오픈AI, 사이버 보안 멤버 대상 하드웨어 패스키 도입 의무화

OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members to log into ChatGPT accounts Jerrod Chong Jerrod Chong July 9, 2026 The rapid advancement of AI is changing the global cybersecurity landscape. As these technologies become more powerful, safeguarding access to them is increasingly critical — particularly for the security researchers and defenders working to identify vulnerabilities, strengthen software and improve cyber resilience. People need advanced account protection that can withstand modern phishing and social engineering attacks, helping ensure state-of-the-art AI capabilities remain in the hands of trusted users. Today's announcement from OpenAI sets a new industry standard: starting September 1, all individual members of Trusted Access for Cyber (TAC) must enable Advanced Account Security using a hardware-backed passkey to retain access to frontier cyber models. Additionally, OpenAI is tightening access restrictions for high-risk entities and jurisdictions. At Yubico, we believe the future of AI security depends heavily on identity and authenticator assurance, not just model safety. When the stakes are this high, organizations can no longer rely on software-based controls or legacy multi-factor authentication (MFA), both of which are easily bypassed or intercepted. True security requires a phishing-resistant, hardware-backed root of trust built on credentials that cannot be copied or synced. Protecting TAC with hardware-backed passkeys makes accounts significantly more difficult and costly for threat actors to exploit at scale. By dramatically raising the barrier to entry, this approach disrupts the criminal ecosystem that relies on creating, validating, and reselling compromised accounts for downstream abuse. Securing your ChatGPT account with YubiKeys Moving to hardware-backed protection is a seamless process for TAC members aligning with the new mandate. Through OpenAI’s Advanced Account Security program, security keys provide a higher-assurance environment by deliberately disabling weaker fallback methods. This partnership allows you to replicate the identical security posture that OpenAI uses internally to safeguard its own infrastructure and employees. To facilitate this transition, a custom 2-pack of YubiKeys is available to existing account holders at preferred pricing. YubiKey C NFC - OpenAI: Perfect for the modern mobile workforce. Authenticate instantly with a simple tap against your phone or tablet. YubiKey C Nano - OpenAI: Designed for maximum convenience. Plug it into your laptop's USB-C port and leave it there for effortless, continuous protection. Once enrolled, users experience the gold standard of phishing-resistant security through a fast, entirely passwordless experience. To secure your ChatGPT accounts with YubiKeys today, visit chatgpt.com/advanced-account-security or read the full partnership details here . agentic AI , AI , OpenAI Talk to our team Share this article: Recommended Posts What is Yubico? What is Yubico? Yubico is a pioneer in modern cybersecurity, specializing in secure authentication and digital identity solutions. It is also a co-creator and contributor to the development of the open authentication standards, including FIDO2/WebAuthn/passkeys, and the earlier FIDO Universal 2nd Factor (U2F) protocol. Yubico’s solutions help to secure identities, enabling businesses and consumers to stay […] Read more Works with YubiKey Spotlight: Translating YubiKey logistics into enterprise cyber resilience with EgoMind’s Appterix Deploying hardware-backed, phishing-resistant YubiKeys to employees is a cornerstone of a modern security program. As organizations scale this gold standard of defense, IT teams often encounter the operational challenges inherent in managing large-scale hardware deployments across hundreds and thousands of employees – such as device mapping, inventory tracking and credential lifecycle management. To ensure the […] Read more Google Play Services adds support for NFC-enabled FIDO2 security keys: How Yubico makes Android passkey authentication seamless The continued global efforts behind passkey adoption represents one of the most exciting shifts in digital identity. Google recently took a big step forward by introducing an update to Google Play Services that allows account authentication through NFC security keys that support CTAP2 – including all Android versions starting with Android 9 and later. Google’s […] Read more