On-Prem

Personal Tech

Google begs owners of crippled Chromecasts not to hit factory reset

Expired security cert kerfuffle leaves second-gen, Audio gadgets useless


Updated Google's second-generation Chromecast and its Chromecast Audio are suffering a major ongoing outage, with devices failing to cast due to an expired security certificate authority. The web giant is aware of the breakdown and says a fix is in the works.

On Sunday, many users of these gadgets encountered an "untrusted device" error, preventing them from casting content to TVs and other displays. Tech-savvy netizens traced the issue to an expired Google-owned intermediate certificate authority, which lapsed on March 9, 2025, at 1644 UTC after 10 years of validity.

Models relying on this expired certificate authority no longer work as expected with official Google apps, at least; the widgets can't authenticate themselves as legit Chromecast products, leading to that brick-wall of an untrusted error message. Unofficial apps, such as VLC, will continue to work, provided they ignore the certificate expiry.

"We're aware of an emerging issue impacting Chromecast 2nd gen and Chromecast Audio devices, and we are working on a fix," Google told The Register on Monday.

In an update on the Google Nest community site, where Chromecast support seems to live these days, the internet titan added, "Do not factory reset your device - we will keep you all updated when the fix rolls out. If you have already factory reset your device, we will provide instructions to set your device back up as soon as possible."

This came nearly a day into the outage and no further details have emerged. We've asked the Chocolate Factory for more information and will update you as we learn more. A factory reset won't fix the issue, basically, as it's a certificate issue baked into the devices.

For those who have already tried a factory reset, and even for those who haven't, there's still hope for getting your gear functional again. Polish security researcher Maciej Mensfeld shared a guide for users on how to remedy this.

His workaround involves setting your phone's date to before March 9, 2025, and then attempting to reauthorize the Chromecast. However, this method doesn't work for everyone and may require multiple attempts. Additionally, streaming services such as Spotify might still face issues after applying this fix.

The Chocolate Factory discontinued the Chromecast product line last year, replacing it with the Google TV Streamer, and quietly winding down support and updates for the line from 2023. Many users still rely on these devices, as evidenced by ongoing online discussions. While some speculate that issues like the recent certificate authority expiration are deliberate attempts by Google to encourage upgrades, there is no evidence to support such claims.

It's not the first time this kind of thing has happened to tech firms and it won't be the last. Microsoft had problems in this area in 2023 when an expired security certificate rendered cameras on Surface Pro X devices unusable. The same year, Cisco found itself in the firing line after an expired certificate caused outages in its SD-WAN appliances. And in 2021, Let's Encrypt let a root certificate lapse, disrupting major websites and services for devices that hadn't been updated. ®

Updated to add on March 13

Good news: Google says it's ready to gradually roll out an update for Chromecasts to get them working again as usual.

Send us news
63 Comments

India gets Google to unbundle Android and the Play Store on Smart TVs

Meanwhile, OpenAI expresses an interest in unbundling Chrome from Google

Japan serves Google a cease and desist order over its Android bundling deals

Won't let the Big G require its apps and search to be installed on smartphones

Google wins 1-1: Judge rules ad giant broke some antitrust law

After battle with Uncle Sam over online competition, web giant vows to appeal the bit it lost, celebrates the half it won

Blue Shield says it shared health info on up to 4.7M patients with Google Ads

Tech giants don't need smartphone mics to target adverts – your insurer just gives your data away, anyway

Enterprise tech dominates zero-day exploits with no signs of slowdown

As Big Tech gets used to the pain, smaller vendors urged to up their game

RIP, Google Privacy Sandbox

Chrome will keep third-party cookies, a win for web giant's ad rivals

Competition boffin launches class action against Google UK over search dominance

Alleges £5B in harm caused by Android deals, anticompetitive actions

Google goes cold on Europe: Stops making smart thermostats for continental conditions

And just-about bricks some of its older models everywhere

Hey Google, if Chrome is going to be single soon, OpenAI is interested

ChatGPT maker to join line of suitors if Chocolate Factory forced to offload browser

Who needs phishing when your login's already in the wild?

Stolen credentials edge out email tricks for cloud break-ins because they're so easy to get

Google's got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft's $20B+ security biz

How Chocolate Factory hopes to double down on enterprise-sec

Watch out for any Linux malware sneakily evading syscall-watching antivirus

Google dumped io_uring after $1M in bug bounties