Trezor Safe 5 vs Safe 7: which should you buy?

This comparison contains affiliate links. If you buy via these links, I may earn a commission at no extra cost to you. It doesn’t change what I say about the products.

Both of these are Trezor. Both run the same open-source firmware, the same Trezor Suite, the same Bitcoin-only option, and back up the same way. So unlike a Ledger-vs-Trezor decision — where the firmware trust model itself is on the table — choosing between the Safe 5 and the Safe 7 is not a question of whether you trust the device. It’s a question of one trade-off: do you want Bluetooth and a second secure element, or do you want the smaller, cheaper, wireless-free design the Safe 5 deliberately keeps?

I’ll give you the answer up front, then show the work.

The short answer

For most people: buy the Safe 5 at $169. It is USB-C only by design, it has no wireless attack surface, and its single EAL6+ secure element plus open-source firmware is everything self-custody actually requires. Nothing about it is obsolete now that the Safe 7 exists.

Buy the Safe 7 at $249 if you sign transactions on an iPhone and want to do it over Bluetooth without an adapter, or you specifically want the dual-secure-element flagship and you’re comfortable leaving Bluetooth off when you’re not actively pairing.

And consider the Safe 3 at $79 if this is your first hardware wallet and you’re protecting a few hundred to a couple thousand dollars of Bitcoin — it runs the same Bitcoin-only firmware and is honestly the right entry point. (The math on when a hardware wallet pays for itself is in how much Bitcoin before a hardware wallet.)

That’s the decision. The rest of this page is why.

Spec comparison

Prices and specs are from each device’s full review — Safe 5 and Safe 7 — both sourced from Trezor’s published documentation and hands-on time.

The four differences that actually matter

Strip away the marketing and exactly four things change between these devices. Here’s what each one means for a Bitcoin holder.

1. One secure element vs. two

The Safe 5 introduced a secure element to the Trezor line — an Infineon Optiga Trust M, certified CC EAL6+ — which closed the one genuine architectural gap older Trezors had: physical seed extraction via voltage glitching, the attack class Kraken Security Labs documented against the Model T in 2020.

The Safe 7 pairs that with a second EAL6+ secure element. The design splits key-handling operations so that compromising either element alone isn’t enough to extract a usable seed. This is real defense-in-depth against physical-extraction attacks — the most significant change to the hardware-protection layer any Trezor has shipped since 2014.

Does it matter for you? A single EAL6+ secure element is already strong; it is what protects the Safe 5, the Safe 3, and millions of devices in the field. The dual-SE design is a meaningful improvement specifically against an attacker who has your physical device and lab-grade extraction equipment. If that’s in your threat model — large holdings, a target on your back — it’s worth paying for. For most self-custodians, the single SE on the Safe 5 is not a weakness you’ll ever feel.

2. USB-C only vs. Bluetooth

This is the real fork in the road. The Safe 5 has no wireless connectivity at all — no Bluetooth, no NFC. SatoshiLabs made that a deliberate security choice: a hardware wallet’s wireless stack is code that can theoretically be attacked, and removing it removes the surface entirely.

The Safe 7 adds Bluetooth. It’s encrypted via Trezor’s own open-source Trezor Host Protocol, it requires an on-device pairing confirmation, and USB-C still works if you never enable Bluetooth at all. The payoff is genuine: native iOS signing without an OTG adapter, which the Safe 5 can’t do cleanly.

Does it matter for you? If you sign on an iPhone, Bluetooth on the Safe 7 is a real quality-of-life upgrade. If you sign at a desk on a computer you control — the way most serious holders do — then the Safe 5’s no-wireless design is a feature, not a limitation. There is no objectively correct answer here; it’s your threat model and how much daily mobile signing is worth to you. My own approach: USB-C-only for the high-value cold tier, and I’d only reach for Bluetooth on the convenience tier where I’m signing smaller amounts more often.

3. No fingerprint vs. fingerprint

The Safe 7 adds a capacitive fingerprint reader; the print is stored inside the secure element and never leaves it. SatoshiLabs is explicit that it’s a convenience feature, not a PIN replacement — a fresh boot and higher-value spends still require the PIN. It’s genuinely useful if you check your balance often during a market move, without weakening the security model for actual sends. The Safe 5 has no fingerprint; you use the PIN.

