According to Cointelegraph, Trezor has increased the maximum allowed length for wallet passphrases in its hardware devices. The change directly references security incidents involving Coldcard wallets in July, during which some users experienced theft despite having strong passphrases.
In those July attacks on Coldcard wallets, certain users saw their funds compromised even when they used robust recovery phrases. For some of these affected users, employing a lengthy passphrase helped prevent unauthorized access or loss of assets.
Trezor’s update raises the allowable passphrase length to support greater complexity for users concerned about wallet security. The modification aims to provide an additional layer of protection aligned with observed threat patterns in recent Coldcard-related incidents.
