TREZOR Firmware 1.4.0

Today, SatoshiLabs released the next iteration of the firmware, further expanding the abilities of your TREZOR with a secure and comfortable two-factor authentication. Update your device to enjoy the new features with your favorite online services!

Two-Factor Authentication Done Right

Two-factor authentication (2FA) is currently the most common way how you can protect your online accounts from unauthorized access. In addition to what you know (your username and password), you use something that only you have — a phone, an app or a specialized hardware token, in order to login securely.

However, some methods of 2FA are inherently insecure. The most popular 2FA implementation, Time-based One-Time Password (TOTP), popularized by its use on Google Auth services, transmits the shared secret (master key) over the internet during the setup process. This weakness has been recognized by major players who created FIDO Alliance and defined new, more secure standards such as U2F.

Universal Second Factor (U2F) on the other hand, never reveals sensitive information. More information will be available in our more detailed article on Two-Factor Authentication available here.

Starting with firmware 1.4.0, TREZOR officially supports the U2F specification. After updating your device firmware, you can start using TREZOR as your 2nd factor authentication token with services such as Google or Dropbox. Check out services using U2F at twofactorauth.org or dongleauth.info.

One further improvement of TREZOR on top of U2F is that TREZOR users can truly verify what they are about to authorize via the on-device display.

Pavol Rusnak, core developer of TREZOR commented on the release: “TREZOR offers a convenient, yet secure method of two-factor authentication, based on a universal standard. We strongly recommend websites to offer U2F instead of TOTP.”

Currently, only Google Chrome officially supports FIDO/U2F. Firefox users will need to download and install the U2F Support Add-on.

Firmware Update for Ethereum Developers

This firmware update also brings Ethereum support to TREZOR. However, this is only the first piece of the puzzle. In order for the users to use TREZOR as a secure storage for their Ether, ethereum wallets have to first implement the necessary components.

UPDATE: Ethereum and Ethereum Classic support has been fully implemented in TREZOR. In order to use TREZOR with ethers, please connect your device to MyEtherWallet. A detailed guide is available in our separate blog post, linked below.