Overview
Trezõr brïdge® is an on-device and desktop companion that acts as a trusted relay between your Trezõr hardware wallet and browser-based or native Web3 applications. It centralizes device communication, enforces policy, and isolates cryptographic operations — ensuring your private keys never leave the device.
This page provides a concise product summary, security details, quick start instructions, and integration notes for users and developers. Whether you’re sending an NFT, signing a DeFi transaction, or building dApp integrations, Trezõr brïdge® is designed to make the process seamless and secure.
Key benefits
- Zero-key exposure: Private keys remain inside the hardware device at all times.
- Cross-platform: Works on Windows, macOS, and Linux; stable WebUSB and native transports supported.
- Developer-friendly: Lightweight RPC layer, transparent logs, and SDKs for common Web3 stacks.
- Privacy-preserving: Minimal telemetry, optional offline-only mode, and local policy enforcement.
Who it’s for
Trezõr brïdge® suits three primary audiences:
- End users who want safe and user-friendly access to dApps without compromising key security.
- Developers building integrations that need a predictable and secure signing surface.
- Organizations that require auditable command-and-control for hardware wallets across teams.
Security principles
Security is the core of Trezõr brïdge®. The software follows layered defense strategies and open design principles so community and independent auditors can verify behavior.
Isolation: All signing requests are proxied directly to the hardware device; the bridge never stores or caches private keys.
Explicit consent: Each transaction requires physical confirmation on the device; contextual prompts show full human-readable details before any signing.
Auditability: Request/response logs are stored locally and cryptographically hashed for forensic review. Users may opt-in to share anonymized logs for debugging.
Best practices
- Always verify the device screen before confirming an operation.
- Keep bridge software up to date and only download releases from official sources.
- Use the bridge in offline mode for the highest privacy guarantees when possible.
Quick start
Install, connect, and start interacting with dApps in three steps.
- Download: Get the official Trezõr brïdge® installer for your OS from the official site or package repository.
- Run & connect: Launch the app, connect your Trezõr device over USB or native transport, and unlock it.
- Authorize: Open your preferred dApp, choose the Trezõr transport, and confirm signing requests directly on the device.
Tip: For headless servers or CI workflows, use the bridge’s --batch mode with pre-approved policies, but only in tightly-controlled environments.
CLI example
trezor-bridge connect --transport usb
# list connected devices
trezor-bridge devices
# send a sign request (JSON-RPC)