Wallets: Add Trezor Safe 3, Safe 5, and Safe 7

[zktex]

Summary

Adds the three current Trezor Safe family hardware wallets to the wallets list: Trezor Safe 3, Trezor Safe 5, and Trezor Safe 7.

This PR complements (and unblocks) #4664, which proposes removing the discontinued Trezor One and Model T. Per the discussion there with @crwatkins, the agreed sequencing is: list the current models first, then proceed with the removal of the older ones. I'm raising this PR to enable that next step. cc @devdavidejesus, @prusnak.

Closes trezor/trezor-firmware#6891.

Disclosure

I work with Trezor Company s.r.o. (a SatoshiLabs company, the maker of Trezor) on the firmware team.

What's added

For each of Safe 3, Safe 5, and Safe 7:

• _wallets/trezorsafeN.md — wallet metadata, structured identically to the existing trezormodelt.md
• img/wallet/trezorsafeN.png — 144×144 Trezor logo icon
• img/screenshots/trezorsafeN.png — 250×350 device screenshot

Plus three new entries in _translations/en.yml (wallettrezorsafe3, wallettrezorsafe5, wallettrezorsafe7), placed adjacent to the existing wallettrezormodelt / wallettrezorone keys.

Codebase shared with the existing Model T listing

All three Safe models share the same trezor-firmware codebase as the currently-listed Trezor Model T. The wallet-behavior surface (address generation, signing flow, multisig support, SLIP-39 backup, etc.) is therefore consistent with what bitcoin.org has already accepted via the Model T entry. The differences across the Safe lineup are physical (input method, display, connectivity, secure element) — they don't affect Bitcoin-handling logic.

This is the reason the features set and all check values match trezormodelt.md exactly across all three new entries.

Secure element

The main hardware difference from the Model T is the addition of a dedicated secure element. All three Safe models include the OPTIGA Trust M (V3) secure element, certified to Common Criteria EAL6+. Safe 7 additionally includes TROPIC01, an open, auditable secure element developed by Tropic Square (a SatoshiLabs company).

The secure element in Safe devices serves three roles: enforcing PIN verification in hardware (protecting against brute-force attempts on a stolen device), attesting device authenticity via a Trezor-signed certificate, and contributing an independent source of entropy during wallet seed generation. It does not perform transaction signing, and the signing logic remains fully open-source and reproducibly built, identically to the Model T.

The OPTIGA Trust M (V3) was chosen specifically because it is NDA-free, allowing public security research without restrictions. Further details: Secure Elements in Trezor Safe devices.

Descriptions

Descriptions in _translations/en.yml were adapted from the official trezor.io product pages, with marketing language stripped to match the factual style of the existing wallet entries. All three are under the 320-character limit.

Files changed

• _wallets/trezorsafe3.md (new)
• _wallets/trezorsafe5.md (new)
• _wallets/trezorsafe7.md (new)
• img/wallet/trezorsafe3.png (new, 144×144, optipng -o7)
• img/wallet/trezorsafe5.png (new, 144×144, optipng -o7)
• img/wallet/trezorsafe7.png (new, 144×144, optipng -o7)
• img/screenshots/trezorsafe3.png (new, 250×350, optipng -o7)
• img/screenshots/trezorsafe5.png (new, 250×350, optipng -o7)
• img/screenshots/trezorsafe7.png (new, 250×350, optipng -o7)
• _translations/en.yml (modified — three new keys added adjacent to existing Trezor entries)

[devdavidejesus]

Hi @zktex ! Quick question: are these new Safe listings referring to the regular Safe lineup, the Bitcoin-only editions, or both?

The PR text felt generic, but the screenshots gave me the impression of the Bitcoin-only variants.

[prusnak]

regular Safe lineup, the Bitcoin-only editions, or both?

both

[devdavidejesus]

LGTM

[devdavidejesus]

@prusnak @zktex , I’m working with @crwatkins on the bitcoin.org wallet reviews. One remaining step on our side is a hands-on physical test of the Trezor Safe lineup. I can send the shipping details by email.