


In my opinion, most people would be much better served picking up a cheap USB-A key and a USB-C key for the same price (or less). In related angst, the lack of Bluetooth support for security keys on Chromebooks is also confusing, since that means the wireless functionality of the combo Bluetooth/NFC battery-powered Titan Security Key is only compatible with phones - and the tediousness of the Bluetooth 2FA process makes it anything but convenient compared to USB. Both keys are also FIDO U2F and not FIDO2, so it isn't future-proof for the coming era of password-less authentication. What good is having it always on hand if it won't work with most of the hardware I expect to use it with? Having to use dongles for both of the Titan Security Keys was awkward, and it entirely eliminated the usefulness of a battery-powered, keychain security key. By far the majority of my devices have no USB Type-A port, and that's only going to be a greater annoyance as time goes on. I was also a bit miffed that neither key was USB Type-C. SMS-based verification is subject to interception and socially engineered attacks at the carrier level (i.e., someone can call in pretending to be you and change where that number points). Depending on the value of the account, the convenience of SMS verification can actually be more of a risk than a benefit. If you care about the security of an account (i.e., if it has direct or indirect access to anything you'd regret losing), then it's a good idea to enable at least some form of 2FA authentication for it, but not all methods are equal. But with USB Type-C only available via adapters, and Bluetooth/NFC support being limited to Android and iOS, for most of us it's probably a pass.

But is the Titan Security Key worth your attention? If you haven't used any security keys before or if Google's customer support is important to you, then it may be worth a look. With so much of our finances, communications, and general lives taking place on remote servers, the responsibility of digital security should always be in the back of our minds, and it takes more than just a good password to stay safe. Paired with Google's Advanced Protection Program, your account is about as secure as it can be. Together they can provide some extra security for your Google account - as well as other FIDO U2F-compatible services. The "Key" is actually two keys: a USB-A security key with NFC, and a battery-powered, Micro-USB-equipped Bluetooth/NFC key.
