OpenAI's Effort to Secure ChatGPT with Yubico

As AI tools become our constant companions, they have access to a mountain of personal and work-related data.   

Addressing this security concern, Yubico has announced a landmark collaboration with OpenAI that brings hardware-backed security keys directly to ChatGPT users for the first time. 

With this partnership, users can purchase a new two-pack set of customised YubiKeys under OpenAI’s Advanced Account Security programme. 

Security-conscious users, as well as those facing heightened risks from targeted cyber attacks, may very well benefit from the added protection. The bundle includes a YubiKey C NFC for seamless mobile authentication and a compact YubiKey C Nano designed to remain plugged into laptops for daily use. 

Together, they offer a passwordless login experience powered by hardware-backed passkeys – widely regarded as one of the most secure methods of authentication available today.

“We are introducing a new model for phishing-resistant security at scale for the AI ecosystem,” says Jerrod Chong, CEO at Yubico.

“This partnership with OpenAI delivers the highest level of protection against phishing with a low-friction user experience. Ultimately, our intent is to drastically reduce the threat of unauthorised access to sensitive data in OpenAI accounts worldwide.

"We are proud to partner with OpenAI to deliver YubiKeys – the leading security key that offers the strongest way to use passkeys – increasing protection of sensitive user data for the AI frontier."

Bringing enterprise-grade protection 

The ChatGPT maker has already deployed YubiKeys internally to safeguard its workforce and infrastructure from increasingly sophisticated phishing attacks. 

By extending this approach to its user base, the company is effectively democratising enterprise-grade security. 

The move reflects a growing awareness that traditional passwords are no longer sufficient in an era of advanced cyber threats. 

Hardware-backed authentication offers a more resilient defence by requiring physical verification, making it significantly harder for attackers to gain unauthorised access.

“Security keys are one of the best ways to protect accounts from phishing and Yubico has played a leading role in making that protection practical and accessible,” says Dane Stuckey, CISO at OpenAI.

“We’ve made YubiKeys a standard part of how we protect OpenAI employees and with Advanced Account Security, we’re making it easier for ChatGPT users to choose that same kind of phishing-resistant protection when it’s right for them.”

A step forward for AI security and user privacy

This collaboration signals a broader shift towards stronger security standards across the AI ecosystem. 

As public consciousness on AI platform safety rises, these everyday tools that process increasingly sensitive data requiring robust account protection have become critical. 

Combining Yubico’s global reach and proven reliability with OpenAI’s focus on privacy and data security, the initiative aims to accelerate adoption of phishing-resistant authentication worldwide. 

Users who enrol in the programme benefit from a streamlined login experience that removes reliance on passwords while strengthening overall account defence.

The introduction of hardware-backed passkeys for ChatGPT users not only enhances protection but also builds trust in the wider AI landscape.

With a simple yet highly-secure authentication process, Yubico and OpenAI are setting a new benchmark for safeguarding digital identities. 

The collaboration underscores a shared commitment to ensuring that innovation in AI is matched by equally strong advances in security, helping users stay protected in an increasingly complex digital world.