The Trezor Passphrase: How a Hidden Wallet Adds an Access Layer

Written by Julia Fischer, Digital Finance Writer. Reviewed by Kenji Tanaka, Cryptocurrency Security Engineer. Updated August 26, 2026.

Beyond the PIN, a Trezor offers an optional passphrase that opens a separate hidden wallet. It is one of the more powerful and most misunderstood features of the device. This guide explains what the passphrase does, how a hidden wallet differs from your standard one, and the real responsibility that comes with using it.

What is a Trezor passphrase and how does it work?

A passphrase is an extra secret you supply after the PIN that the device combines with your recovery seed to derive an entirely separate wallet. It is never stored on the Trezor. Because it is mixed into the key derivation, each different passphrase produces its own distinct set of accounts.

This is why the passphrase is sometimes called a twenty-fifth word. Your seed alone opens the standard wallet, and the seed plus a passphrase opens a hidden one. The device does the combining internally, so the passphrase itself never has to live anywhere except in your memory or your own secure record.

The mechanism means there is no single correct passphrase in the way there is a single PIN. Any text you enter is valid input and yields some wallet. The device cannot tell you that you chose wrongly, which makes exact and consistent entry a central part of using the feature safely.

How is a hidden wallet different from the standard wallet?

The standard wallet opens with just your PIN and seed, while a hidden wallet requires that same unlock plus the correct passphrase. The two are separate spaces with separate addresses and balances. Nothing about the hidden wallet is visible or hinted at when only the standard wallet is open.

This separation is the point of the feature. Someone who compels you to unlock the device, or who learns your PIN, reaches only the standard wallet unless they also know a passphrase exists and what it is. The hidden wallet stays out of view because the device gives no sign that anything further exists.

It is worth stressing that the hidden wallet is not hidden from the blockchain, only from someone examining the device. The accounts are ordinary on-chain accounts. What the passphrase controls is whether that particular wallet can be derived and opened at all, not whether its transactions are private on the network.

How do you open a hidden wallet with a passphrase?

You open a hidden wallet by unlocking the Trezor with your PIN, enabling the passphrase option, and then entering your passphrase so the device derives that wallet. The steps below show the order, and the same passphrase must be reused every time to return to the same hidden wallet.

Step 1: Unlock the device with your PIN

Connect your Trezor and enter your PIN first, since the passphrase feature sits on top of the normal unlock rather than replacing it. The PIN still guards the physical device, and the passphrase only comes into play once the device itself has been unlocked in the usual way.

Step 2: Enable the passphrase option

Turn on the optional passphrase feature in Suite so the app prompts you for a passphrase after the standard PIN unlock. This setting stays off by default, so nothing changes about your standard wallet until you deliberately choose to work with hidden wallets.

Step 3: Enter your passphrase carefully

Type your passphrase exactly, matching every character and capitalization, because even a tiny difference produces a completely different and empty wallet. Spaces, symbols, and letter case all count, so a passphrase you cannot reproduce precisely is a passphrase you cannot rely on.

Step 4: Confirm the passphrase on the device

Confirm the passphrase on the Trezor screen where supported, so the secret is verified on the device rather than trusted from the computer alone. Handling the confirmation on the device keeps a compromised computer from quietly substituting a different passphrase behind your back.

Step 5: Verify the correct hidden wallet opened

Check that the accounts and balances shown match the hidden wallet you expected, since the same passphrase must be reused every time to return to it. If the wallet looks empty or unfamiliar, you likely entered a slightly different passphrase and should close it and try again.

What responsibility does a passphrase add?

A passphrase adds the responsibility of remembering a secret that nobody can recover for you. The device does not store it, no company keeps a copy, and there is no reset. If you forget the exact passphrase, the hidden wallet behind it becomes permanently unreachable along with its funds.

This is the trade at the heart of the feature. You gain protection against someone who has your device and PIN, but you take on sole custody of one more irreplaceable secret. For some people that added safety is worth it; for others the extra risk of forgetting outweighs the benefit.

Because of this, a passphrase is best treated with the same care as the recovery seed. It should be something you can reproduce exactly and indefinitely, recorded offline in a way only you can access if needed. Like the seed, it is never entered on a website and never shared, since anyone who has it can open your hidden wallet.

Is a passphrase right for everyone?

No. A passphrase is an advanced option, not a requirement, and many people use a Trezor securely with the PIN and standard wallet alone. It suits those who want an extra layer against physical coercion and who are confident they can store and recall an additional secret without fail.

For newer users, the greater danger is often self-inflicted loss rather than an attacker. A forgotten passphrase or a tiny typo you cannot reconstruct can lock away funds as effectively as any thief. Weighing that honestly matters more than adopting the feature because it sounds more secure.

If you do use it, start deliberately and confirm you can reopen the same hidden wallet reliably before moving anything meaningful into it. The feature rewards discipline and punishes improvisation, so a calm, tested approach protects you far better than enabling it in a hurry.

Passphrase and PIN access layers compared

The table below contrasts the two secrets so their roles stay clear. Both are entered on or through the device and never on a website, but they differ in what they unlock, whether they can be reset, and how they are stored.

Aspect	PIN	Passphrase
What it unlocks	The physical device and standard wallet	A separate hidden wallet on top of the unlock
Stored on device	Set on the device and checked by it	Never stored; combined with the seed each time
If forgotten	Wipe and restore from the recovery seed	The hidden wallet is unrecoverable
Required to use Trezor	Yes, it guards everyday access	No, it is an optional advanced layer

Reading the columns together shows why the passphrase is powerful but unforgiving. The PIN has a safety net in the seed, while the passphrase has none. That difference is the single most important thing to understand before you rely on a hidden wallet.

Frequently asked questions

Is a passphrase the same as my recovery seed?

No. The seed is the backup created with the device and written offline, while the passphrase is an extra secret you choose and remember yourself. Both are needed to reach a hidden wallet, and neither is ever entered on a website or shared with anyone.

What happens if I forget my passphrase?

The hidden wallet tied to that passphrase becomes unreachable, because the device never stores it and no one can recover it for you. The exact passphrase must be reproduced every time, so a forgotten one means the funds behind it are effectively lost.

Does a wrong passphrase show an error?

No. Any passphrase you enter opens some wallet, so a mistyped one simply opens a different, usually empty wallet rather than showing an error. That is why you verify the expected accounts appear and why exact reuse of the passphrase matters so much.

Do I need a passphrase to use my Trezor?

No. The passphrase is an optional advanced feature layered on top of the PIN. Many people use their Trezor safely with the standard wallet alone, and adding a passphrase is a choice that raises both protection and personal responsibility.