4. No battery vs. LiFePO4 battery

The Safe 7 has a lithium iron phosphate battery — the chemistry that won EVs on safety and longevity, with roughly 4x the charge cycles of standard lithium-ion. The trade-off is subtle but real: the Safe 7 now has a wear part the Safe 5 doesn’t. In a decade, a Safe 7 battery may need replacing; a Safe 5, drawing power only from USB-C, has nothing to wear out. For a device you might leave in a drawer for years between uses, “no battery” is a quiet point in the Safe 5’s favor.

What’s identical — and why it’s most of the experience

It’s easy to over-weight the differences. Here’s what does not change between these two devices:

• The firmware. Same open-source codebase at github.com/trezor/trezor-firmware, same auditability, same Bitcoin-only firmware variant that strips altcoin code paths. If you verified your Safe 5’s firmware fingerprint, you verify the Safe 7 the same way.
• Trezor Suite. Same desktop client, same send/receive flows, same on-screen address verification, same built-in coinjoin.
• SLIP-39 Shamir backup. Both support splitting your backup into 2-of-3 (or similar) shares — the feature that makes inheritance and geographic distribution work without a custodian.
• Supply-chain integrity. Both ship without firmware installed, both verify on each boot, both arrive in anti-tamper packaging you inspect on delivery.

What you’re choosing between is the hardware-redundancy-plus-wireless trade-off and an $80 price gap — not the core self-custody experience. That part is the same Trezor either way.

The price-value math

At $169 vs. $249, the gap is $80 — about 47% more for the Safe 7. Frame it against what you’re protecting: if you’re securing more than a few months of savings in Bitcoin, the difference between these two devices is a rounding error next to the value at stake. Don’t buy the cheaper one to save $80, and don’t buy the pricier one for specs you won’t use. Buy the one whose one trade-off matches how you’ll actually hold and sign.

• If “I never want wireless near my keys” describes you → the $80 you save on the Safe 5 is the right call.
• If “I want the maximum-security flagship and iPhone signing” describes you → the $80 on the Safe 7 buys exactly that.

Who should buy which — the clean version

Buy the Trezor Safe 5 if:

• You sign on a computer, not a phone — the no-wireless design is a security win you’ll actually benefit from.
• You want the lowest-attack-surface Trezor that still has a secure element and a touchscreen.
• You’d rather put the $80 toward a steel seed backup than toward Bluetooth and a fingerprint sensor.
• You don’t want a battery as a long-term wear part.

Buy the Trezor Safe 7 if:

• You sign on an iPhone and want Bluetooth signing without an OTG adapter.
• You want the dual-secure-element flagship for a higher-value threat model, and you’ll leave Bluetooth disabled when you’re not pairing.
• You’re upgrading from a Model T or Trezor One and want the newest hardware while you’re at it.

Consider the Trezor Safe 3 ($79) instead if this is your first hardware wallet and you’re protecting a modest amount — same Bitcoin-only firmware, same security model, a third of the flagship price.

Verdict

The Safe 7 is the better device — it’s Trezor’s flagship, it earns its 4.7, and the dual secure elements plus iOS Bluetooth are real engineering. But “better device” and “right device for you” are different questions. The Safe 5 remains the one I’d hand to most people: it does everything self-custody requires, it keeps the wireless attack surface at zero, and it costs $80 less. The Safe 7 is for the holder who specifically wants iOS Bluetooth signing or the maximum-hardware-redundancy flagship and is happy to manage the Bluetooth surface.

Either way you’re getting the property that puts Trezor on this site in the first place: open-source firmware you can verify, with a Bitcoin-only option. That’s the part that doesn’t change — and it’s the part that matters most.

Read next:

• Which Trezor should you buy? Safe 3 vs 5 vs 7 — the full-lineup decision, including the cheaper $79 Safe 3
• Is Trezor safe? Has it ever been hacked? — the security record behind both
• Trezor Safe 5 — full review
• Trezor Safe 7 — full review
• Ledger vs Trezor vs Coldcard — if you haven’t settled on Trezor yet
• Hardware wallet 2026 buying guide — the framework behind these picks
• The truth about “Trezor discount codes” — before you search for a coupon

Sources:

• Trezor Safe 5 product page: trezor.io/trezor-safe-5
• Trezor Safe 7 product page: trezor.io/trezor-safe-7
• Trezor firmware source: github.com/trezor/trezor-firmware
• SLIP-39 Shamir backup spec: github.com/satoshilabs/slips/blob/master/slip-0039.md
• Kraken Security Labs Trezor attack research (2020): blog.kraken.com/post/5590/