The Titan Security Key is a FIDO-compliant security token developed by Google which contains the

Titan M The following is a list of products, services, and apps provided by Google. Active, soon-to-be discontinued, and discontinued products, services, tools, hardware, and other applications are broken out into designated sections. Web-based product ...

cryptoprocessor A secure cryptoprocessor is a dedicated computer-on-a-chip or microprocessor for carrying out cryptographic operations, embedded in a packaging with multiple physical security measures, which give it a degree of tamper resistance. Unlike cryp ...

which is also developed by Google. It was first released on October 15, 2019. Depending on the features, the key costs $25-$35, but Google has provided them for free to high-risk users. It is considered a more secure form of multi-factor authentication to log in to first-party and third-party services and to enroll in Google's advanced protection program. In 2021, Google removed the

Bluetooth Bluetooth is a short-range wireless technology standard that is used for exchanging data between fixed and mobile devices over short distances and building personal area networks (PANs). In the most widely used mode, transmission power is limi ...

model due to concerns about its security and reliability.

Vulnerabilities

The Bluetooth "T1" and "T2" models initially had a security bug that allowed anyone within 30 feet to make a clone of the key. The security firm NinjaLab has been able to extract the key using a side channel attack. In 2019, Google has put a

bug bounty A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabiliti ...

up to US$1.5 million on the Titan chip. Newer versions and model numbers include: 1. USB-A/NFC (K9T) 2. Bluetooth/NFC/USB (K13T) 3. USB-C/NFC (YT1) 4. USB-C/NFC supporting U2F and FIDO2 (K40T) While none of these included publicly disclosed security vulnerabilities, Google has discontinued selling Bluetooth versions of the keys in August 2021, although Bluetooth keys continue to work with their warranties honored.

References

Cryptographic hardware Google hardware {{Google-stub