Stefan Savage, the University of California, San Diego computer science professor who led the research, warned that the public should treat a key like a credit card, and "keep it in your pocket unless you need to use it."