Trézór Bridge | Introducing the New Trézór App

Introducing the Trézór App and Trézór Bridge

Trézór Bridge is the lightweight local service that enables secure communication between web/desktop apps and your Trezor-compatible hardware. Today we’re releasing the redesigned Trézór App — a modern, privacy-first hub that bundles Bridge functionality, clearer device management, and trusted integrations into a single desktop experience.

Local-first connectivity

Bridge runs on your machine and relays encrypted requests only on localhost — your keys remain inside the device at all times.

Simplified device onboarding

The new app guides you through device setup, firmware updates, and recovery verification with step-by-step clarity.

Trusted Web integrations

Connect safely to web apps and DeFi services: Trézór App mediates access and prompts for user consent when needed.

Developer-friendly APIs

Documented local APIs and SDKs make integrating Bridge simple while keeping security guardrails intact.

What’s new in the Trézór App?

We focused on three areas: clarity, privacy, and extensibility. The app centralizes device health (firmware, battery for supported devices), shows signed-request history, and provides a permission manager for connected origins. Visual transaction previews and embedded checksum verification reduce user error when approving operations in the device.

Quick highlight: On-device verification is still mandatory — the app never signs on your behalf. You must confirm every sensitive operation on the Trezor device itself.

Security model — what's guaranteed

Keys stay on-device

Private keys are generated and stored inside the hardware — never exported.
All signing operations are displayed on-device; physical confirmation is required.
Bridge is intentionally minimal: it relays requests, performs origin checks and forwards signed responses.

Privacy & operation

Bridge runs locally and does not collect or transmit your private data during normal operation.
The app logs events locally for transparency; logs can be cleared and are not uploaded unless you opt-in.
Where telemetry exists, it is opt-in and privacy-preserving (aggregated, non-identifying).

How to use — a short workflow

Install the Trézór App and run the setup wizard to install Bridge and optional helpers.
Connect your Trezor device via USB (or supported transport); the app will recognize it and display device status.
Open a web app that supports Trezor; it will request access — the Trézór App will prompt you to allow or deny.
When you initiate a transaction, review the details on the Trezor device screen and confirm to sign.
Signed payloads are forwarded back to the app — nothing ever leaves the device without your confirmation.

Developer notes

Integrators: use the official Trézór SDK and follow least-privilege principles. Request only the scopes you need, present human-readable transaction summaries, and never encourage users to bypass on-device confirmation. Sample SDKs and API docs are included in the developer section of the app.

Troubleshooting

If your device isn't detected: check cable/port, ensure Bridge service is running, restart the app.
On macOS, verify you have granted the app required permissions when prompted.
For persistent errors, open diagnostic logs in the app and consult the official support portal.

Support & responsible disclosure

If you find a security issue, please follow responsible disclosure and contact our security team via the official channels. We maintain a bug bounty program and appreciate coordinated reports.