Trezor expands wallet passphrase limit to 128 characters after Coldcard attacks

Hardware wallet manufacturer Trezor has increased its maximum passphrase length from 50 to 128 characters, citing lessons from cryptocurrency thefts involving vulnerable Coldcard devices earlier this year. Summary Trezor has expanded its wallet passphrase limit from 50 to 128 characters in its October software update. The feature requires updated firmware and supports Model T, Safe 3, Safe 5 and Safe 7 devices. Trezor cited July’s Coldcard attacks, where weak recovery phrases exposed Bitcoin wallets to theft. Strong, unique passphrases reportedly protected some affected Coldcard users from immediate losses. The announcement follows a separate warning about potentially tampered hardware wallets sold through CryptoBilis. According to Trezor’s November 1 announcement, the change is available through its October software update and requires compatible device firmware. The company said longer passphrases offer experienced users another way to secure cryptocurrency holdings when wallet recovery information becomes exposed. The announcement follows July’s Coldcard security incident, in which attackers exploited improperly generated recovery phrases to access thousands of Bitcoin addresses...