<p>Trezor is a relatively simple, specialized hardware device. It does not run any OS, just a small program specifically developed for signing Bitcoin transactions and managing the keys. Thus, the attack surface is very small compared to conventional general-purpose computers. You can say it's practically impossible to infect it.</p>

<p>Security is a much more complicated area though and I wouldn't say it's impossible unless I can formally prove it. It is however the safest device I know of (but this is subjective).</p>

CC BY-SA 3.0
2014-10-15T22:20:49.440Z
2014-10-15T22:20:49.440Z
knaperek
<p>You simply can't add, insert or install software or any executable stuff into a Trezor. Due to the way the Trezor is set up, it runs fully autonomically. </p>

<p>The only thing that goes into the Trezor is transaction details (addresses, amounts, etc). There's just no opportunity whatsoever to put any malware in there, because whatever you send to the Trezor, it's being interpreted as mere <em>transaction details</em> (i.e. data, not code) which may be valid or not (and if not, it'll say "your details are bogus, I can't create a proper transaction from this"). But it's <strong>never being executed</strong>.</p>

<p>So by definition it doesn't matter whatever kind of smart sneaky malware you send to the Trezor. It will have no effect.</p>

CC BY-SA 3.0
2014-11-16T11:29:48.213Z
Thanks again.  Have asked related question  http://bitcoin.stackexchange.com/questions/32544/how-can-trezor-update-firmware-but-never-receive-malware
oks
CC BY-SA 3.0
2014-10-15T21:53:30.267Z
2014-10-15T21:53:30.267Z
Maǳi Koǌo
<p>The <a href="http://www.bitcointrezor.com/#testimonials" rel="nofollow">Trezor testimonials</a> include that </p>

<blockquote>
  <p>TREZOR ... cannot be infected by malware </p>
</blockquote>

<p>What is it about a Trezor that means it cannot be infected?</p>

<security><data-security><trezor>
What is it about a Trezor that means it can't be infected by malware?
oks
# What is it about a Trezor that means it can't be infected by malware?

(Asked by: username_0 on 2014-10-15)

The [Trezor testimonials](http://www.bitcointrezor.com/#testimonials) include that

> TREZOR ... cannot be infected by malware

What is it about a Trezor that means it cannot be infected?

**Tags:** security, data-security, trezor


---

## 2 answers

### Answer by username_2 on 2014-10-15. Score: 3 | Accepted answer

You simply can't add, insert or install software or any executable stuff into a Trezor. Due to the way the Trezor is set up, it runs fully autonomically.

The only thing that goes into the Trezor is transaction details (addresses, amounts, etc). There's just no opportunity whatsoever to put any malware in there, because whatever you send to the Trezor, it's being interpreted as mere *transaction details* (i.e. data, not code) which may be valid or not (and if not, it'll say "your details are bogus, I can't create a proper transaction from this"). But it's **never being executed**.

So by definition it doesn't matter whatever kind of smart sneaky malware you send to the Trezor. It will have no effect.

> **Comments:**
> **username_0**: Thanks again.  Have asked related question  http://bitcoin.stackexchange.com/questions/32544/how-can-trezor-update-firmware-but-never-receive-malware  

---

### Answer by username_1 on 2014-10-15. Score: 4

Trezor is a relatively simple, specialized hardware device. It does not run any OS, just a small program specifically developed for signing Bitcoin transactions and managing the keys. Thus, the attack surface is very small compared to conventional general-purpose computers. You can say it's practically impossible to infect it.

Security is a much more complicated area though and I wouldn't say it's impossible unless I can formally prove it. It is however the safest device I know of (but this is subjective).


---

