Surprisingly Useful AI Article Enhancements
OpenAI has partnered with hardware authentication company Yubico to offer ChatGPT users a custom two-pack set of YubiKey security keys, extending the same phishing-resistant account protection the company already uses internally to secure its own employees.
The keys are available to existing OpenAI account holders as part of the company’s Advanced Account Security program. The set includes a YubiKey C NFC for tap-to-authenticate on mobile devices and a low-profile YubiKey C Nano designed to stay in a laptop USB-C port for everyday use.
Both keys support hardware-backed passkeys, allowing users to log in to their ChatGPT accounts without passwords while providing protection against phishing attacks and account takeovers.
From internal use to consumer offering
OpenAI already deploys YubiKeys across its workforce. The new program extends that approach to its user base, targeting security-conscious individuals who may be at increased risk of targeted digital attacks.
Dane Stuckey, Chief Information Security Officer at OpenAI, framed the initiative as making an existing internal practice available externally.
“Security keys are one of the best ways to protect accounts from phishing, and Yubico has played a leading role in making that protection practical and accessible,” Stuckey stated. “We’ve made YubiKeys a standard part of how we protect OpenAI employees, and with Advanced Account Security, we’re making it easier for ChatGPT users to choose that same kind of phishing-resistant protection when it’s right for them.”
How the keys work
The YubiKey C NFC supports near-field communication, allowing users to authenticate by tapping the key against a compatible mobile device. The YubiKey C Nano is a smaller form factor that plugs into a USB-C port and can remain inserted during regular use on a laptop.
Once enrolled, users authenticate through a passwordless experience backed by hardware security rather than software-based methods such as SMS codes or authenticator apps, which remain vulnerable to phishing and SIM-swapping attacks.
Yubico’s perspective
Jerrod Chong, Chief Executive Officer of Yubico, described the partnership as a new model for scaling phishing-resistant security across the AI ecosystem.
“This partnership with OpenAI delivers the highest level of protection against phishing with a low-friction user experience,” Chong explained. “Ultimately, our intent is to drastically reduce the threat of unauthorised access to sensitive data in OpenAI accounts worldwide.”
Yubico co-created the FIDO2, WebAuthn and FIDO U2F authentication standards and introduced the original passkey. The company’s hardware keys are used across more than 160 countries.
Pricing and availability
The custom YubiKey two-pack is available at exclusive pricing for existing OpenAI account holders. Further details are available on the Yubico website.
Last Updated on May 1, 2026 by Nick Ross
