You can’t accidentally reveal the secret to anyone else, because it was generated inside the key and can’t be extracted.The data submitted for authentication is different at every login, thanks to the active cryptographic calculation in the process, unlike a conventional password that is the same every time.You don’t need to remember a complex password, because the necessary cryptographic secret is stored on the Titan key.Titans can generate encryption keys internally, can encrypt (or digitally sign) data that you send to them, and can export the encrypted (or signed) data.īut they cannot export the secret part of the key itself, which is locked up inside the chip.Īs you can probably imagine, this makes it possible to implement a secure login process where: Much like the chip on your credit card (in fact, Titan keys use the same secure processor as some smart cards), or the SIM card in your phone, Titans are designed to do encryption in a rather special way.

Titan product images from the Google Store.

The Google Titan device, like similar products from Swedish company Yubico and Chinese company Feitian (which actually makes the hardware used in the Titan), looks like a miniature key fob that contains specialised and supposedly tamper-proof hardware for performing secure cryptographic calculations. Security keys of this sort are often known as FIDO keys after the Fast IDentity Online Alliance, which curates the technical specifications of a range of authentication technologies that “romote the development of, use of, and compliance with standards for authentication and device attestation”.īoldly put, FIDO aims to “help reduce the world’s over-reliance on passwords.” In July 2018, after many years of using Yubico security key products for two-factor authentication (2FA), Google announced that it was entering the market as a competitor with a product of its own, called Google Titan.

Titan 2fa key