Google will sell hardware keys to improve account security

by Hilbert Hagedoorn on: 07/27/2018 06:50 AM | source: nu.nl | 23 comment(s)

The device would be made available to everyone via the Google web store. The hardware key is to improve the security of an account. A user can only log in if the device is nearby. Google has been offering other security methods for a while, including two-step verification with a mobile app or text messages. The search giant will offer two versions of the Titan Security Key. One connects via USB to a computer, while a second model uses bluetooth to connect wirelessly to a smartphone.

Google has already offered users the opportunity to log in with a hardware key created by another manufacturer. However, the company did not have a device of its own until now. The gadgets contain special firmware, which checks with Google whether a login attempt is legitimate. The hardware keys use the FIDO standard, they also work on other websites.

Related Stories

Google working on GMAIL redesign - 05/12/2014 08:09 AM
Google testing an overhauled design for its Gmail for Android app, if a bunch of leaked screenshots is to be believed. Reports also point to similar changes coming to a variety of Google apps. The ...

Google working on a 8-inch Nexus tablet - 02/08/2014 09:32 AM
Google will release an 8" Nexus tablet at the end of April. Initial shipments of this device are projected to hit the 2 million mark. Google reportedly decided to go for 8" to avoid the he...

Google Winter Olympics with Street View snowmobile - 02/10/2010 11:05 AM
pretty cool to see really, now we've already seen Street View bicycles from Google, but now they've also equipped a snowmobile with one of their Street View cameras to capture shots of the slopes at t...

2 pages 1 2

cryohellinc
Senior Member

Posts: 2705
Joined: 2014-10-20

#5568688 Posted on: 07/27/2018 07:16 AM

Sounds interesting, depending on a price might get one.

One question - can you use it with multiple accounts?

sverek
Senior Member

Posts: 5361
Joined: 2011-01-02

#5568703 Posted on: 07/27/2018 08:28 AM

sounds fun... until you lose it.

wavetrex
Senior Member

Posts: 638
Joined: 2008-07-16

#5568739 Posted on: 07/27/2018 10:53 AM

I'll take one !

Google may or may not be that evil company who wants to control everything, but it just happens that my Gmail is very important for me.
Already using 2FA with my phone, but a tiny inconspicuous device that is much less likely to be stolen than a phone.

As for losing it... just add it to the house keys which only a complete moron would lose.

deusex
Senior Member

Posts: 532
Joined: 2003-11-19

#5568765 Posted on: 07/27/2018 12:23 PM

Not a good idea, unless you can have two just in case you loose one.

sluflyer06
Junior Member

Posts: 14
Joined: 2010-12-21

#5568795 Posted on: 07/27/2018 01:57 PM

Sounds interesting, depending on a price might get one.

One question - can you use it with multiple accounts?
Yes, there is no meaningful limitation in how many google or other accounts a single device can handle.
sounds fun... until you lose it.
There is a backup key, something like a seed word combo that you keep offline, they also flat out recommend you use 2 devices...
Not a good idea, unless you can have two just in case you loose one.
You can and keep in mind hardware tokens for account access has been around for many years now in the corporate world, my company requires all suppliers to buy a key similar to this to login to their supplier portals.

cryohellinc
Senior Member

Posts: 2705
Joined: 2014-10-20

#5568813 Posted on: 07/27/2018 02:53 PM

Yes, there is no meaningful limitation in how many google or other accounts a single device can handle.

There is a backup key, something like a seed word combo that you keep offline, they also flat out recommend you use 2 devices...

You can and keep in mind hardware tokens for account access has been around for many years now in the corporate world, my company requires all suppliers to buy a key similar to this to login to their supplier portals.
@sluflyer06
Thank you for clarifying this. Sounds interesting, definitelly something to think about.

schmidtbag
Senior Member

Posts: 4495
Joined: 2012-11-10

#5568821 Posted on: 07/27/2018 03:17 PM

I'm not so sure this is a good idea, especially considering this is optional (and therefore probably is not physically unique like an actual key). But much like an actual key, devices like these have been made before and have been spoofed via emulated hardware.

So, unless Google figured out a way around that, I'm not sure I'd trust something like this. At least for the time being, it would work due to "security via obscurity", which people around here sure like to hate.

-Tj-
Senior Member

Posts: 16411
Joined: 2012-05-18

#5568842 Posted on: 07/27/2018 04:39 PM

Yes moar moneyzz xD

Isn't 2 way authenticity, strong pass and email notification secure enough?

It is for me, dont see and use of that other than to give them more money.

vbetts
Moderator

Posts: 14714
Joined: 2006-07-04

#5568860 Posted on: 07/27/2018 05:24 PM

Kind of seems like geared more towards enterprise, which if it is anyone that works with hardware keys knows that you shouldn't ever lose your fob or authentication key. You won't lost it becuase you don't want to pay for a new one lol

pokerapar88
Senior Member

Posts: 1716
Joined: 2011-02-05

#5568869 Posted on: 07/27/2018 06:00 PM

Google has demonstrated a new login method, where a user has to connect a special device, hardware key, to enter an account on your PC or laptop. The so-called Titan Security Key will first be off...

Google will sell hardware keys to improve account security

Yup, we've been using very similar devices (if not the same) in our office for years (yeah, I work for a company that starts with a G and ends with an E, iykwim), and these work flawlessly and integrate beautifully with the login function on your browser.
You can have more than one (in case you lose one) and you can always use a secondary authentication method if all else fails. So I hope that will ease any of your concerns.

scatman839
Senior Member

Posts: 13977
Joined: 2004-11-19

#5568892 Posted on: 07/27/2018 07:23 PM

Have your backup passwords stored to your phone on a dropbox account

Your phone has a password and fingerprint scan. The dropbox app itself can have a seperate pin.

That's what I do, authy 2 factor is on my phone, and authy is installed on my pc and syncs my stuff (its also passworded with a different password to enter my pc)

Denial
Senior Member

Posts: 12382
Joined: 2004-05-16

#5568901 Posted on: 07/27/2018 07:43 PM

Yeah, it's geared towards high risk users like government employees, reporters, etc. For example this would have prevented the former US Chief of Staff (John Podesta) from getting his emails leaked. Traditional 2 factor is actually pretty easy to compromise... You phish for login, attacker just sends a fake 2FA request to the victim's computer and automates the google login based on phished information - so soon as the person sees the fake 2FA they get a real prompt from google on their phone.. then they type the real google 2FA into the fake prompt which the attacker uses to login to the real account. This prevents that from happening.

rl66
Senior Member

Posts: 2169
Joined: 2007-05-31

#5568913 Posted on: 07/27/2018 09:04 PM

exist already without google in the security... (and less expensive)

JiveTurkey
Member

Posts: 22
Joined: 2016-12-31

#5568950 Posted on: 07/28/2018 12:45 AM

Who guards your info from Google?

Who watches the watchers???

rl66
Senior Member

Posts: 2169
Joined: 2007-05-31

#5568987 Posted on: 07/28/2018 09:35 AM

Who guards your info from Google?

Who watches the watchers???
also that point... but for some Amazon, Google, Steam... (and other of course) is top secured companies... i won't expend on this point

2 pages 1 2

Post New Comment

Click here to post a comment for this news story on the message forum.