Overview
Trezor Suite is the official companion application for Trezor hardware wallets: a secure desktop & web app for managing accounts, signing transactions and integrating with third-party services. This document is a developer-focused "getting started" guide that covers installation, developer tools, integration points, SDKs, and security best practices.
Why developers need to know Suite
Trezor Suite centralizes device interactions, signing flows, coin management and transaction presentation. Integrating with Suite (or using Trezor Connect/SDKs) lets your app delegate key operations to a secure, open-source hardware-backed flow while preserving UX consistency and high security.
Quick top-level checklist
- Install the official Trezor Suite app or run the web Suite when appropriate.
- Familiarize yourself with the Trezor Suite documentation and monorepo for code examples and packages.
- Use Trezor Connect (or Connect-like libraries) for easy browser integrations, or call device APIs in native apps.
- Follow secure update and signature verification for downloads and releases.
Install & verify (developer-friendly)
Always download Suite from the official distribution and verify signatures for release artifacts before trust-building into your CI or local dev environment. For development, the Suite monorepo contains local start scripts and development prerequisites.
Developer steps — local dev
- Clone the trezor-suite monorepo, inspect README and run dev scripts.
- Install dependencies and run the suite in "dev" mode to test UIs and flows.
- Use a development Trezor device or an emulator where supported; keep secret seeds offline.
# example (high-level) git clone https://github.com/trezor/trezor-suite.git cd trezor-suite yarn install yarn start
Developer integration patterns
1. Browser integrations
For web apps, Trezor Connect is the standard path to talk to devices: it provides JS APIs to request device signing, get public keys, and perform account discovery without exposing private keys. Bundle Connect carefully and understand the user consent screens that appear during sign flows.
2. Native / Desktop integrations
If you're building a native app, you can call into the Suite via IPC or integrate lower-level libraries found in the monorepo, ensuring you respect platform security models and user prompts.
3. Third-party wallet collaboration
When integrating wallet functionality, use the documented signing flows and provide clear transaction metadata to the user. Avoid obscure or misleading transaction descriptions; clarity reduces accidental approvals.
Security best practices for developers
Keep bootstrapping simple & auditable
Use reproducible builds or verify release signatures for binaries. Add signature verification into your CI pipelines if you distribute packages dependent on Suite or firmware. Never embed unverified binaries or unsigned helper scripts into production artifacts.
Design for least privilege
Request only the minimal information necessary (e.g., request a single-account public key rather than a full discovery if that's all you need). Limit persistent tokens and make scopes explicit in the UI.
UX & legal considerations (h4)
Clear consent
Provide the user with a clear, human-readable summary of what they are signing. Protect the user from phishing by ensuring your app's domain and packaging are easily verifiable.
Recoverability
Educate users about seed backup and recovery. Never request a user's seed in your app — an authentic Trezor setup only happens on the device.
Testing and QA
Test with multiple firmware versions and hardware models. Include automated tests that mock Connect responses for CI where hardware tests are impractical, and add manual test runs for signing flows.
Release checklist for integrators
- Pin the versions of any Connect or library dependencies.
- Validate release checksums/signatures for every binary.
- Create user-facing screens that show exactly what is being signed.
Extending Suite or contributing
The Trezor Suite monorepo and docs provide contribution guidelines, coding standards and modules split by responsibility (Connect, Suite app, mobile). Follow the repo's README and contributing guidelines when you propose changes, and create small, well-documented PRs for review.
Community & support
If you hit technical walls, use official support channels and developer resources. Community forums and the GitHub repository are good places to find examples and file issues if you suspect a bug.