The attacker would need to be within about 30 feet of the device, according to Google. The security issue is specific to Bluetooth pairing and would still require an attacker to have the target’s username and password to become a threat. Microsoft notes in an advisory that the issue affects the Bluetooth Low Energy (BLE) version of FIDO Security Keys, and also advised customers using the Feitian Multipass (Feitian CTAP1/U2F) security key to check its product warning. All versions of Windows 10 are similarly affected. Any device using well-known keys to encrypt connections may be affected, including certain security fobs,” Microsoft said in a support note for Windows 10 version 1903. These security updates address a security vulnerability by intentionally preventing connections from Windows to unsecure Bluetooth devices. “You may experience issues pairing, connecting or using certain Bluetooth devices after installing security updates released June 11, 2019. Microsoft’s June 2019 Patch Tuesday update brings a similar restriction to Apple’s iOS 12.3 update. Security key maker Yubico - a supplier for Google employees' own computers - opposed Bluetooth due to security and usability concerns.

For $50, businesses and consumers could buy a bundle that included one model that could be used to authenticate after being physically connected and via NFC, and another that connected over Bluetooth. Google launched the Titan keys as part of a two-factor authentication solution in the summer of 2018 with the intent to help protect Google Account users against phishing attacks.

Google titan key