wallet for most Bitcoiners |
| Spec | Details |
|---|---|
| Main Chip | EFM32 + STM32 |
| Secure Element | OPTIGA Trust M (EAL6+) |
| Display | 1.54-inch color touchscreen |
| Connectivity | USB-C |
| Bluetooth | None |
| Bitcoin-only | Optional (install Bitcoin-only firmware) |
| Open Source | Firmware + hardware schematics (SE chip NDA-limited) |
| Companion App | Trezor Suite (Windows, macOS, Android) |
| MicroSD | Yes (PIN encryption, firmware updates) |
| Made in | Czech Republic |
| Price | $169 USD |
SatoshiLabs was founded in 2014 in Prague, Czech Republic. They invented the hardware wallet category. Before the original Trezor Model One, no commercial device existed for keeping Bitcoin private keys offline. The idea was new and the market validated it quickly. More than a decade later, SatoshiLabs remains one of the two most recognized names in hardware wallets, alongside Ledger.
The Safe 5 is the current flagship. The progression went: Model One (2014, buttons and monochrome display) to Model T (touchscreen, 2018) to Safe 3 (2023, EAL6+ secure element, smaller body) to Safe 5 (2024, color touchscreen, haptic feedback, updated processor). Each generation refined what came before without breaking backward compatibility or abandoning the open-source ethos.
What the Safe 5 is not: an air-gapped device. There is no QR signing mode, no microSD-based PSBT workflow for signing offline. The microSD slot handles PIN encryption and firmware updates but not transaction signing. If you need true air-gap security, that is Coldcard and Foundation Passport territory. Different threat models, different tools.
The jump from the Safe 3 to the Safe 5 is most visible on the display. The Safe 3 uses a small monochrome screen with physical buttons. Navigation is fine but the screen is cramped, especially for verifying long Bitcoin addresses. The Safe 5 replaces this with a 1.54-inch color touchscreen. Addresses are readable. UI elements are clear. Fonts are large enough that you can actually verify what you are signing.
Haptic feedback is a small touch that adds real confidence. Every tap on the touchscreen gives a physical pulse. This matters most during address verification and passphrase entry, where you need to know the device registered your input correctly. On button-based wallets you press and wait. On the Safe 5 you tap and feel confirmation.
Passphrase entry is noticeably easier. On the Safe 3, entering a long passphrase with physical buttons is tedious. On the Safe 5, the touchscreen keyboard is straightforward. It is still not as fast as typing on a phone, but it is far faster than cycling through characters with two buttons. For users who rely on a passphrase as a second factor, this difference matters day to day.
The honest caveat: this is still a hardware wallet, not a smartphone. Navigation takes some learning. But within the category of hardware wallets, the Safe 5's touchscreen is the most approachable interface at this price point.
Trezor publishes firmware, hardware schematics, and Trezor Suite software on GitHub. This is not marketing language: every line of code running on your device is available for review. Independent security researchers have audited the codebase multiple times since 2014. Deterministic builds let you compile the firmware from source and confirm it matches what Trezor distributes. If you have the skills, you can verify exactly what runs on your device.
The OPTIGA Trust M secure element introduces a nuance. The chip stores private keys in hardware-isolated memory, which is valuable. But it ships with NDA constraints that limit full public disclosure of its internals. Trezor can share more about this chip's workings than Ledger can about theirs, and the chip is EAL6+ certified, meaning it passed rigorous independent security evaluation. However, it is not fully transparent in the same way the rest of the firmware is.
This is a meaningful distinction, not a disqualifying one. Closed firmware (as Ledger ships) means you cannot audit anything. Trezor's approach means you can audit nearly everything, with one hardware component that operates under NDA. For most Bitcoin holders, this is an acceptable tradeoff. For users who want maximum open-source purity, consider Foundation Passport or Coldcard.
Standard hardware wallet backup is a single seed phrase: 12 or 24 words written on paper. This works, but the attack surface is obvious. If that paper is destroyed in a fire, you lose everything. If someone finds it, they own your Bitcoin. A single physical artifact is a single point of failure.
SLIP-39, which Trezor calls Multi-share Backup or Shamir Backup, solves this with cryptographic secret splitting. You create multiple share sets during setup. A 2-of-3 scheme gives you three sets of words where any two can reconstruct your wallet. Store one at home, one in a safe deposit box, one with a trusted family member. Any two recover your Bitcoin. None alone reveals anything.
Each individual share is cryptographically useless in isolation. An attacker who finds one share cannot brute-force the wallet from it. This is a substantially stronger backup model than a single seed phrase stored in a single location.
The tradeoff is setup complexity. SLIP-39 requires more time and more careful organization than writing down 24 words. You need to understand what you are creating, store shares in separate secure locations, and verify the backup correctly before sending funds. No other major hardware wallet at this price offers SLIP-39. It is a genuine differentiator for users serious about inheritance planning and redundant backup.
The Safe 5 ($169) and Coldcard Mk4 ($157) are the two strongest options for Bitcoiners who prioritize open-source hardware. They serve different users.
| Feature | Safe 5 ($169) | Coldcard Mk4 ($157) |
|---|---|---|
| Display | Color touchscreen | Small monochrome |
| Air-gap | No (USB-C only) | Yes (microSD) |
| Open source | Firmware + hardware | Firmware + hardware |
| Bitcoin-only | Optional | Yes |
| Backup | SLIP-39 (Shamir) | Standard BIP39 |
| Advanced features | Moderate | Extensive |
| Beginner-friendly | Yes | No |
| Made in | Czech Republic | Canada |
Safe 5 wins on UX. The touchscreen, haptic feedback, and Trezor Suite make it the approachable choice. Coldcard wins on advanced security features: air-gap via microSD, duress wallets, brick-me PIN, countdown login, BIP-85 key derivation. Coldcard is for power users who want to configure every detail of their security model. Safe 5 is for users who want excellent security that works without deep study. Different tools for different users.
