# Here's what you should know about Trezor and KeepKey security and how you can improve it: https://youtu.be/h-YkkSSkaNk Additional Reading/Links: [Blog Detailing the Extraktor](https://ledger-donjon.github.io//Unfixable-Key-Extraction-Attack-on-Trezor/) [How to Add Passphrase on Trezor](https://blog.trezor.io/seed-pin-passphrase-e15d14a0b546) [Video on multi-passphrase on Trezor here](https://www.youtube.com/watch?v=212NH5xfVrc) [How to Add Passphrase on KeepKey](https://blog.cryptocoin.cc/2019/05/26/guide-how-to-enable-and-a-bip39-passphrase-with-keepkey-to-increase-your-security/) [Restoring KeepKey](https://www.reddit.com/r/keepkey/comments/5mmmhe/using_passphrase_with_keepkey/)
| author | heiditravels |
|---|---|
| permlink | why-an-update-can-t-fix-trezor-and-keepkey-vulnerability-and-what-you-can-do-about-it |
| category | trezor |
| json_metadata | {"tags":["trezor","keepkey","warning","cryptotips","security"],"image":["https://img.youtube.com/vi/h-YkkSSkaNk/0.jpg"],"links":["https://youtu.be/h-YkkSSkaNk","https://ledger-donjon.github.io//Unfixable-Key-Extraction-Attack-on-Trezor/","https://blog.trezor.io/seed-pin-passphrase-e15d14a0b546","https://www.youtube.com/watch?v=212NH5xfVrc","https://blog.cryptocoin.cc/2019/05/26/guide-how-to-enable-and-a-bip39-passphrase-with-keepkey-to-increase-your-security/","https://www.reddit.com/r/keepkey/comments/5mmmhe/using_passphrase_with_keepkey/"],"app":"steemit/0.1","format":"markdown"} |
| created | 2019-07-22 10:55:39 |
| last_update | 2019-07-22 10:55:39 |
| depth | 0 |
| children | 4 |
| last_payout | 2019-07-29 10:55:39 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 2.940 HBD |
| curator_payout_value | 0.853 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 699 |
| author_reputation | 238,399,845,730,952 |
| root_title | "Why an Update Can't Fix Trezor and KeepKey Vulnerability (And What You Can Do About It)" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 88,599,194 |
| net_rshares | 11,137,784,379,509 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| ajvest | 0 | 92,680,367,643 | 80% | ||
| chris4210 | 0 | 584,707,219,920 | 100% | ||
| teamsteem | 0 | 32,327,354,989 | 30% | ||
| nanzo-scoop | 0 | 1,300,741,921,822 | 20% | ||
| mummyimperfect | 0 | 16,186,700,964 | 20% | ||
| ak2020 | 0 | 6,530,649,144 | 20% | ||
| kenny-crane | 0 | 111,715,692,150 | 30% | ||
| will-zewe | 0 | 1,655,326,101 | 100% | ||
| garagebill | 0 | 20,971,927,542 | 100% | ||
| schro | 0 | 1,593,216,486 | 100% | ||
| g-dubs | 0 | 2,345,733,410 | 5% | ||
| lukestokes | 0 | 1,190,160,037,692 | 70% | ||
| mauricemikkers | 0 | 1,643,450,230 | 100% | ||
| emily-cook | 0 | 521,268,895 | 20% | ||
| jonnyrevolution | 0 | 4,655,696,709 | 11% | ||
| gtg | 0 | 3,650,509,664,827 | 25% | ||
| fyrstikken | 0 | 73,697,317 | 1% | ||
| heiditravels | 0 | 1,495,667,553,179 | 100% | ||
| stealthtrader | 0 | 31,104,338,856 | 100% | ||
| anasya | 0 | 2,021,889,082 | 100% | ||
| gikitiki | 0 | 12,118,358,072 | 25% | ||
| nepalipahad | 0 | 2,021,781,518 | 10% | ||
| toxonaut | 0 | 542,487,635 | 100% | ||
| thelindvall | 0 | 61,676,546,282 | 70% | ||
| arcange | 0 | 19,991,323,928 | 2% | ||
| raphaelle | 0 | 768,104,311 | 2% | ||
| alsprinting | 0 | 7,341,464,891 | 50% | ||
| drbec | 0 | 131,674,666 | 100% | ||
| nickskywalker | 0 | 27,795,547,966 | 70% | ||
| fooblic | 0 | 16,802,738,881 | 99% | ||
| pixiehunter | 0 | 14,694,612,602 | 100% | ||
| nomadnessie | 0 | 398,340,918 | 100% | ||
| moondancer762 | 0 | 6,710,554,684 | 100% | ||
| t-bot | 0 | 696,905,323,464 | 20% | ||
| ancapwarren | 0 | 11,945,908,327 | 50% | ||
| faded-gravity | 0 | 397,795,133 | 100% | ||
| aksinya | 0 | 34,124,566,079 | 50% | ||
| wakeupworldnews | 0 | 35,664,129,220 | 100% | ||
