All articles

Single-share Backup on Trezor

To help take your personal security standards up a notch, we're introducing the new Single-share Backup solution. In its simplest form, Single-share Backup is a new 20-word Wallet Backup (recovery seed) in place of the 12-word backups implemented on early Trezor models (Model T and Safe 3).
 

On the face of it, it might just look like we've changed the length of your default Wallet Backup (recovery seed). If we dive a little deeper, we'll actually see that Single-share Backup has many inherent advantages and ensures all Trezor users can easily upgrade to a Multi-share Backup scheme whenever they choose to do so.
 

Single-share Backup can be used with Trezor Model T, Safe 3, and Safe 5
 

Some technical background

So far, the general backup standard for Trezor hardware wallets (and many other followers in the industry) has been based on Bitcoin Improvement Proposal BIP39. This BIP outlines a standard for generating a “mnemonic phrase”, which is the list of easy-to-remember words that you write down for your Wallet Backup (recovery seed) when initializing your Trezor device. This wordlist serves as a “seed” for generating cryptographic keys, all of which is conveniently handled by your Trezor.

 

Learn more about Bitcoin Improvement Proposals (BIPs) and SatoshiLabs Improvement Proposals (SLIPs) in our What are BIPs and SLIPs? article. If you're really curious, you might also be interested in checking out the BIP39 project on GitHub.


This tried-and-tested backup method has served the majority of Trezor users well, and remains a safe option for anyone already using it. However, in the pursuit of enhanced security and resilience, new Trezor devices will offer the 20-word Single-share Backup by default, which is based on SatoshiLabs Improvement Proposal SLIP39.

 
SLIP39 was devised in 2019, designed to improve the backup process by distributing custodianship among several parties. In practice, this means “splitting” the seed into multiple shares using Shamir’s Secret Sharing Scheme. A set number of these shares, known as the threshold, must be combined in order to recover the original seed. For example, in a 3-of-5 scheme, any three shares can be used to recover a wallet. This is beneficial as even if one or two shares are somehow compromised, the entire Wallet Backup (recovery seed) is not exposed. This redundancy means you no longer have a single point of failure, as with the regular BIP39 backup standard.
 

Single-share Backup in practice

Our new Single-share backup scheme requires only one share, therefore can be thought of as a 1-of-1 Multi-share Backup (equivalent to a 1-of-1 Shamir Backup). Advantages of this new backup standard include:

  • Specific word-list: the words comprising your 20-word Wallet Backup are from a list of 1024 words that fit specific criteria set out to improve the backup process. For example, each word has a unique 4-letter prefix to avoid confusion and the similarity between the pronunciation of any two words has been minimized. These carefully selected words are easily distinguishable from one another, enhancing the user-friendliness of the backup and recovery process.
  • Easier to recover: The words comprising your Wallet Backup are optimized for entry on a T9 keyboard (the same as on Trezor and other touchscreen devices).
  • Stronger checksum: the final three words of your 20-word Wallet Backup (and therefore each share if you upgrade to Multi-share Backup) form a stronger checksum, which ensures the integrity and validity of each Wallet Backup. If you make a mistake when writing down your Wallet Backup, the checksum won’t let you continue until your correct the mistake.
  • Easy to upgrade: you can seamlessly upgrade from a Single-share Backup to Multi-share Backup in Trezor Suite, while continuing to use the same accounts and addresses. Remember - your Single-share backup will still be valid if you upgrade to a Multi-share backup later!
 
Did you know that the first four words encode information about the type of your backup? This is why the third and fourth word in Single-share Backups are always: academic academic


Not only does our enhanced 20-word Single-share Backup standard ensure a more robust and user-friendly process for backing up and recovering your wallet, it also allows for easy upgrade to an Advanced Multi-share Backup, offering superior security with no single point of failure.