OpenAI said individual members of its Trusted Access for Cyber program must enable Advanced Account Security with a hardware-backed passkey by 1 September 2026 to keep access to its most cyber-capable frontier models.

Members who do not comply will return to default model access.

OpenAI said Trusted Access for Cyber is an identity-gated access route for enterprise customers, verified defenders, and other legitimate users.

Individuals can verify their identity and request access, while organizations can apply for team access to defensive cybersecurity work.

The company also said it is taking additional steps to restrict access for high-risk entities and jurisdictions, but it has not publicly specified which entities or locations are covered.

The move aligns with government guidance that recommends phishing-resistant multi-factor authentication for higher-risk accounts.

🔗 Source: Yubico

Recent OpenAI developments