While the Titan Security Key is available generally for purchase, it is intended largely for enterprise users, especially those who already use Google’s cloud services. Titan Security Keys provide both a familiar USB security key and a Bluetooth version, which enables the security key to authenticate via users’ smartphones. Most recently, Google has released their own U2F hardware security key, known as the Titan Security Key. Since the publication of this report, Google has taken a number of other notable steps with integrating FIDO protocols into their consumer and enterprise authentication flows. According to the company, there has not been a successful phishing attack against their 85,000+ employees since requiring use of physical security keys. Over two years ago, Google published the result of their internal implementation of FIDO U2F security keys, and reported impressive outcomes. There has not been a successful phishing attack against their 85,000+ employees since requiring use of physical security keys. With authentication using FIDO protocols, the authenticator provides cryptographic proof that the user is interacting with the legitimate service, even if the authenticator’s responses is captured in transit, it cannot be successfully replayed by malicious actors to impersonate the user.

With the prevalence of cloud-based services, both among consumers and within enterprises, usernames and passwords are frequently the only thing stopping malicious actors from compromising data. From Google’s perspective, defending against phishing is the key to securing employees’ and customers’ accounts.

Google titan security key