OpenAI Mandates Hardware-Backed Passkeys for Cybersecurity Access

OpenAI has announced that starting September 1, 2026, all members of its Trusted Access for Cyber (TAC) program must enable Advanced Account Security using hardware-backed passkeys. This move aims to enhance security against phishing and social engineering attacks, particularly for users accessing advanced AI models. Failure to comply will result in loss of access to these models. The initiative is part of OpenAI's broader strategy to tighten security measures for high-risk entities and jurisdictions. Yubico supports this transition by offering a custom 2-pack of YubiKeys at a preferred price for existing account holders. The new security requirements are designed to raise the barrier for threat actors attempting to exploit accounts. OpenAI emphasizes that traditional software-based controls are insufficient for modern threats.

Key Points: • OpenAI requires hardware-backed passkeys for TAC members starting September 1, 2026. • Failure to comply will result in loss of access to advanced AI models. • Yubico offers a custom 2-pack of YubiKeys to facilitate the transition.