Trezor wallet passphrase question

hi

if someone gets hold of one of my trezor passphrases to my wallets, can they withdraw my crypto or they still need to the device to sign the transactions?

make sure you know the difference between seed and passphrase.

If someone gets hold of your seed then yes, they can withdraw your crypto that’s why you need to keep it safe, but you can prevent this with a passphrase which is like an extra seed word

https://wiki.trezor.io/Passphrase
https://wiki.trezor.io/User_manual:Security_best_practices

that is what am asking but still a little confused.

if they have my passphrase and not my seed phrase they cannot withdraw?

no, you always need seed+passphrase