OpenAI requires physical passkeys for high-risk cyber model access
Starting September 1, 2026, individual members of OpenAI's program must enable Advanced Account Security and register a to keep using . OpenAI is also tightening access for high-risk and regions. A keeps the login on a physical device that cannot be copied or synced, making phishing and large-scale account theft harder.
Advanced Account Security disables weaker backup login methods and allows passwordless sign-in. Existing members can buy a discounted two-pack containing a YubiKey C NFC, which works by tapping a phone or tablet, and a YubiKey C Nano, which can remain in a laptop's USB-C port.
Key points
- The requirement begins on September 1, 2026.
- It applies to individual members of , not all ChatGPT users.
- Members must use Advanced Account Security with a .
- Weaker backup login methods are disabled after enrollment.
- A discounted YubiKey two-pack offers options for phones, tablets, and USB-C laptops.