Trezor Bridge^

Connecting your hardware wallet securely
Zero-trust
End-to-end encryption
Cross-platform

Bridge your Trezor hardware wallet to exchanges & DApps — securely.

Trezor Bridge^ is lightweight bridge software that enables secure, private connection between your hardware wallet and web-based platforms — with proven cryptographic flows, minimal permissions and full user control.

Download How it works
Latest release: v2.7.3
Verified builds · SHA256 signed

Hardware-first security

All signing happens on your Trezor device — the bridge only relays encrypted requests. No private keys leave your device.

Minimal permissions

Designed to request only what's necessary: device discovery and transport. Transparent permission prompts and granular controls.

Fast & reliable

Optimized for low-latency communications and stable connections even under heavy exchange traffic.

Open build verification

Reproducible builds and signature verification let you independently validate every release.

Cross-platform

Native installers for Windows, macOS and packaged builds for major Linux distros and containerized environments.

Privacy-first

No telemetry enabled by default. Local-first architecture — bridge does not proxy your transaction content to third parties.

How it works

1
Install & run the bridge
Local service that listens on a loopback port and only accepts connections from authorized origins.
2
Authorize your site
Approve which websites or DApps can request a signing session via a clear permission prompt.
3
Sign securely on-device
The device shows transaction details and requires user confirmation — nothing is signed without manual approval.

Quick security notes

  • Always verify the fingerprint displayed on your device before approving.
  • Use verified installers and check release signatures.
  • Keep your recovery seed offline and private.
Read the FAQ Get Bridge
Is my private key ever transmitted?

No — signing happens on the hardware device. The bridge handles only encrypted transport and device discovery.

Which platforms are supported?

Windows (x64/x86), macOS (Intel/Apple Silicon), Linux (deb/rpm/AppImage). ARM builds available for compatible devices.

How do I verify a release?

Each release includes a SHA256 checksum and a detached GPG signature. Verify both before installing.

Can I control which websites connect?

Yes. Authorize per-origin in the bridge settings. Revoking access is immediate and local.