(Google's new USB-C Titan Security Key)

Google's Titan Security Key is getting a USB-C version that can connect to the latest laptops and Android smartphones.

The new model goes on sale Oct. 15 in the US for $40. To manufacture the devices, Google has partnered with security key vendor Yubico, which also offers a similar-looking USB-C key model for $50.

Although security keys can be pricey, they offer the best safeguard against online account hijacking. Basically, anyone logging in must supply the correct password and then insert a hardware-based key into the device's USB port to gain access. Online sites including Google, Facebook, Twitter, and Dropbox all support the technology, which can usually be activated in an account's settings menu.

(Google's existing Titan Security key bundle.)

Last year, Google began selling Titan Security Keys to help consumers and its enterprise customers protect their accounts. But at the time, Google only offered two versions: The first supported USB-A in addition to NFC connections, which Android smartphones tend to support. The second was compatible with USB-A, Bluetooth, and NFC, so it could work on iPhones and iPads.

To build previous-gen hardware, Google partnered with the Chinese vendor Feitian, which sparked security concerns around Chinese spying. In response, Google said both keys were built with custom firmware that's resistant to tampering, even from supply chain manufacturers.

This time, Google is tapping California-based Yubico to help it build the USB-C Titan Security Key, which will also come with Google's custom firmware but won't support NFC. Look for it on the Google Store.

Google's two other existing security keys are currently being sold as a $50 bundle. But going forward, Google plans on selling them as individual products. The USB-A/NFC model will be $25 while the USB-A/Bluetooth/NFC version will go for $35.

"We highly recommend all users at a higher risk of targeted attacks to get Titan Security Keys and enroll into the Advanced Protection Program (APP), which provides Google's industry-leading security protections to defend against evolving methods that attackers use to gain access to your accounts and data," Google product manager Christiaan Brand said in a statement.

Anyone can sign up for Google's Advanced Protection Program, but it does require you to own two security keys, which can be from any vendor. The program is designed to help politicians, business leaders, and activists protect their Google accounts from the most sophisticated hackers by forcing anyone to log in with a security key.

A free option to protect your online accounts is two-factor authentication, which many of the major online websites support. The security setup basically requires anyone logging in to supply the password and a one-time code generated on your smartphone. Google has also been working on turning newer Android smartphones into security keys themselves.

Further Reading

Security Reviews