OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members

OpenAI is requiring all Trusted Access for Cyber (TAC) members to use hardware-backed passkeys for ChatGPT account access starting September 1, 2026, to enhance security for researchers accessing advanced AI capabilities. This mandate replaces software-based authentication methods with phishing-resistant hardware security keys, making accounts significantly harder for threat actors to compromise at scale. OpenAI is partnering with Yubico to provide discounted YubiKey hardware authentication devices to facilitate this transition.