Trezor lifts password ceiling after Coldcard’s $100M wallet thefts

Hardware wallet provider Trezor has officially lifted its legacy password ceiling to allow significantly longer and more complex user passphrases. This security enhancement was prompted by a series of devastating attacks against rival Coldcard devices, which resulted in estimated losses exceeding one hundred million dollars. Investigators noted that while seed phrases were compromised in those incidents, robust passphrases successfully shielded funds for a subset of cautious users. By expanding the character limit, Trezor enables its community to implement exponentially stronger entropy against brute-force attacks. The update aligns with a broader industry push toward rigorous self-custody protocols as attackers increasingly target hardware-level vulnerabilities. Market participants view this as a positive step for hardware security, reinforcing confidence in decentralized cold storage solutions amid escalating threat landscapes.