diff --git a/core/embed/vendorheader/T3W1/vendor_dev_DO_NOT_SIGN.json b/core/embed/vendorheader/T3W1/vendor_dev_DO_NOT_SIGN.json
new file mode 100644
index 0000000000..d22bff3da2
--- /dev/null
+++ b/core/embed/vendorheader/T3W1/vendor_dev_DO_NOT_SIGN.json
@@ -0,0 +1,20 @@
+{
+    "header_len": 4608,
+    "text": "DEV ONLY, DO NOT USE!",
+    "hw_model": null,
+    "expiry": 0,
+    "version": [0, 0],
+    "sig_m": 2,
+    "trust": {
+        "allow_run_with_secret": false,
+        "show_vendor_string": false,
+        "require_user_click": false,
+        "red_background": false,
+        "delay": 0
+    },
+    "pubkeys": [
+        "e28a8970753332bd72fef413e6b0b2ef1b4aadda7aa2c141f233712a6876b351",
+        "d4eec1869fb1b8a4e817516ad5a931557cb56805c3eb16e8f3a803d647df7869",
+        "772c8a442b7db06e166cfbc1ccbcbcde6f3eba76a4e98ef3ffc519502237d6ef"
+    ]
+}
diff --git a/core/embed/vendorheader/T3W1/vendor_dev_DO_NOT_SIGN.toif b/core/embed/vendorheader/T3W1/vendor_dev_DO_NOT_SIGN.toif
new file mode 100644
index 0000000000..231990e5a2
Binary files /dev/null and b/core/embed/vendorheader/T3W1/vendor_dev_DO_NOT_SIGN.toif differ
diff --git a/core/embed/vendorheader/T3W1/vendor_unsafe.json b/core/embed/vendorheader/T3W1/vendor_unsafe.json
index ddc8741f1f..eb38b729f2 100644
--- a/core/embed/vendorheader/T3W1/vendor_unsafe.json
+++ b/core/embed/vendorheader/T3W1/vendor_unsafe.json
@@ -6,6 +6,7 @@
     "version": [0, 1],
     "sig_m": 2,
     "trust": {
+        "allow_run_with_secret": false,
         "show_vendor_string": true,
         "require_user_click": true,
         "red_background": true,
diff --git a/core/embed/vendorheader/T3W1/vendorheader_dev_DO_NOT_SIGN_signed_dev.bin b/core/embed/vendorheader/T3W1/vendorheader_dev_DO_NOT_SIGN_signed_dev.bin
new file mode 100644
index 0000000000..574ef8b280
Binary files /dev/null and b/core/embed/vendorheader/T3W1/vendorheader_dev_DO_NOT_SIGN_signed_dev.bin differ
diff --git a/core/embed/vendorheader/T3W1/vendorheader_dev_DO_NOT_SIGN_unsigned.bin b/core/embed/vendorheader/T3W1/vendorheader_dev_DO_NOT_SIGN_unsigned.bin
new file mode 100644
index 0000000000..a4dacb6cdf
Binary files /dev/null and b/core/embed/vendorheader/T3W1/vendorheader_dev_DO_NOT_SIGN_unsigned.bin differ