Trezor Safe 7 bypassed the PIN on multiple new devices. Is this a serious security flaw? Or just how this device is built?

🔒 General Trezor question

I tested my Trezor Safe 7 by connecting it to three different devices.

On my phone, it correctly asked me to enter the PIN. However, when I connected it to the other two devices my 2 laptops and new android, I appeared to get access without being asked for the PIN at all.

These were new devices, so I do not understand why access was seemingly granted automatically. I need to know whether:

- the wallet was only displaying balances in watch-only mode,

- this is an actual security problem.

From what I could see, the wallet appeared fully accessible. If someone who found or stole the device could connect it to another computer and access or transfer the funds without entering the PIN, that would make the device completely useless as a security product.

Has anyone else experienced this with the Trezor Safe 7?

I would appreciate a technical explanation from Trezor. I am not interested in generic advice about protecting my recovery phrase. I specifically want to understand why two newly connected devices did not trigger a PIN request.

At first i tought tansactions would still require confirmation and a PIN on the Trezor itself? But when i tried making a transaction it fully went trough wich pisses me off more..

Until this is explained, I have very little confidence in the device currently

Posted Aug 5, 2026, 1:34 PM UTC

422
Loading comments…