Location of Trezor suite user data

Suite issues Wallet issues
1

Hi,

I want to run the Trezor Suite in an encrypted image using Veracrypt on Linux Mint.

I noticed the user data are created in the $HOME/.config/@trezor. I didn’t find nay command line option to set those profile data elsewhere.

As I’m very concerned about data privacy and security, I have a couple of questions:

  • are those data encrypted at rest ?
  • is it possible to use a symbolic link to another directory which is itself encrypted and opened whenever the image is mounted ?

Thanks for your answer.

1 Like
2

Hi @x0mono ,

To answer your questions:

  1. No, Trezor Suite data is not encrypted.
  2. One of our developers suggested an alternative approach: running Suite with a simple script that wipes all data each time the app is closed. It works similarly to using Suite Web in a private browser window, but on Desktop. It’s not very convenient, since no wallets or settings will be remembered and everything resets on every launch, but it is completely foolproof.
#!/bin/bash
echo Launching trezor suite \"anonymously\"
~/apps/Trezor-Suite.AppImage --no-sandbox # your own path here
rm -rf ~/.config/@trezor/suite-desktop # this is default for production AppImage, else use suite-desktop-dev if self-built (not codesign build)
echo "Nuked all Trezor suite data ;)"

There is also a preview of those scrips for different platforms on GitHub : https://github.com/trezor/trezor-suite/blob/6a011ad1cbacc95256eeeae22b45ce276bdddef6/docs/packages/suite-desktop/anon-mode.md

1 Like