This review contains affiliate links. If you buy via these links, I may earn a commission at no extra cost to you. It doesn’t change what I say about the product.
The Trezor Safe 3 is the most important device in Trezor’s lineup, and it’s the cheapest. Those two facts are related. At $79 it is the lowest-priced way to get your Bitcoin off an exchange and into open-source, secure-element self-custody — and because the security model is identical to the $249 flagship, it’s the device I’d actually hand to most people asking where to start.
This review leans on Trezor’s published specs and source code plus the shared Safe-line firmware and Trezor Suite I’ve used on the Safe 5; where I’m relying on documentation rather than hands-on time with this specific unit, I say so. The conclusion is simple, so I’ll lead with it: for the large majority of self-custodians, the Safe 3 is enough, and “enough” here means the same key protection the expensive models give you.
The hardware
The Safe 3 is small, light, and deliberately plain. A 0.96-inch monochrome OLED screen, two physical buttons for navigation, and a USB-C port — that’s the whole interface. There’s no touchscreen, no Bluetooth, no fingerprint reader, and no battery; it draws power from the cable and only turns on when connected. The build is unflashy in the way Trezor hardware tends to be, which I consider a feature: nothing here is paying for marketing.
The two-button interface is the one ergonomic compromise. You scroll through addresses and enter your PIN by pressing buttons rather than tapping a screen. It’s slower and less elegant than the Safe 5’s color touchscreen — but it is also simple, legible, and hard to get wrong, which for a first hardware wallet is arguably the right priority.
The security model is the flagship’s
This is the part that matters, and it’s where the Safe 3 punches far above its price. Inside is an OPTIGA Trust M V3 secure element, certified to Common Criteria EAL6+ — the same class of tamper-resistant chip used in passports and SIM cards, and the same secure-element protection found in the Safe 5. It stores your seed and resists the physical-extraction attacks (the voltage-glitching class) that affected pre-secure-element Trezors like the original Model One. For the history behind that, see is Trezor safe?.
The firmware is Trezor’s standard open-source stack at github.com/trezor/trezor-firmware, with a Bitcoin-only firmware variant available exactly as on the Safe 5 and Safe 7. Anyone can audit it; nobody can slip in a silent seed-exfiltration path without it being visible in public source. That “don’t trust, verify” property is the whole reason Trezor is the only hardware wallet recommended on this site — and the $79 model has it in full.
In other words: the Safe 3 is not a security-stripped budget device. It is the same security model in simpler packaging.
Setup and Trezor Suite
Setup runs through Trezor Suite — the same desktop application as every other Trezor — and the Safe 3 ships without firmware installed, installing it on first connection. If you ever receive a Trezor with firmware already on it, treat that as a warning sign. The guided flow walks you through firmware installation, seed generation (12, 20, or 24 words), the mandatory backup-verification quiz, and PIN setup with Trezor’s anti-keylogger randomized grid. It’s the same careful onboarding I’ve run through on the Safe 5, and it’s appropriate for a first-time self-custodian.
The Safe 3 also supports the privacy and power-user features that live in Suite — CoinJoin, Tor connectivity, and PSBT workflows with Sparrow, Electrum, and Specter — so it doesn’t box you in as you get more sophisticated.
SLIP-39 Shamir backup on the entry model
A genuinely nice surprise at this price: the Safe 3 supports SLIP-39 Shamir backup, in both single-share and multi-share configurations. That means you can split your recovery into, say, a 2-of-3 share scheme — give one share to family, store one in a vault, keep one at home — and no single share reveals anything about the seed. This is the same inheritance-and-distribution feature the pricier Trezors offer, and it’s the kind of thing entry devices usually omit. (If you stay in the Trezor ecosystem, SLIP-39 is well supported; it’s slightly less portable than standard BIP-39, which is the only caveat.)
Who should buy the Safe 3
Buy it if: you’re getting your first hardware wallet, moving a stack off an exchange, or you simply want the cheapest device that doesn’t compromise on the security model. For most readers — anyone past the roughly few-hundred-dollar threshold where a hardware wallet pays for itself — this is the right answer.
Step up instead if: you want a color touchscreen for a device you’ll use frequently (the Safe 5 at $169), or you need native iPhone Bluetooth signing or the dual-secure-element flagship (the Safe 7 at $249). The full-lineup breakdown is here: which Trezor should you buy?
Verdict
The Safe 3 earns a 4.4 — and the only reason it isn’t higher is ergonomics, not security. The two-button monochrome interface is the compromise you accept for the price, and it’s a fair trade. What you do not compromise is the thing that matters: your keys sit behind the same EAL6+ secure element and the same auditable, Bitcoin-only open-source firmware as Trezor’s most expensive device.
Most “best budget hardware wallet” picks ask you to accept a weaker security model to hit a price. The Safe 3 doesn’t. It’s the rare entry device I can recommend without an asterisk on the part that counts — and for a first-time self-custodian, it’s very likely the right device, full stop.
Read next:
- Which Trezor should you buy? Safe 3 vs 5 vs 7
- Is Trezor safe? Has it ever been hacked?
- Trezor Safe 5 review · Trezor Safe 7 review
- How much Bitcoin before a hardware wallet?
Sources:
- Trezor Safe 3 product page: trezor.io/trezor-safe-3
- Trezor Safe 3 Bitcoin-only: trezor.io/trezor-safe-3-bitcoin-only
- Secure elements in Trezor Safe devices: trezor.io/learn/security-privacy/how-trezor-keeps-you-safe/secure-elements-in-trezor-safe-devices
- Trezor firmware source: github.com/trezor/trezor-firmware
- SLIP-39 Shamir backup spec: github.com/satoshilabs/slips/blob/master/slip-0039.md