'Google really wants you to hack the Pixel's Titan M security chip'. 'Hackers can clone Google Titan 2FA keys using a side channel in NXP chips'. 'Google recalls some Titan security keys after finding Bluetooth vulnerability'. 'Google to give security keys to 'high risk' users targeted by government hackers'. 'Google's new Titan security key lineup won't make you choose between USB-C and NFC'. ^ 'USB-C Titan Security Keys - available tomorrow in the US'.While none of these included publicly disclosed security vulnerabilities, Google has discontinued selling Bluetooth versions of the keys in August 2021, although Bluetooth keys continue to work with their warranties honored. USB-C/NFC supporting U2F and FIDO2 (K40T) Newer versions and model numbers include: Ĥ. In 2019, Google has put a bug bounty up to US$1.5 million on the Titan chip. The security firm NinjaLab has been able to extract the key using a side channel attack. The Bluetooth 'T1' and 'T2' models initially had a security bug that allowed anyone within 30 feet to make a clone of the key. In 2021, Google removed the Bluetooth model due to concerns about its security and reliability. It is considered a more secure form of multi-factor authentication to log in to first-party and third-party services and to enroll in Google's advanced protection program. ĭepending on the features, the key costs $25-$35, but Google has provided them for free to high-risk users. It was first released on October 15, 2019. The Titan Security Key is a FIDO-compliant security token developed by Google which contains the Titan M cryptoprocessor which is also developed by Google. Security token by Google Titan Security Key

Titan yubikey