| felix.herrmann | 0 | 10,208,786,173 | 20% | ||
| spaceginger | 0 | 10,138,247,051 | 30% | ||
| mafeeva | 0 | 19,791,320,273 | 20% | ||
| bp9930 | 0 | 10,769,844,204 | 100% | ||
| sebastianjago | 0 | 31,300,723,074 | 5% | ||
| tiamaria | 0 | 10,140,399,988 | 100% | ||
| mytechcrunch | 0 | 71,112,238 | 20% | ||
| marcelbraendle | 0 | 23,333,117,072 | 100% | ||
| culturearise369 | 0 | 17,564,779,490 | 100% | ||
| klinckify | 0 | 18,190,056,839 | 100% | ||
| teammo | 0 | 31,648,882,172 | 50% | ||
| steemrich | 0 | 253,044,104,727 | 100% | ||
| emonandels | 0 | 301,227,570 | 100% | ||
| nov3a4 | 0 | 2,825,045,297 | 100% | ||
| gonzalolpm | 0 | 1,114,729,273 | 100% | ||
| treetoptennis | 0 | 12,786,490,072 | 100% | ||
| agrostis | 0 | 34,129,878,259 | 50% | ||
| jkkim | 0 | 27,068,039 | 10% | ||
| ebejammin | 0 | 6,042,383,469 | 100% | ||
| denisechips | 0 | 42,931,806,584 | 100% | ||
| kevindixon | 0 | 2,132,314,964 | 100% | ||
| joechiappetta | 0 | 116,079,434,945 | 100% | ||
| tiplas | 0 | 10,096,279,559 | 100% | ||
| djluka14 | 0 | 4,892,816,478 | 10% | ||
| maven360 | 0 | 14,864,671,957 | 100% | ||
| lukechiappetta | 0 | 6,508,704,399 | 100% | ||
| heelsonwheels | 0 | 2,918,782,717 | 100% | ||
| yeah-science | 0 | 548,317,576 | 100% | ||
| funnyfaces | 0 | 3,654,188,624 | 100% | ||
| shalala | 0 | 4,736,052,724 | 100% | ||
| realestatecoach | 0 | 30,147,158,111 | 100% | ||
| oldman28 | 0 | 17,689,099,455 | 40% | ||
| mochita | 0 | 546,510,542 | 100% | ||
| jair9004 | 0 | 548,317,576 | 100% | ||
| wuzupin | 0 | 549,454,656 | 100% | ||
| unomas | 0 | 21,623,112,587 | 100% | ||
| juanete20 | 0 | 591,561,743 | 100% | ||
| ansonoxy | 0 | 1,700,813,906 | 100% | ||
| joshman | 0 | 74,946,889,794 | 6.88% | ||
| chamudiliyanage | 0 | 8,540,921,502 | 100% | ||
| sendpi | 0 | 8,768,713,738 | 100% | ||
| joshpeterson | 0 | 6,954,967,712 | 100% | ||
| kettleandseagull | 0 | 17,144,439,359 | 100% | ||
| espoem | 0 | 10,998,161,673 | 5% | ||
| stevejhuggett | 0 | 4,391,653,622 | 10% | ||
| zoidsoft | 0 | 67,224,217,593 | 100% | ||
| cryptotradingfr | 0 | 127,294,250 | 10% | ||
| imisstheoldkanye | 0 | 2,508,509,735 | 1% | ||
| thevillan | 0 | 5,067,475,623 | 4.3% | ||
| angelicagarcia | 0 | 2,898,442,174 | 100% | ||
| mattw | 0 | 3,108,886,300 | 100% | ||
| mman | 0 | 4,480,846,488 | 100% | ||
| fabianklauder | 0 | 68,200,348,076 | 38% | ||
| cpufronz | 0 | 2,544,412,586 | 100% | ||
| green.abundance | 0 | 547,915,456 | 100% | ||
| victorialegend | 0 | 716,212,065 | 100% | ||
| crypto-guide | 0 | 404,216,604 | 55% | ||
| marcelgoo | 0 | 8,577,353,230 | 100% | ||
| dawidburdun | 0 | 548,335,418 | 100% | ||
| kryptik.tigrrr3d | 0 | 8,519,857,574 | 100% | ||
| felix7d2 | 0 | 547,624,652 | 100% | ||
| vladcraciun | 0 | 7,284,328,314 | 100% | ||
| sholi | 0 | 11,836,586,903 | 70% | ||
| stormrider | 0 | 542,079,918 | 100% | ||
| enlighted | 0 | 249,408,740 | 50% | ||
| kec7gittfl | 0 | 523,719,494 | 100% | ||
| andreasgrubhofer | 0 | 931,483,599 | 1% | ||
| kennybot | 0 | 21,321,609,533 | 100% | ||
| yandakuala | 0 | 0 | 2% | ||
| celinavisaez | 0 | 4,676,420,325 | 25% | ||
| tcf8670 | 0 | 125,356,112,093 | 100% | ||
| wave.beads | 0 | 249,227,263 | 100% | ||
| fitat40 | 0 | 39,708,235,024 | 20% | ||
| updatedanthology | 0 | 66,126,015 | 100% | ||
| sbi7 | 0 | 121,430,493,230 | 70.96% | ||
| jidgabol | 0 | 230,567,873 | 100% | ||
| steeming-hot | 0 | 0 | 0.01% | ||
| rafaeluriel | 0 | 248,999,724 | 50% | ||
| hongman96 | 0 | 373,841,765 | 100% | ||
| laissez-faire | 0 | 22,648,592 | 100% | ||
| planetofthedapps | 0 | 0 | 90% | ||
| wil.metcalfe | 0 | 15,865,070,207 | 100% | ||
| hdu | 0 | 4,542,447,086 | 2% | ||
| enthef | 0 | 5,026,114,793 | 100% | ||
| scoopstakes | 0 | 39,218,743,882 | 20% | ||
