Trezor 7 Support on iOS - Finally!

and i guess for the ones that getting newer androids (grapheneOS) because like for example pixel 6 and 6 pro are EOL by october 2026 now, then those could be used as secondary offline phones with:
https://sidekick.monerujo.app/

Sidekick is a new companion app that you can install on a secondary phone to authorize access to your Monero wallets in Monerujo. That way, as long as you keep that phone offline, it works as a do-it-yourself Bluetooth-powered hardware wallet.

https://github.com/m2049r/sidekick/releases
https://alpha.monerujo.io/fdroid/repo/

since i guess iphones be like forced digital ID type thing, why would u even use that smh
and trezor be like "oh so u one of those cryptobros that have some of that crypto monies that can be $5 wrench attacked?" why u tryna snitch on yourself like that lol, while literally everyone has a phone

• UK (iOS 26.4, March 2026): After updating, users must verify their age (credit card or ID scan). The prompt states "UK law requires you to confirm you are an adult to change content restrictions." Under-13s cannot create accounts without a guardian. This is mandatory, not optional.
• Texas (SB 2420, June 4, 2026): New Apple Accounts in Texas must confirm age (18+ or minor). Minors require parental consent for all app downloads. Was temporarily blocked as unconstitutional but reinstated by the 5th Circuit.
• California (AB-1043, effective Jan 1, 2027): Requires OS providers to collect birth date at account setup and send age bracket signals to apps.
• US Federal (HR 8250 "Parents Decide Act"): Would require OS-level age verification for all users creating accounts.
• Australia, Brazil, Singapore: Apple blocks 18+ app downloads unless age is confirmed.

Apple has also made its Digital ID (U.S. passport-based) usable as an age verification method for Apple Account and services globally.

@SpinningCat I don’t really know what you mean by $5 wrench attacked?

Forgive me if I’m wrong, but isn’t storing crypto on a Ledger/Trezor device more secure than not?

Regarding the Digital ID Age Verificstion stuff, yeah… I’m with you 100%. But that’s a separate battle and conversation all together.

@Geek
$5 wrench attack refers to this (applicable to "hardware wallets" as well):

so the tldr is by having a hardware wallet you're pretty much out here signaling you're holding crypto, whatever it might be and making yourself as a target
while with a phone, you're just signaling being a normie with a phone since literally everyone has a phone, so worse case, you get the phone stolen but not beaten up to the death for your cryptocoins lol

like that forever and never ending updated list of $5 wrench attacks:
https://github.com/jlopp/physical-bitcoin-attacks/blob/master/README.md

which just did a quick ctrl + f for "trezor", and i feel like @Mav would have a laugh reading the country for this one:

which btw @Mav, dont he look like you?
(saw that was posted yesterday, has 10k views lmao):
https://imgur.com/glT5aEG.jpeg

like damn tho 😿

@Geek

Forgive me if I’m wrong, but isn’t storing crypto on a Ledger/Trezor device more secure than not?

and i guess since you also mentioning ledger, there's even a thread about it there:
https://monero.forum/thread/what-happen-france-crypto-scary

It has been reported that more than 70% of crypto related violence and kidnapping happened in France. The reason is because of data leak that happened with Ledger in 2020 which give criminal their target list.

and their CEO is a literal retard that cant even basic math:
https://xcancel.com/P3b7_/status/1955173413992984988
(during the Qubic attack)
he claimed that it was costing $75 milion a day for them to do the attack, he retarded af lmao
there is only ~$130k worth of monero being mined each day, qubic was a botnet on stolen electricity
(including guilible miners installing the closed source binary on their computer to be part of the botnet lmao)
but like, even if considering it not on stolen electricity, the math are in the 5 digits (if not 4 lol) but somehow that retard ledger CEO came up with the number "75 milion", that's like 8 digits, so so far off, he a literal retard lmao

Hardware wallets are stupid bullshit.

Just cut out the radio chip of a laptop, and boot tails from a usb stick.
Now you can run whatever wallet you want in an airgapped environment.

If you want to update your software, use a NEW usb stick for security.

If you want to counter wrench attacks, keep a decoy seed on the stick, and an activation seed on paper/metal/cdrom. This gives you a negotiation tool and some chance of surviving with both your balls and most of your money left. Although the best defense against wrench attacks is to secure your personal information; everyone here knows that.

Hardware wallets go to the ends of the world to encrypt your seed when it is better not to store it digitally. Why don't you write it somewhere nobody will look instead of the fat DSi looking inspector gadget garbage with BITCOIN plastered all over it.

