Hardware wallet maker Trezor has increased the maximum length of optional wallet passphrases from 50 to 128 characters. The change is available through Trezor Suite with updated device firmware, while older firmware continues to impose the 50-character limit.
Trezor describes a passphrase as an additional password used alongside a wallet’s recovery phrase. If an attacker obtains the recovery phrase, access to the funds still requires the correct passphrase.
The company pointed to the Coldcard attacks in July as a reason for highlighting the feature. A firmware flaw caused some Coldcard devices to generate recovery phrases with insufficient randomness, allowing attackers to reconstruct them. According to Trezor, strong and unique passphrases protected some affected users.
The update comes after a separate warning concerning Trezor devices. On Friday, the company advised customers who had purchased wallets from former authorized reseller CryptoBilis since March to transfer their funds to new wallets.
The warning followed an Indonesian customer’s report of a suspected implant inside a Trezor Safe 5. The device allegedly could capture information displayed on the screen, including recovery phrases, and transmit it over a cellular network. Trezor said it had not examined the device and had received no reports of related losses.
Sources: Cointelegraph.