OpenAI began requiring hardware-backed passkeys on September 1 for members of its Trusted Access for Cyber program.

The move comes as Yubico expands availability of a co-branded YubiKey bundle to nine more markets, including Australia, Japan, Malaysia, Singapore, South Korea, and the UAE.

Under OpenAI’s Advanced Account Security program, users who enroll a security keys can no longer use weaker authentication methods that can be phished, such as SMS one-time passwords and push notifications.

Yubico provides the hardware security key used for the program. The company is expanding availability of the co-branded devices as OpenAI rolls out the new security requirement.

The move reflects a broader shift toward phishing-resistant multifactor authentication. The US Cybersecurity and Infrastructure Security Agency has issued guidance on phishing-resistant multifactor authentication and published a fact sheet on implementing phishing-resistant MFA.

🔗 Source: Yubico

Recent OpenAI developments