Trezor Integration mit MM

[root_s2yse8vt]

Up

0

Down

::

Hallo Trezor-Kollegen,

Ich habe eine Frage zur Integration von MM und Trezor.
Zum Kontext,

Ich habe ein MM, das mit meinem Trezor verknüpft ist. Jede Transaktion erfordert eine Authentifizierung von meinem Trezor.

Als ich heute den Browser wechselte (von Chrome zu Brave), importierte ich meine MM-Wallet in Brave mit meiner Seed-Phrase (ohne Verbindung zur Hardware-Wallet). Ich war dann in der Lage, Transaktionen mit der MM durchzuführen, ohne dass eine Authentifizierung von meinem Trezor erforderlich war.)

Sollte dies der Fall sein? Ich dachte, wenn MM mit meinem Trezor verknüpft ist, sind beide untrennbar miteinander verbunden und sowohl Seed Phrases als auch Trezor sind erforderlich, damit eine Transaktion stattfinden kann?

Darf ich Sie um Ihren Rat in dieser Frage bitten?

Vielen Dank

https://preview.redd.it/bdn9bkq0xy481.png?width=561&format=png&auto=webp&s=0132edd702da1018db6aa1b4859484c9fe7f020e

[SilverTruth7809]

Up

0

Down

::

If you import your trezor seed to metamask you bypass any 2nd factor. Your seed should be seen as compromised.

[cuoyi77372222]

Up

0

Down

::

>I imported my MM wallet in Brave using my seed phrase

You just compromised your wallet and you are no longer hardware-secure. You are no longer using the Trezor at all. I recommend that you generate a new seed phrase on the Trezor and move all your funds back onto the Trezor using the new seed phrase.

NEVER type your seed phrase into the computer. Anytime you do that, you are doing something wrong (unless you REALLY know what you are doing).

You must always use the „connect to hardware wallet“ in MetaMask. Nothing else.

[mickmon]

Up

0

Down

::

Never enter your seed into the computer. That’s the point of a hardware wallet, for the seed never to touch the computer.

What you should have done is opened a fresh MM in the new browser and then connected the hw wallet to it and signed transactions that way.

You’ve entered your precious seed into a computer that’s connected to the internet. So, what I’d recommend doing now: use the trezor to generate a fresh seed and send all your funds to that wallet.

[matejcik]

Up

0

Down

::

>Is this supposed to be the case? I thought that when MM is linked with my Trezor, it will be inseparable and both Seed Phrases and Trezor are required for any transaction to occur?

That is not **AT ALL** how any of this works.
Like. At all.

1. Whoever has the seed has the coins. That’s all there is to it.

2. Trezor is a device designed to keep your seed out of your PC. That way no hackers can steal it. This is the protection.

3. But if you _give_ someone the seed, Trezor can’t protect it anymore. Like, you can have an industry grade heavy duty lock on your house, but if you give someone the keys, the lock isn’t protecting you anymore.

4. Metamask has this dumb misfeature that if you want to use it, you need to set up a hot account with its own seed.

5. So when you connect Trezor, Metamask is actually using two seeds: its own, and Trezor’s. Metamask can’t _see_ the Trezor seed, it can only ask Trezor to do things. That’s where the prompts come from: Metamask can’t do shit with your Trezor address other than asking Trezor to do the thing.

6. what you did is take Trezor’s heavy duty protected seed, and just imported it to Metamask. Why?

7. Now Metamask has the seed and so it has no reason to ask Trezor anything, because it can do all the things itself.

8. Similarly, if you now get malware, it will also have the seed, and can drain your accounts.

9. Wipe your Trezor, set up a new seed. Connect to Metamask, move all your funds to the new address coming from your new Trezor seed.

10. Don’t enter your Trezor seed into a computer ever again, for any reason.

[Autor]

Beiträge