Do Son Google recently shared a blog claiming that thanks to hardware-based security keys, Google’s tens of thousands of employees have never been successful in phishing since using security keys. At present, most necessary security certifications based on SMS verification codes, but SMS verification codes are far less secure than we think.
Google’s Titan security key:
The Google Security Key is based on the FIDO U2F authentication protocol, which means that any physical security key can be used by any website or service that supports the FIDO U2F standard. The physical security key connected to the computer based on the USB interface. When the user needs to perform authentication, only the physical security key needs to be lightly pressed to pass the verification.
Thanks to the physical security key algorithm you want to steal a remote code very difficult, which is the physical security key can replace SMS verification key points. At the same time, the Titan Security Key does not only support Google’s services but can be used by sites such as Microsoft and Amazon that are compatible with the FIDO standard.
Alternative SMS verification and authenticator:
SMS authentication is far less secure than Google ID Authenticator, but software-based Google Authenticator is relatively cumbersome to use.
As for the security aspect, the physical security key is naturally superior, which is why Google first switched from internal employees to entity verification.
However, the portability of the physical security key is naturally more troublesome than the first two, but after all, it is to sacrifice some convenience to improve security.
Competing with Yubikey:
The most popular brand in the physical security key industry today is the Yubico key, which has several different types of Yubikey security keys. Google’s Titan Security Key is currently available to Google Cloud cloud computing customers and will be available to all consumers in the future. Yubikey’s different types of products now support USB, Bluetooth, and NFC connections, and the Google Titan Security Key is temporarily only USB and Bluetooth connection.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce
Written by
