The Titan Security Key is a FIDO-compliant

security token A security token is a peripheral device used to gain access to an electronically restricted resource. The token is used in addition to or in place of a password. It acts like an electronic key to access something. Examples of security tokens incl ...

developed by Google which contains the

Titan M The following is a list of products, services, and apps provided by Google. Active, soon-to-be discontinued, and discontinued products, services, tools, hardware, and other applications are broken out into designated sections. Web-based product ...

cryptoprocessor A secure cryptoprocessor is a dedicated System-on-a-chip, computer-on-a-chip or microprocessor for carrying out cryptographic operations, embedded in a packaging with multiple physical security measures, which give it a degree of tamper resistan ...

which is also developed by Google. It was first released on October 15, 2019. Depending on the features, the key costs $25-$35, but Google has provided them for free to high-risk users. It is considered a more secure form of

multi-factor authentication Multi-factor authentication (MFA; encompassing two-factor authentication, or 2FA, along with similar terms) is an electronic authentication method in which a user is granted access to a website or application only after successfully presenting ...

to log in to first-party and third-party services and to enroll in Google's advanced protection program. In 2021, Google removed the

Bluetooth Bluetooth is a short-range wireless technology standard that is used for exchanging data between fixed and mobile devices over short distances and building personal area networks (PANs). In the most widely used mode, transmission power is limi ...

model due to concerns about its security and reliability.

Vulnerabilities

The Bluetooth "T1" and "T2" models initially had a security bug that allowed anyone within 30 feet to make a clone of the key. The security firm NinjaLab has been able to extract the key using a side channel attack. In 2019, Google has put a

bug bounty A bug bounty program is a deal offered by many websites, organizations and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilit ...

up to US$1.5 million on the Titan chip. Newer versions and model numbers include: 1. USB-A/NFC (K9T) 2. Bluetooth/NFC/USB (K13T) 3. USB-C/NFC (YT1) 4. USB-C/NFC supporting U2F and FIDO2 (K40T) While none of these included publicly disclosed security vulnerabilities, Google has discontinued selling Bluetooth versions of the keys in August 2021, although Bluetooth keys continue to work with their warranties honored.

References

Cryptographic hardware Google hardware {{Google-stub