'This isn't "roll your own crypto", this is basic opsec.' -chatgpt

Besides, hardware wallets only support the protocols that they decide to include. Why would you limit your selection to an imposed default, when its taken them this long to add monero? Do you want a passport to all public cryptographic networks or do you want a curated selection from your friendly neighbourhood big tech corp?

@SpinningCat All fair points, thank you for the thorough discussion!

I didn't know about Sidekick. Seems like a great way to repurpose an old device. Might use this instead of making it a dashcam for the car.

I also lean more toward Trezor over Ledger for reasons you mentioned. It is open source as well.

@Nebuchadnezzar_II The only thing I'll add is that Monero adoption seems to be more of a Monero team issue, rather than a Trezor issue. From the looks of it, Trezor did their part of enabling it on their device (Monero One is the proof it works) - but it hasn't been implemented in the official apps yet. Can't blame Trezor for that. Trezor supports decoy pins as well - to help against the "wrench attack"

While the laptop approach is valid - it's not something that can be practical for most people who wish to use it as an everyday currency. "Wait, let me boot up my old Thinkpad to pay for this coffee" isn't really practical. Perhaps for a hybrid approach, of leaving the bulk of your holdings it could work. For me, it becomes a bit of a clutter issue around the house.

@Geek
Crypto cold storage should be treated as a significant security undertaking; its for bulletproof financial sovereignty and security, not everyday microtransactions. Would you really take your trezor to a coffee shop to pay using an airgapped signing flow? Just use cash bro

This technology was introduced (experimentally) in the official monero-wallet-cli in 2016! It is difficult to use compared to bitcoin (easier) or eth (easiest) but in 2023 feather wallet implemented an easy to use graphical interface. In 2025 they added qr support (security upgrade from SD card). Xmr airgapped transaction signing is already up and working on officially supported software!

@Nebuchadnezzar_II Thinking about it more, I think you're mostly correct. My flow would probably be to have a seperate softwallet that I periodically reload from the hardware wallet, and the hardware wallet stays in a secure location. I'm still early in my crypto journey, and I have a lot to learn. Still, I think there is something to be said for the sense of security that a hardware wallet provides. To me at least, knowing that regardless of how compromised my phone or PC is, that my coins cannot be spent unless something physical agrees does make me feel safer. Especially being that Apple provides no way to know the source code I'm actually running on my phone is the same code published to the github repo.

I'm also having trouble understanding how an airgapped laptop or phone can "realize" when funds have been added. Similarly, how would another device know when funds are sent from an airgapped device? Is this a flow that could ever be user friendly in any capacity?

Is the general sentiment that hardware wallets provide a false sense of security, and actually have an adverse affect by making a target of yourself?

@Geek
I understand.
A 'hot wallet' is any wallet where the private keys are kept on a device connected to the internet.
A 'cold wallet', including your trezor, paper wallets, or my laptop with radios removed, is any way of storing the private keys without access to the internet.

You seem to have encountered the crux of the problem with cold wallets is that they cannot independently communicate with the network to make transactions or check balances.
Here is the solution:
For checking balances we use a view only wallet, which is connected to the internet, but does not have the private keys required to sign transactions.
For sending transactions, a view only wallet can generate an unsigned transaction, which it then communicates to the cold wallet by qr code (or sd card, but qr is more secure), the cold wallet uses the private keys to sign the transaction and returns the signed transaction to the view only wallet by qr, the view only wallet then broadcasts it to the network!

So whether you follow my method, or you use a trezor, the flow is essentially the same. Its a similar process for any blockchain. A good software (I recommend feather) will abstract away most of the complexity and just require you to scan a couple of qr codes for every transaction.

Your idea to use a hotwallet for a small pocketmoney fund and reload it from a cold wallet is smart because you can spend money without going through the cold signing flow, but most of your money is controlled by strictly offline private keys.

In general a hardware wallet, or a cold wallet, is a security necessity, although often also a false sense of security! Although in my opinion using a Trezor, Ledger, etc... might seem like the easier option but they really add nothing, at the expense of some really severe limitations. You can only use the software they come with, which for example, rarely supports xmr. They claim to have the ability to wipe your private keys completely from the device, but you have to trust that, whereas in my perception tails is more reliable since it was working before crypto caught on and its the standard for darknet ops. Finally, the update process usually requires a usb cable to connect to a network connected device. But your trezor was exposed to your seed phrase already! This is NOT COMPLIANT with the strictest air gapped security standards and I would not trust it with my money!

I have one more tip for you (although idk shit about apple apart from that its bad):
You can hash an entire software and compare it to the hash published on official sources if you need to check whether the software has been changed.