Trezor Suite acts as the digital interface, while the hardware wallet performs all cryptographic operations. When users initiate actions such as sending funds or updating firmware, the application communicates directly with the connected hardware device.
However, private keys are always stored within the hardware wallet and never exposed to the computer or online environment. This distinction ensures that even if the computer is compromised, the private keys remain safe.
Whenever a transaction is made, users must physically confirm it on their Trezor device by pressing a button. This ensures that unauthorized activity cannot occur remotely.