The Safe 5 ships with standard firmware that supports Bitcoin and thousands of altcoins. Trezor also offers a Bitcoin-only firmware build that removes all of that altcoin code. The result: a smaller firmware image with a reduced attack surface. Fewer code paths mean fewer potential vulnerabilities. Every line of code that does not exist cannot be exploited.
Switching between standard and Bitcoin-only firmware requires a device wipe. This is not a big deal at setup time but it is inconvenient later. If you only hold Bitcoin, install Bitcoin-only firmware before you create your wallet. You will never need the altcoin functionality and you gain a meaningfully cleaner security posture.
There are no disadvantages for Bitcoin holders using Bitcoin-only firmware. Trezor Suite still works. Sparrow Wallet still works. All Bitcoin features are present. The only thing missing is altcoin support. For most Bitcoiners reading this, that is not a loss.
The Safe 5 is a strong fit if:
It is probably not the right fit if:
The Trezor Safe 5 earns 8.5/10. It is the best touchscreen hardware wallet in its price range. Open-source firmware, SLIP-39 Shamir Backup, EAL6+ secure element, and a proper color touchscreen at $169. SatoshiLabs knows how to make a hardware wallet. They invented the category and they have been improving it for over a decade.
The secure element situation keeps it from a higher score. The OPTIGA Trust M has NDA restrictions that prevent full transparency. This is better than Ledger's completely closed approach, but serious Bitcoin holders should know what they are accepting.
If you want the best touchscreen hardware wallet under $200, the Safe 5 is the answer. If you specifically need air-gap security, buy a Coldcard or Foundation Passport instead. Different threat models, different tools.
$169 from Trezor. Color touchscreen, open-source firmware, Shamir Backup. Made in Czech Republic.
Screen and input, mostly. The Safe 3 has a small monochrome display and physical buttons at $79. The Safe 5 adds a 1.54-inch color touchscreen with haptic feedback at $169. Both use the same open-source firmware, EAL6+ secure element, and Bitcoin-only firmware option. Both work with Trezor Suite and Sparrow Wallet. If you want a touchscreen and can afford the extra cost, Safe 5. If you want the best value in the Trezor lineup, Safe 3 is still hard to beat.
Yes. Trezor publishes the hardware schematics, firmware, and software on GitHub. The EAL6+ secure element uses an NDA-free certified chip, meaning Trezor can disclose more about its internals than Ledger can about theirs. You can verify the firmware yourself, check it matches published code, and audit what's running on your device. This is a genuine differentiator.
Yes. You can install Bitcoin-only firmware that removes all altcoin support, shrinks the attack surface, and focuses the device entirely on Bitcoin. This is the recommended setup for Bitcoin-only holders. Switching between standard and Bitcoin-only firmware requires a device wipe, so choose before you set up your wallet.
Yes, and it's the recommended pairing for privacy-conscious Bitcoin holders. Sparrow connects via USB-C, doesn't require a Trezor account, and lets you connect to your own Bitcoin node so Trezor's servers never see your addresses. The setup takes about 10 minutes and is well-documented in Sparrow's guides.
Standard backup is a single 12 or 24-word seed phrase. If that paper burns or gets stolen, you lose everything. SLIP-39 lets you split the backup into multiple shares. A 2-of-3 setup gives you three share sets where any two can reconstruct the wallet. Each individual share is useless alone. It's stronger than a single seed, at the cost of more complexity to set up.
No. It connects via USB-C only. There's no QR-based air-gap option like the Foundation Passport or Coldcard. For most Bitcoin holders, USB-C is fine. If you specifically need air-gap security, the Passport ($199) or Coldcard Mk4 ($148) are better choices.
Partially. Trezor Suite works well on desktop (Windows, Mac, Linux) and Android. iOS support is limited. You can't use the full Trezor Suite app on iPhone. Some third-party wallets support Trezor on iOS, but the native desktop experience is where the Safe 5 shines.
Two things: encrypted PIN storage (the microSD acts as a second factor so you need both the card and PIN to unlock) and offline firmware updates. Neither is required for normal operation. The PIN encryption is a useful extra layer if you're worried about someone with physical access guessing your PIN.
Coldcard is for advanced users who want maximum feature depth: duress wallets, air-gap via microSD and QR, BIP-85 key derivation, and deep configuration. Safe 5 is for users who want open-source security with a nice touchscreen and don't need expert-level features. Safe 5 wins on UX. Coldcard wins on maximum security features.
If your Model T works fine, it's not urgent. The Safe 5 has a newer processor, EAL6+ secure element (older Model T batches lacked a dedicated SE), haptic feedback, and Multi-share Backup. If you're buying a Trezor new in 2026, Safe 5 over Model T is the obvious choice. Otherwise upgrade when it makes sense.
Maximum security with air-gapped signing, duress wallets, and BIP-85 key derivation.
Premium open-source hardware wallet with air-gapped QR signing and elegant design.
Swiss-made Bitcoin-only hardware wallet with a minimalist approach to security.
Side-by-side comparison of every major hardware wallet on the market.
How to move your Bitcoin offline for maximum security with hardware wallets.
Best practices for backing up, storing, and protecting your wallet recovery phrase.