openai cybersecurity ai-safety account-protection

OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members

yubico.com

July 14, 2026

2 min read

🔥🔥🔥🔥🔥

44/100

Summary

OpenAI requires hardware-backed passkeys for Trusted Access Cyber members to log into ChatGPT accounts. This mandate aims to enhance account security against modern phishing and social engineering attacks.

Key Takeaways

Starting September 1, all individual members of OpenAI's Trusted Access for Cyber must enable Advanced Account Security using hardware-backed passkeys to access frontier cyber models.
OpenAI is tightening access restrictions for high-risk entities and jurisdictions to enhance security.
Hardware-backed passkeys significantly increase the difficulty and cost for threat actors to exploit accounts, disrupting the criminal ecosystem of compromised accounts.
The transition to hardware-backed protection is facilitated through OpenAI's Advanced Account Security program, which provides a passwordless experience and higher assurance against phishing attacks.

Read original article

View story →

Coverage & discussions

Hacker News · yubico.com

OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members ↗

Community discussions

Hacker News discussion ↗

Historical count: 5 · 5 saved in sample · Historical sample

Analysis ready

Community Sentiment

Mixed

Positives

The introduction of hardware-backed passkeys is a smart move, adding a layer of security that many in the community see as essential to protect sensitive AI access.
Cobranded YubiKeys could drive awareness and adoption of secure practices among users, which is a win for overall cybersecurity.

Concerns

There's a palpable fear that this will lead to restrictive access, where only 'permitted' devices can interact with AI models, stifling innovation and usability.
Commenters are concerned that this could become a marketing gimmick rather than a genuine enhancement to security, raising doubts about its real value.