Overview
Trezor Bridge is a local background application developed by SatoshiLabs that enables secure, local communication between a Trezor hardware wallet and web-based interfaces (for example, the Trezor Suite or compatible browser-based dApps). Unlike cloud services, Bridge runs on your own machine and forwards encrypted requests to and from your physical device connected over USB (or sometimes via supported USB-over-network setups).
How it works — in plain language
When you connect your Trezor device to a computer and open a wallet interface, that interface needs a way to send commands (create transactions, sign messages, read public keys). Trezor Bridge acts like a tiny translator and gatekeeper: the browser talks to Bridge over a secure local channel, and Bridge talks to the Trezor device over USB. The device itself stores private keys and never exposes them to the host computer — only signed transactions leave the device.
Key security points
- Private keys stay on the device: Bridge never has access to private keys; it only forwards commands and responses.
- Local-only communication: Bridge listens on your local machine, not on the public internet. This reduces remote attack surface.
- Official installers: Always download Bridge from Trezor's official website or an official release page. Check digital signatures if available.
- Keep software up to date: Firmware on the device, Trezor Suite, and Bridge should be updated promptly for security fixes.
Installing & troubleshooting
Installation is straightforward on Windows, macOS, and Linux: download the Bridge installer, run it, and then open Trezor Suite or a supported web wallet. If the browser doesn't detect your device, try these steps:
- Reconnect the USB cable and use a direct port (avoid hubs when troubleshooting).
- Restart Bridge (or your computer) and the browser.
- Confirm Bridge is running in your system tray/menu bar (it usually shows a small icon).
- Disable overly aggressive antivirus or USB-filtering software temporarily while you test.
Best practices & privacy
Use a dedicated, minimal system for high-value operations if possible. Only connect to wallets and dApps you trust, and consider hardware wallet passphrase protection for an additional secrecy layer. Remember that transaction metadata (addresses, amounts) leave the device as part of transactions — privacy-conscious users may want to route transactions through their own coin-joining or mixing strategies when appropriate and legal.