DL Research Content

Building the Trezor Safe 7: Head of Hardware Product Adam B. on open source, custom design, and the future of backups

Building the Trezor Safe 7: Head of Hardware Product Adam B. on open source, custom design, and the future of backups
Illustration: Hilary B; Source: Trezor

Adam joined Trezor in 2022 as part of the hardware team and now serves as the Head of Hardware Product. He is responsible for the entire hardware lifecycle, from defining requirements and leading design to coordinating prototyping and overseeing mass production, all while balancing robust security with usability. Adam’s role is built on a strong foundation in high-stakes engineering from his time in the aerospace and electronics industries. There, he specialized in designing high-precision, reliable components for mission-critical systems. A Czech native fluent in English, he now applies this deep engineering expertise to create secure self-custody devices for a global audience.

We met with Adam B., Trezor’s Head of Hardware Product, during the Bitcoin Builders event to get an inside look at the design and production process behind the new Trezor Safe 7.

Read more about the intricate details of hardware design and Trezor’s future product direction in the interview below.

How did Trezor’s historical philosophy impact the design of the Trezor Safe 7?

The core mission is open source. Until now, our devices weren’t fully open source due to the closed-source secure elements we used. While common in phones and credit cards, the security of these chips relies partly on obscurity; you don’t truly know what they are doing. The Trezor Safe 7 was created out of a desire for complete transparency, achieved through the TROPIC01 chip, the world’s first auditable secure element. We also included an additional NDA-free EAL6+ secure element as a second layer, combining transparent security with security by obscurity.

Taking a device from concept to mass production, which stages are the hardest to optimize?

The early prototype and mock-up stages are enjoyable and straightforward. The most challenging aspect is transitioning from the development phase (design validation) to the production ramp-up (production validation). This is where design ideals meet manufacturing realities, and you really have to manage that transition carefully.

What feature of the Trezor Safe 7 are you most proud of getting into production, perhaps something initially deemed difficult?

Several things. Making our first wireless device was huge for the company. From a hardware perspective, the unibody design was initially rejected by vendors as too expensive, but we pushed for it, and now it’s a standard. I’m also super proud of the screen, which is fully custom for the first time. We designed everything: the pixel count, shape, color, and brightness. Nothing is off-the-shelf.

What are the main changes users will notice with the new model?

Definitely the wireless use case. It’s incredibly convenient to use with your phone or tablet, not just a desktop via cable. You can also charge it wirelessly. This added convenience, built on top of the super secure TROPIC01 chip, is a major benefit.

How does the Trezor Safe 7 better prevent physical attacks?

While specific attack vectors are more for our CTO, the key is the combination of the transparent, auditable secure element (TROPIC01) and the closed-source one. This dual-chip approach provides a unique level of security.

What other design elements are you particularly proud of?

The battery. We didn’t use standard lithium-ion or lithium polymer batteries, which degrade relatively quickly. We chose lithium iron phosphate (LiFePO4). It’s super stable, safer due to less reactive chemistry, and has much lower self-discharge. This means that even after two years in storage, the battery should still retain a charge and remain safe, unlike standard batteries that may die.

What are the main advantages of the open-source TROPIC01 secure element compared to competitors?

The biggest advantage is its auditability, which is unique worldwide, not just among hardware wallets. It represents a paradigm shift. When Tropic Square was founded five years ago, no one believed an open-source secure element could exist. It was nearly miraculous that the chip became available just as we were developing the Trezor Safe 7. We had actually designed the PCB with space for it, hoping it would come to fruition in time.

The TROPIC01 chip has hardware-limited PIN attempts. Is there a risk of being locked out accidentally, for example, by children?

I don’t think users should worry. TROPIC01 handles PIN entry very differently from other secure elements, where limits are often software-based and vulnerable to bypass attacks. With TROPIC01, the limit is hardware-based, meaning it’s truly restricted to a specific number of attempts with no way around it.

How do you balance premium features with cost-efficiency, especially given the Trezor Safe 7’s $250 price point?

As product managers, we define the product’s position. The Trezor Safe 7 is our flagship, so we wanted that premium feel with high-quality materials. However, we didn’t want it to be ridiculously expensive like some competitors. We aimed to create an affordable flagship by balancing premium materials with a fair price point, considering the market.

Who is the main target audience for the Trezor Safe 7?

Trezor Safe 7 is built for anyone who wants to take full control of their digital assets, whether they’re deep into crypto or just getting started. Users can secure their funds without compromise, while enjoying the convenience of managing everything wirelessly on the go with their phone, all backed by the highest level of security.

The Trezor Suite software also saw a major upgrade. What changes are you proud of there?

The new onboarding process and user flows are amazing. We completely redesigned the desktop experience, and the improved UX/UI is now also applied to the mobile apps. We put a lot of effort into making it convenient and intuitive.

What are the biggest remaining usability challenges for everyday users in self-custody?

We’re addressing several issues, especially onboarding and wallet backup. Understanding seed phrases (BIP-39 or SLIP-39) can be a significant mental load for newcomers. We’re exploring ways to simplify backup, perhaps using NFC. Another major unresolved issue in the market is inheritance: how do relatives recover funds if something happens to the owner? This will definitely be a key focus in our future products.

How does Trezor measure product-market fit?

Our dedication to open source remains core. A key indicator we look at is market share. We also pay close attention to user feedback, which greatly influences our future product development.

Trezor appears to be selective about integrating new chains compared to its competitors. Is this a trade-off for prioritizing security?

Absolutely. For example, we didn’t have a wireless device for a long time because rushing it could compromise security. We took the time to develop the secure Trezor Host Protocol for Bluetooth, find the right battery (LiFePO4) suitable for infrequent use, and incorporate features such as the custom screen and the TROPIC01 chip. We don’t want to simply release another product; instead, we aim to deliver something truly valuable and secure to the user.

Looking ahead, what evolutions are you hoping for in Trezor’s product line?

Given the Trezor Safe 7’s status as a flagship, there is definitely room for more affordable wireless devices. That’s probably the future direction.

Are you actively working on these affordable wireless devices, especially for emerging markets?

We are considering that, but we’re also focusing heavily on expanding the services within the Trezor Suite ecosystem. The hardware enables these features. Inheritance could be one such service. We are thinking more broadly about the software and services side.