Trezor Suite update, October 2026: Passphrases now go up to 128 characters

New passphrase character limit

In July 2026, a firmware flaw in some Coldcard devices meant their wallet backups were generated with far less randomness than intended. Attackers recreated those backups offline and drained funds from thousands of addresses.

Not every affected user lost funds in the first wave of attacks. Those with a strong, unique passphrase were protected, because an attacker needed both the weak backup and the passphrase to reach their wallet. This bought them extra time to migrate funds before the wallet was wiped.

So, the question we kept receiving was:

“Is it possible to create a longer passphrase?”

Now you can…

So for advanced users confident in using passphrases, you can now create a more secure ‘secret wallet’ that’s up to 128 characters long.

Hold your Arc tokens with your own keys

Arc EVM network is now in Trezor Suite. Add an Arc account, and you can send, receive, and track USDC and other Arc tokens, with every transaction approved on your Trezor.

Say you picked up USDC on Arc through an exchange or an app. You can now move it to an address you control and see it in Suite next to the rest of your portfolio.

Arc is a Layer-1 blockchain launched by Circle, the company behind USDC. It uses the same address format as Ethereum, but it’s a separate network, so coins and tokens on Arc can’t be used on Ethereum or other networks. Check the network before you send, and keep a little USDC in the account for fees.

Do more with your Soroban tokens

Earlier in October, Suite added support for Soroban tokens on Stellar.

Soroban is Stellar’s smart contract platform, and SEP-41 is the standard that defines how its tokens work, much like ERC-20 on Ethereum.

This update adds more you can do with them: receive them, see their transactions, and add custom SEP-41 tokens so they show up in your account.

You can also attach a memo, a short note that travels with the transaction.

Send ADA from your phone

Need to send ADA? You don’t need your laptop anymore! Grab your phone and your Trezor, send it, and approve the transaction on the device.

You can also sign messages with your Cardano account from mobile. Signing a message proves you control an address without moving any funds. Some apps and services ask for it to verify ownership.

Export your trade history and keep your own records

As part of a new series of trade features, you can now export your trade history from Trezor Suite as a CSV file, a plain spreadsheet format that opens in Excel, Google Sheets, and many tax and accounting tools.

Each trade comes with its trade ID, date, type, amounts, networks, provider, status, and transaction IDs. Every trade you’ve made through Suite’s providers ends up in one file you keep, instead of being spread across different dashboards.

The transaction IDs let you look up any trade on a block explorer and confirm it went through as recorded.

Want to try new features first?

Turn on the Early Access Program in Application Settings to test new features before the wider release.

Update Trezor Suite on desktop and mobile to get everything in this post.

For the full list, including smaller improvements and bug fixes, read the October 2026 release notes.

Have an idea for what Trezor Suite should do next? Share your thoughts in our Reddit community.