Markets › News › Security

Trezor Boosts Wallet Security with 128-Character Passphrases After Coldcard Attacks

Trezor has increased its wallet passphrase limit to 128 characters following security incidents involving Coldcard wallets.

Trezor has increased its wallet passphrase limit to 128 characters following security incidents involving Coldcard wallets. This is an original TLT brief synthesising 2 outlets (Crypto.news, Cointelegraph), plus live market data, as of Mon, 02 Nov 2026 13:30:05 UTC.

Why it matters

The update aims to enhance user security by allowing longer, more complex passphrases, addressing vulnerabilities exposed in recent crypto wallet attacks.

Covered by 2 outlets over about 59 min — TLT synthesises them all into one brief
  1. Cointelegraph
    Trezor lifts password ceiling after Coldcard’s $100M wallet thefts ↗
  2. Crypto.news
    Trezor expands wallet passphrase limit to 128 characters after Coldcard attacks ↗
Key takeaways
  • Trezor increased passphrase limit from 50 to 128 characters.
  • Move follows July Coldcard attacks where strong passphrases protected some users.
  • Trezor warns users about passphrase risks despite the update.
What the reporting agrees on

Both Crypto.news and Cointelegraph report that Trezor has expanded its wallet passphrase limit to 128 characters, citing the July Coldcard attacks as a catalyst for the change. Cointelegraph specifically mentions that strong passphrases helped protect some users during the Coldcard incident, while Crypto.news emphasizes Trezor's warning to users about the risks associated with passphrases. No outlet contradicts these core facts, but they differ slightly in their emphasis: Crypto.news focuses on the security update and risks, while Cointelegraph highlights the protective role of strong passphrases in the Coldcard attacks.

Trezor has announced an increase in its wallet passphrase limit from 50 to 128 characters, a move aimed at enhancing user security following recent attacks on Coldcard wallets.

The decision comes after July's Coldcard attacks, where some users with strong passphrases were able to protect their assets despite their wallet recovery information being compromised. This incident underscored the importance of robust passphrase practices in safeguarding crypto assets.

While multiple outlets confirm the passphrase limit increase and its connection to the Coldcard attacks, they differ slightly in their emphasis. Cointelegraph focuses on the protective benefits of strong passphrases, while Crypto.news emphasizes the update alongside warnings about the risks associated with using passphrases.

The update reflects a broader trend in the crypto industry to improve security measures in response to rising cyber threats. As attacks on digital wallets become more sophisticated, companies like Trezor are implementing features that allow users to create more complex and secure passphrases.

The broader crypto market remains relatively stable, with a total market cap of $2.68 trillion. Bitcoin is down 0.17% in the last 24 hours, and the overall market sentiment, as indicated by the Fear & Greed Index, is at 37, indicating a 'Fear' level.

The market when this published · November 2, 2026
Total market cap$2.68T
Bitcoin 24h-0.17%
Ethereum 24h+0.72%
BTC dominance58.4%
Fear & Greed37 · Fear

Trezor Boosts Wallet Security with 128-Character Passphrases — questions & answers

What prompted Trezor's passphrase limit increase?

The increase was prompted by the July Coldcard attacks, where strong passphrases protected some users.

How does the passphrase update improve security?

The update allows users to create longer, more complex passphrases, making it harder for attackers to compromise wallets.

What risks does Trezor warn about regarding passphrases?

Trezor warns that while passphrases enhance security, they also pose risks if users forget them, as recovery is impossible without the correct passphrase.

Which outlets reported this story?

This is an original TLT brief that synthesises reporting from Crypto.news, Cointelegraph, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

TLT Newsdesk Data-stamped

TLT's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · November 2, 2026 ⛓ Timestamped at Bitcoin block #974,252 sha256:3791fbb1b397c499
Corroborated across 2 outlets, reported over about 59 min — this is an original TLT summary with live market data, not the original article.Cointelegraph · Nov 2 10:46 ↗Crypto.news · Nov 2 11:45 ↗

Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.