CONNECT WITH US
Web3 & Blockchain

Web3 & Blockchain

Trezor lifts password ceiling after Coldcard’s $100M wallet thefts

Cointelegraph - Blockchain logo

Published on

Add as a preferred source on Google
Trezor lifts password ceiling after Coldcard’s $100M wallet thefts

Written by Ezra Reguerra staff writer Edited by Yohan Yun staff editor

Trezor cited July’s Coldcard attacks, in which strong passphrases helped protect some users whose wallet recovery information was compromised.

Hardware wallet maker Trezor has increased the maximum length of optional wallet passphrases from 50 to 128 characters.

On Sunday, Trezor said the change is available in its Trezor Suite with updated device firmware. Older firmware still limits passphrases to 50 characters.

According to Trezor, a passphrase acts like an additional password that users set alongside their wallet’s recovery phrase. An attacker who obtains the recovery phrase would still need the correct passphrase to access funds in that wallet.

Trezor cited the Coldcard attacks in July , when a firmware flaw caused some devices to generate recovery phrases with insufficient randomness, allowing attackers to reconstruct them. Trezor said strong, unique passphrases protected some affected users.

On Friday, the company advised customers who bought wallets from former authorized reseller CryptoBilis since March to move their funds to new wallets .

An Indonesian customer reported a suspected implant inside a Trezor Safe 5 that could capture on-screen information, including recovery phrases, and transmit it over a cellular network. Trezor said Friday it had not examined the device and had received no reports of related losses.

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Aviva Investors launches tokenized share class of $29B Sterling fund on XRP Ledger


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.