Google Titan Security Key stores up to 250 passkeys on USB stick with NFC chip

[Redaktion]

Google is taking the next step towards a password-free future with the Titan Security Key, which can authenticate login processes using passkeys stored on it by simply plugging it into the USB port of a computer or connecting it wirelessly to a smartphone via NFC.

https://www.notebookcheck.net/Google-Titan-Security-Key-stores-up-to-250-passkeys-on-USB-stick-with-NFC-chip.768579.0.html

[Sinocelt]

So if you carry this with your phone and someone robs you, they can access everything? There's obviously something I don't understand.

[NikoB]

The reliability of all such solutions is multiplied by 0, without multiple independent audits.

Remember one key thing - if a similar product is approved by your local authorities for sale in your country, then there is 100% a backdoor, a secret key hole, and the manufacturer cooperates with the authorities of your country. Thus, the solution does not make sense in terms of your personal safety.

[A]

So if you carry this with your phone and someone robs you, they can access everything? There's obviously something I don't understand.

It is for 2 factor authentication. Aka, you still need the 1st factor unless you go completely passwordless. Of course if someone is robbing you with a gun, they can make you spill anything anyways. Security is only as secure as the weakest link and the weakest link is usually the user

[NikoB]

 If both parts of two-factor authentication are directly accessible from one physical device and not independently controlled, this is not security enhancement, but a fiction for idiots.

What makes me laugh the most are idiots who use online banking from a smartphone, receiving SMS authorization codes on the same device (where the bank client is installed with the login and password already entered) - an ideal target for crime. People are only insane until the moment when a significant amount of money is stolen from them...

Never use the same smartphone to receive authorization codes where the online banking client is located with an already connected personal account or the page is open in the browser. Always have a second phone with a SIM card that receives SMS regardless. Or use a PIN code generator, which some banks provide for free or for a fee. It has its own screen. And there you first need to enter a PIN code.

[A]

NikoB's tin foil hat stories never disappoint.