Trezor Safe 5 Review

The Trezor Safe 5 scores 8.4 out of 10, second in our hardware wallet ratings, rescored from current evidence on 1 November 2026. The basis is desk research of Trezor's product page and FAQ, its secure element explainer and the trezor-firmware and trezor-hardware repositories on GitHub. We did not test a device. Three marks moved, two up and one down. Trezor now names its chip, and its firmware and board files proved fully inspectable. The air-gap mark fell to the category's standard for connected-only signing.

How the Trezor Safe 5 scores in hardware wallets

Five criteria apply in this category. Each is marked 0 to 10 and carries equal weight, as described in our ratings methodology.

The overall score is a plain average: (9 + 9 + 10 + 5 + 9) / 5 = 42 / 5 = 8.4.

Changes from the previous scoring:

• Secure element rose from 8 to 9. Trezor's explainer now names the chip as the OPTIGA Trust M (V3) and its certification as Common Criteria EAL6+, the same disclosure that gives Ledger 9.
• Open source rose from 8 to 10. The July review could not tell what was published. The trezor-firmware repository documents a deterministic, Docker-based reproducible build, and trezor-hardware holds Safe 5 schematics for board revisions F and G.
• Air-gap and verification fell from 7 to 5. The July mark appears to have credited the microSD slot. Neither the product page nor the Safe 5 FAQ documents signing through it, so the device signs only over a live connection. The category marks that 5, as it does the BitBox02 and the Ledger Nano Gen5.

Price and asset coverage are unchanged. The overall score moves from 8.2 to 8.4.

Strongest criteria

Open source (10)

Trezor's reproducible-build guide invites outsiders to rebuild a firmware release and check that it is identical to the official one. Nix, uv and Cargo pin the build environment, and a single Docker script runs it. The universal and Bitcoin-only images both come out of the same build. The trezor-hardware repository adds board schematics and views for the Safe 5. The firmware is licensed under GPL-3.0. Trezor says it picked a secure element that needs no non-disclosure agreement, so researchers can examine it. The chip's own internals are still not published.

Price & value (9)

At $109 the Safe 5 is the cheapest device in the category, and the product page showed no sale or crossed-out price. Two backup cards and a USB-C cable ship in the box. It stays at 9 rather than 10 because no backup accessory beyond paper cards is included.

Secure element (9) and asset coverage (9)

The OPTIGA Trust M does not hold the seed. It holds a secret that, together with the PIN, encrypts the keys stored on the main chip. It releases that secret only after the correct PIN and erases it after 16 wrong attempts. Asset coverage matches Ledger's: thousands of coins and tokens, given without an exact count.

Weakest criterion: connected signing

Air-gap & verification (5): a deficiency

Trezor Suite or a third-party app builds each transaction and sends it to the Safe 5 over USB-C. The device shows the recipient and amount for approval on its touchscreen, and that screen check is what protects against a compromised computer. There is no QR camera, no Bluetooth listed on the product page, and no documented air-gapped route. On iOS, the product page says sending, swapping, setup and device management are not available, so iPhone users need a desktop or Android setup.

What the score does not cover

• In-app trading. Buying, selling and swapping in Trezor Suite run through outside providers. Trezor says their fees vary and cannot be shown in advance. None of this is scored.
• The Safe 7. It adds a second secure element, TROPIC01, and is a separate device not scored here.
• Durability, touchscreen feel and support. We did not handle the device.

For what the secure element and PIN do and do not protect against, see our guide to hardware wallet security.

Trezor Safe 5 vs the closest rated peers

The Keystone 3 Pro leads by 1.2 points, almost entirely because it can sign over QR codes. Against the Ledger Nano Gen5, the Safe 5 has the same certified-chip standard, the same connected signing and the same asset mark. It finishes 1.4 points ahead on fully inspectable firmware and a $70 lower price.

Who it suits

On the scored evidence, the Safe 5 fits people who want a named, certified chip and firmware that anyone can rebuild, at the lowest price in the category. It also fits holders of many kinds of assets who are happy to sign over USB-C. It is not the device for anyone who needs air-gapped signing, or who wants to manage everything from an iPhone.