Quantum safe is non-sense and those of us in the know realize it is a marketing gimic. Please reconsider mentioning this non-sense and focus and real features. For example, the Trezor 7 device can also server as a FIDO2 authentication key. This is never mentioned on the Trezor 7 marketing, coming soon materials. Using my Trezor T as a FIDO2 and passkey is a major feature for me, yet Trezor rarely mentions it, and it is completely missing on your latest marketing for the Trezor 7. Why make up quantum stuff and then actually leave out meaningful security features, that no other hardware wallets have?
As far as I know, the Bitcoin network and blockchain should also have security patches against quantum attacks. One device without a blockchain update will not be enough.
But why not, beautiful, stylish, modern, wireless. Unfortunately, there is no support for more native coins.
Hello! Glad to explain!
In 2024, NIST has standardized several Post-Quantum signature schemes. These are real, (at least somewhat) proven standards for signatures that are not breakable (as far as anyone knows) by quantum computing.
That is unlike existing ECC signatures, where efficient quantum algorithms exist to retrieve private key from public key. Quantum CPUs large enough to break them are expected to come roughly within the next 10 years, assuming current rate of progress.
In other words, an attacker with access to such quantum computer may be able to forge signatures, and, e.g., sign a malicious firmware update with official Trezor keys.
This is obviously a problem, which is why Trezor Safe 7 implements PQ signatures for bootloader verification (specifically SLH-DSA for bootloader and firmware signatures, and ML-DSA for device authenticity check).
That way, even if the hypothetical attacker obtains access to a powerful quantum computer (which, again, may very well come to exist within the next 10 years), they will not be able to use it to subvert firmware updates to Trezor Safe 7, and neither will they be able to build a malicious clone that registers as genuine in Trezor Suite.
This is a feature that no other HW wallet has today, including older Trezors.
Importantly, this is a feature that cannot be added post fact. If you have a HWW at home, it will accept a classically signed firmware upgrade. As such, it will accept a maliciously constructed firmware resulting from a broken signing key. PQ readiness must be built in at the factory, from the very start.
We call this Quantum Ready.
Definitely not Quantum Safe, because until blockchains move to PQ algorithms themselves, the attackers will be able to break the classical signature algorithms powering the transactions. Doesn’t matter that your seed isn’t stolen if all your money is.
However, when blockchains upgrade to PQ cryptography, a firmware update to Trezor Safe 7 will make it truly quantum-safe:
- an attacker won’t be able to forge a genuine-looking Trezor
- they will not be able to construct a malicious firmware upgrade
- and finally, after the blockchains themselves are PQ-safe, the attacker won’t be able to break your keys.
Hope this clears up the “marketing gimmick” confusion?
4 Likes
Where did you read that the Trezor Safe 7 only supports Bitcoin and doesn’t have other coins?
More native coins I mean the additional blockchains for example: TON, Tron, some other… We see the same list of supported coins in the Safe 7 as previously for Safe 5.
1 Like
Finally, TS7 is here. 
Beautiful product & Masterpiece, thanks Satoshilabs / Trezor company. Waiting for green here 
Using my Trezor T as a FIDO2 and passkey is a major feature for me, yet Trezor rarely mentions it…
Well i think it’s good, because those who know use it and those who stick to marketing stuff could be disappointed. As it will probably never meet true FIDO2 level (CTAP 2.1/2.2) certifications, attestations based on Secure Element etc. Simply said, users could be disappointed for not being 100% implemented. For example user will not find its AAGUID d6d0bdc3-62ee-c4db-de8d-7a656e4a4487 on Microsoft learn page:
Microsoft Entra ID attestation for FIDO2 security key vendors
Another example could be MojeID and requirement for FIDO2 L2 & CC EAL6+ (i know Tropic Square inside 
, but does whole TS7 product meet EAL6+ as FIDO2 device??) for accessing government services & EU services.
Anyway, don’t take me wrong, i’m also big fan of Trezor’s FIDO2. But for some services GoTrust & Yubikey is unfortunately necessity.
1 Like
Trezor Safe 7 Bitcoin-only version does install Bitcoin-only firmware by default, and therefore is intended as a product that only supports Bitcoin.
If you wish to buy a Trezor Safe 7 that supports Bitcoin and all other Trezor-supported cryptocurrencies, simply select one of the other available colors at purchase.