YubiKey maker Yubico says it does not manufacture Google's security keys and that Bluetooth-based keys are not as secure as NFC and USB-based keys
Context & Ripple Effects
This lands one day after Google's Titan Security Key unveiling, a Yubico-like phishing-resistant device pitched at Google Cloud customers first. Yubico — which raised $30M from NEA in 2017 and had pushed physical keys into mainstream services via Facebook's USB-key support — is drawing two lines: it has no manufacturing role in Google's key, and Bluetooth is an inferior transport to NFC and USB.
First-order effects
- Google's Titan launch now carries a public security caveat from the category's incumbent vendor, forcing Google to justify its design choice to early Cloud customers weighing a purchase.
- Yubico positions its own NFC- and USB-based YubiKeys as the more secure option at the exact moment a deep-pocketed competitor enters the market.
Second-order effects
- Transport choice becomes a purchasing criterion for enterprise 2FA buyers, pressuring other hardware-key makers to state their position on Bluetooth versus NFC/USB rather than ship both silently.
- Yubico doubles down on standards-based transports instead of competing on Google's terms — a path it follows two months later with the YubiKey 5 Series' passwordless FIDO2 and NFC support.
Third-order effects
- If the pattern holds, the hardware-authentication market consolidates around open protocols (FIDO2 over NFC/USB) with vendors differentiating on firmware quality and supply-chain trust — a scrutiny Yubico itself later faced when a side-channel attack could clone pre-5.7 keys and it had to replace government-deployed units over a randomness bug.
The trend: Hardware 2FA is shifting from proprietary vendor devices toward standardized phishing-resistant keys, with transport security (NFC/USB vs Bluetooth) emerging as the competitive battleground.