The FIDO Alliance website lists all companies currently using the FIDO standard.įrom the perspective of the regular everyday user, use of security keys could be seen as a little convoluted. The Titan Key works with a Google account, as well as Dropbox, Facebook, Salesforce, Twitter, and so on.

Doesn’t it? What does it work with, and is having a security key worth it? Google has called the keys 'phishing-resistant two-factor authentication devices that help protect high-value users such as IT admins.' Backing up this claim, Google’s 85,000 employees have been using it for months and not one phishing attack has been reported. The key is based on Fast IDentity Online (FIDO) Alliance and universal 2nd factor (U2F) protocol, verifying the integrity of keys at the hardware level. It apparently not only beats 2FA via SMS (deprecated in 2016 by NIST), but it also offers the highest level of protection against phishing attacks because without the physical USB key itself, account login is impossible. So, it was with interest this summer that I observed Google announce its Titan Security Key, a tiny USB device (or Bluetooth version for mobile devices) offering hardware-based two-factor authentication (2FA) for online accounts. As a regular online, not to mention a mild cynic, I like to see myself as having a 'fortress mentality' when it comes to my own data protection, data privacy, and online privacy.

Titan yubikey