Hi @BullishGo, there are security checks that help you verify whether your device is safe to use:
- All Trezor devices are distributed without a firmware software, so you need to install it for your first use. If there is a firmware installed already, then that means that someone used this device before you.
- The bootloader verifies the firmware signature each time you connect your Trezor to a computer. You can connect to Trezor Wallet only if the firmware is correctly signed by SatoshiLabs. If there was an unofficial firmware installed, your device would flash a warning sign on its screen upon connecting it to a computer.
- Because the recovery seed is generated by you during the Trezor setup, you can be sure you are the first and only owner of your private keys.