Google Titan Security Key

[bsdaiwa]

I am thinking of getting and using the Google Titan Security Key for authorization but don't know if it will impact how my OBi devices interact with Google Voice. Can anyone provide any guidance on the use of the Titan Security Key and its impact on the OBi/GV usage?

[SteveInWA]

There is no impact whatsoever to OBiTALK devies, aside from improved security by using the key. 

Remember, OBiTALK devices do not store your Google login credentials; they only store a unique secure token generated when you grant the device permission to use the Google Voice service.

If you also are considering the even stronger measure of using Google's Advanced Protection Program (as I do), then be aware that there is no way to bypass using your keys to sign in on any device (computer, phone, tablet).

[bsdaiwa]

Thanks SteveInWa, I was thinking of using my Pixel 3a since the Titan Security Key is built in. Your answer clears up the issue with my OBi's.

[BigJim_McD]

FYI:  Google's "Advanced Protection Program" website is displaying the following notice.

"Due to COVID-19, we're making changes to protect the health of our workforce, resulting in changes to our enrollment process. While you can still enroll with two physical security keys, we are temporarily suspending enrollment with your phone's built-in security key. If you are interested in enrolling with your phone's built-in security key, join our waitlist."

[bsdaiwa]

Thanks BigJim_McD, I put my name on the list for updates, just have to wait to activate using my phone.

[SteveInWA]

You really, really need to have two different physical security keys.  If you only rely on a smartphone as your key, and that phone is lost, stolen or dead, you're screwed.  It can take several business days to get Google to manually establish your identity and reset your account.

So, I suggest that you go ahead and buy the Titan key bundle ($50), or two keys in your choice of USB interfaces (A or C), either from Google or from Yubico.

[bsdaiwa]

Thanks Steve, I will take your advice as soon as they allow the setup for my phone.

[CoolHandMike]

I recently got a Titan security key, so of course I had to re-login.  I went to the ObiTalk website to re-enter credentials, but a prompt did not come up asking me to verify via 2FA (Titan security key), and therefore I still don't have access to my ObiTalk VoIP service.   

Any suggestions?

[SteveInWA]

I recently got a Titan security key, so of course I had to re-login.  I went to the ObiTalk website to re-enter credentials, but a prompt did not come up asking me to verify via 2FA (Titan security key), and therefore I still don't have access to my ObiTalk VoIP service.   

Any suggestions?

You shouldn't have to use your key for that, as long as you are already signed into the correct Google / Gmail account that holds your Google Voice number.  In other words:

• Use a desktop/laptop computer's web browser, not a phone or tablet.  If you're using Google Chrome Browser, Microsoft Edge Chromium, or Safari, press Ctrl-Shift-N to open an Incognito browsing window; if you're using Firefox, press Ctrl-Shift-P to open a Private browsing window.
• In that window, sign into your correct Gmail account (which should prompt you to use your key) and go here:  https://voice.google.com/.  Confirm that you see your Google Voice number at the top of the page.  If not, this is the wrong Google account; close and reopen a private/incognito window and find the right account.
• Leaving the Google Voice website open, press Ctrl-T to open another tab in the same browser window.  Now, sign into your OBiTALK dashboard (http://www.obitalk.com/obinet/pg/obhdev) and follow the instructions to set up Google Voice.