<p>No, you can use your Trezor for your everyday use with a usual online computer (or even a computer that has malware). Connecting your Trezor to your computer oftenly doesn't mean it is not secure anymore / it is less secure.</p>

CC BY-SA 3.0
2017-09-19T18:36:33.587Z
A malware could steal your passphrase in an online computer, so in theory it should be more secure to use a separate passphrase for larger amounts and use this second passphrase only in an offline computer. Don't you agree?
Paul
CC BY-SA 3.0
2017-09-20T13:00:51.540Z
@Paul Everything is done on your Trezor, your computer never sees the private keys / mnemonics. So it doesn't matter. If you still have doubts, you can chat with Trezor devs on https://gitter.im/trezor/community
MCCCS
CC BY-SA 3.0
2017-09-20T16:18:47.733Z
I understand the computer never sees the private key or seed, however it's possible that it's extracted from the device (e.g. https://medium.com/@Zero404Cool/trezor-security-glitches-reveal-your-private-keys-761eeab03ff8 ), so I believe it's wise to protect the passphrase.
Paul
CC BY-SA 3.0
2017-09-20T16:22:33.687Z
@Paul https://gitter.im/trezor/community?at=599550192723db8d5eb1f796 ![](https://i.sstatic.net/iWGpx.png)
MCCCS
CC BY-SA 3.0
2017-09-20T19:16:38.390Z
The fact that that particular article is supposedly fake doesn't mean the private data cannot be extracted. It's fair to assume it could be extracted with physical access to the device.
Paul
CC BY-SA 3.0
2017-09-19T15:03:56.580Z
2017-09-19T15:03:56.580Z
MCCCS
<p>I'm trying to figure out how to use a Trezor for my needs. I'd like to have different "layers" of security, so my plan is to use this setup (less secure on top):</p>

<ol>
<li>Online wallet for every day usage (1%)</li>
<li>Trezor with passphrase A connected to online computer (19%)</li>
<li>Trezor with passphrase B connected to offline computer (80%)</li>
</ol>

<p>My question is: does it make sense to separate layers 2 and 3 in online and offline computers? I'm assuming that the Trezor does not store the passphrase, so by using passphrase B only in a secure offline computer to sign transactions this layer is much more secure.</p>

<p>Thanks!</p>

<coldstorage><wallet-security><trezor><offline-transactions>
Use trezor securely
Paul
# Use trezor securely

(Asked by: username_0 on 2017-09-19)

I'm trying to figure out how to use a Trezor for my needs. I'd like to have different "layers" of security, so my plan is to use this setup (less secure on top):

1. Online wallet for every day usage (1%)
2. Trezor with passphrase A connected to online computer (19%)
3. Trezor with passphrase B connected to offline computer (80%)

My question is: does it make sense to separate layers 2 and 3 in online and offline computers? I'm assuming that the Trezor does not store the passphrase, so by using passphrase B only in a secure offline computer to sign transactions this layer is much more secure.

Thanks!

**Tags:** coldstorage, wallet-security, trezor, offline-transactions


---

## 1 answers

### Answer by username_1 on 2017-09-19. Score: 1

No, you can use your Trezor for your everyday use with a usual online computer (or even a computer that has malware). Connecting your Trezor to your computer oftenly doesn't mean it is not secure anymore / it is less secure.

> **Comments:**
> **username_0**: A malware could steal your passphrase in an online computer, so in theory it should be more secure to use a separate passphrase for larger amounts and use this second passphrase only in an offline computer. Don't you agree?  
> **username_1**: @username_0 Everything is done on your Trezor, your computer never sees the private keys / mnemonics. So it doesn't matter. If you still have doubts, you can chat with Trezor devs on https://gitter.im/trezor/community  
> **username_0**: I understand the computer never sees the private key or seed, however it's possible that it's extracted from the device (e.g. https://medium.com/@Zero404Cool/trezor-security-glitches-reveal-your-private-keys-761eeab03ff8 ), so I believe it's wise to protect the passphrase.  
> **username_1**: @username_0 https://gitter.im/trezor/community?at=599550192723db8d5eb1f796 ![](https://i.sstatic.net/iWGpx.png)  
> **username_0**: The fact that that particular article is supposedly fake doesn't mean the private data cannot be extracted. It's fair to assume it could be extracted with physical access to the device.  

---

