OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
yubico.com
July 14, 2026
2 min read
🔥🔥🔥🔥🔥
43/100
Summary
OpenAI requires hardware-backed passkeys for Trusted Access Cyber members to log into ChatGPT accounts. This mandate aims to enhance account security against modern phishing and social engineering attacks.
Key Takeaways
- Starting September 1, all individual members of OpenAI's Trusted Access for Cyber must enable Advanced Account Security using hardware-backed passkeys to access frontier cyber models.
- OpenAI is tightening access restrictions for high-risk entities and jurisdictions to enhance security.
- Hardware-backed passkeys significantly increase the difficulty and cost for threat actors to exploit accounts, disrupting the criminal ecosystem of compromised accounts.
- The transition to hardware-backed protection is facilitated through OpenAI's Advanced Account Security program, which provides a passwordless experience and higher assurance against phishing attacks.
Community Sentiment
Positives
- The introduction of hardware-backed passkeys is a smart move, adding a layer of security that many in the community see as essential to protect sensitive AI access.
- Cobranded YubiKeys could drive awareness and adoption of secure practices among users, which is a win for overall cybersecurity.
Concerns
- There's a palpable fear that this will lead to restrictive access, where only 'permitted' devices can interact with AI models, stifling innovation and usability.
- Commenters are concerned that this could become a marketing gimmick rather than a genuine enhancement to security, raising doubts about its real value.
