TB
Trezor Bridge®
Secure local connector · origin aware

Local, auditable, and permission-first bridge for hardware wallets

Trezor Bridge provides a minimal HTTP API over a local port to enable browser-based wallets to securely talk to your Trezor device. It enforces origin validation, asks for device confirmation and avoids routing any key material through external services.

Local-Only
Origin Verified
Open-source
Cross-platform

Why Bridge matters

Browsers restrict direct USB/HID access for safety. Bridge acts as a deliberate, limited bridge — auditable and silent unless you explicitly accept an origin's request.

Trust model

fw: 1.0.0
Private keys remain on the device. Bridge forwards JSON-structured requests only.

Quick flow — what happens

1
Browser requests Bridge
A well-formed HTTP request hits 127.0.0.1:21325 and asks to enumerate devices.
2
Bridge checks origin
Bridge verifies the requesting origin and decides whether to present a prompt.
3
User confirms on device
The Trezor displays request details; the private key never leaves the device.