| Tile Mate | ||
|---|---|---|
|
Security Grade
Calculator v
|
Tile Mate
Category: Bluetooth tracker • Model / Gen: Tile Mate (2022) Release Date: 2021-10-01 • Status: In sale Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Tags can be physically hidden on a victim; anti-theft mode hides tags from detection. |
| Known vulnerabilities | Rare | 🔗 Proof | Georgia Tech found unencrypted BLE, static MAC, weak 8,640-value ID rotation (Tile Mate 2022). |
| Prior attacks | Rare | 🔗 Proof | June 2024 customer-support breach exposed names/addresses/emails/phones. |
| Updatability | Rare | 🔗 Proof | Firmware updates infrequent and not user-controllable. |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | No end-to-end encryption; servers collect plaintext location/IDs. |
| Communications | No encryption | 🔗 Proof | BLE broadcasts are plaintext, enabling passive tracking. |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Server-side data not end-to-end encrypted. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Tile/Life360 account management. |
| Authentication | Basic | 🔗 Proof | Account auth exists but 2024 breach exposed user PII. |
| Brute-force protection | Exist | 🔗 Proof | Login rate limiting present. |
| Event logging | Partial logging | 🔗 Proof | Location history visible; no full audit trail. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Account password complexity. |
| Category Score | Score: 2 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Tile firmware (Companion App: Tile app) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: No local storage |
| Power, Battery & Charging | Battery: • Power: Replaceable CR1632 battery • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: Bluetooth Low Energy |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
Tile Mate transmits unencrypted BLE with a static MAC and weak ID rotation, enabling passive tracking and stalking; its 2024 customer-support breach exposed PII. This makes it notably riskier than Apple/Samsung trackers.
