Offline keys
Keys remain on device; only signatures leave the Trezor.
Pin & passphrase
Two layers of access control for extra safety.
Firmware verification
Updates signed and checked before installation.
Open-source
Public code audits increase transparency and trust.