| nanzo-snaps | 0 | 70,944,057,716 | 20% | ||
| avesum123 | 0 | 159,510,798 | 50% | ||
| livingfreedom | 0 | 6,721,132,485 | 100% | ||
| bahja | 0 | 890,058,362 | 86% | ||
| steempatron | 0 | 75,275,786,524 | 86% | ||
| chameleon47 | 0 | 8,601,723 | 5% | ||
| cncnc | 0 | 461,877,878 | 90% | ||
| pc-tip | 0 | 561,827,384 | 3% | ||
| kgswallet | 0 | 1,101,936,302 | 20% | ||
| kgcoin | 0 | 155,070,822 | 1% |
Please, let us know if the Ledger is a safe option? Enjoy Australia, it's a great country and do some research on the local company "Travel by Bit" you'll love what they're doing over-there.
| author | juanete20 |
|---|---|
| permlink | pv1iro |
| category | trezor |
| json_metadata | {"tags":["trezor"],"app":"steemit/0.1"} |
| created | 2019-07-22 11:04:36 |
| last_update | 2019-07-22 11:04:36 |
| depth | 1 |
| children | 2 |
| last_payout | 2019-07-29 11:04:36 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 191 |
| author_reputation | 821,188,373,352 |
| root_title | "Why an Update Can't Fix Trezor and KeepKey Vulnerability (And What You Can Do About It)" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 88,599,636 |
| net_rshares | 0 |
Like I said in the video, the report was created by the Ledger security team so it isn't completely unbiased. That being said it's something to take seriously either way. In regards to Ledger being "more secure", the best I can say is that so far it has proven to be a successfully secure hardware wallet. Please keep in mind that there are no guarantees in this space.
| author | heiditravels |
|---|---|
| permlink | pv1jb9 |
| category | trezor |
| json_metadata | {"tags":["trezor"],"app":"steemit/0.1"} |
| created | 2019-07-22 11:16:24 |
| last_update | 2019-07-22 11:16:24 |
| depth | 2 |
| children | 1 |
| last_payout | 2019-07-29 11:16:24 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 369 |
| author_reputation | 238,399,845,730,952 |
| root_title | "Why an Update Can't Fix Trezor and KeepKey Vulnerability (And What You Can Do About It)" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 88,600,134 |
| net_rshares | 0 |
Thanks for your reply!
| author | juanete20 |
|---|---|
| permlink | pv1n3t |
| category | trezor |
| json_metadata | {"tags":["trezor"],"app":"steemit/0.1"} |
| created | 2019-07-22 12:38:18 |
| last_update | 2019-07-22 12:38:18 |
| depth | 3 |
| children | 0 |
| last_payout | 2019-07-29 12:38:18 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 22 |
| author_reputation | 821,188,373,352 |
| root_title | "Why an Update Can't Fix Trezor and KeepKey Vulnerability (And What You Can Do About It)" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 88,603,891 |
| net_rshares | 0 |
There's also Bitfi, which doesn't store your keys, but instead generates them every time from your passphrase. The problem with Bitfi is that it has a screen that can be hacked, so you don't know if what the device is telling you is the correct address actually is generated from the device or maliciously swapped with a hackers substituted address. If Trezor or Ledger could follow Bitfi's seed generating practices, but keep their separate screen, that would be the best of both worlds.
| author | zoidsoft |
|---|---|
| permlink | pv249h |
| category | trezor |
| json_metadata | {"tags":["trezor"],"app":"steemit/0.1"} |
| created | 2019-07-22 18:48:54 |
| last_update | 2019-07-22 18:48:54 |
| depth | 1 |
| children | 0 |
| last_payout | 2019-07-29 18:48:54 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 490 |
| author_reputation | 17,657,439,386,076 |
| root_title | "Why an Update Can't Fix Trezor and KeepKey Vulnerability (And What You Can Do About It)" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 88,617,311 |
| net_rshares | 0 |
hiveblocks