OpenAI partners with Yubico to secure ChatGPT accounts

On Thursday, OpenAI launched Advanced Account Security (AAS), a set of opt-in protections for ChatGPT users. As part of the launch, digital security provider Yubico partnered with OpenAI to link two new security key products to ChatGPT accounts. Security keys are hardware devices for multi-factor authentication. These physical keys connect to a computer’s USB ports, utilizing a unique cryptographic identifier stored on the device to ensure only the physical holder can access the account. The two companies are releasing a pair of co-branded YubiKeys—the YubiKey C NFC and the YubiKey C Nano—to protect users from the threat of “phishing,” which is considered to be a growing threat for chatbot users.

OpenAI has suggested that AAS is a good fit for political dissidents, journalists, researchers, and elected officials—individuals who engage in “politically charged and risky work.” While the program is available to any user, it might also make sense for enterprise users whose corporate secrets are stored within ChatGPT sessions. However, the high-security setup comes with a strict tradeoff: if the security key is lost, OpenAI will not be able to help recover access to the account. In practice, this means a user’s conversations could be lost for good.

The threat of phished ChatGPT accounts may seem somewhat abstract to some, but there is a growing body of literature showing that bad actors are increasingly targeting chatbot users. Cybercriminals are always on the lookout for “extortion-worthy information,” and given the intimate nature of most chatbot conversations, there is plenty of fodder when it comes to both enterprise and personal-level users. “Ultimately, our intent is to drastically reduce the threat of unauthorized access to sensitive data in OpenAI accounts worldwide,” said Yubico CEO Jerrod Chong. The partnership comes amid a broader industry focus on digital defense. For example, competitor Anthropic recently launched a cybersecurity model called Mythos, while OpenAI has also made a number of announcements related to digital security.

Why it matters

OpenAI’s move to integrate hardware security keys reflects a broader industry shift toward hardening AI platforms against sophisticated threats, particularly for users handling sensitive data.