- Yubico launches two-pack of Yubikeys to protect your ChatGPT account
- One plugs in to your PC via USB-C, the other authenticates your smartphone via NFC
- OpenAI has been using them internally to protect company workers' accounts
OpenAI has announced an important new partnership with Yubico to help protect ChatGPT users from potential break-ins with the launch of custom YubiKeys.
As part of OpenAI's Advanced Account Security program, users can buy a two-key bundle to protect their accounts by requiring both keys to be present before they can log in.
For PC users, the YubiKey C Nano stays plugged into laptops and desktops to verify the user's presence, while a separate YubiKey C NFC can be tapped against a smartphone to verify the login on mobile devices.
You can now protect your ChatGPT account with a physical YubiKey
"A physical security key adds an extra layer of defense and helps protect your account even if your password is exposed," OpenAI summarized, noting that users can use any FIDO-compliant security key.
By using hardware-backed passkeys, users get access to what's deemed the 'gold standard' for authentication that's resistant to phishing attacks. While a physical key may be required, it does mean that users can get away with a passwordless login for easier and quicker access.
"Ultimately, our intent is to drastically reduce the threat of unauthorised access to sensitive data in OpenAI accounts worldwide," Yubico CEO Jerrod Chong wrote.
OpenAI CISO Dane Stuckey noted that the company has already been using Yubico physical keys internally to protect workers' accounts: "We’ve made YubiKeys a standard part of how we protect OpenAI employees, and with Advanced Account Security, we’re making it easier for ChatGPT users to choose that same kind of phishing-resistant protection when it’s right for them."
The ChatGPT maker did stress that physical keys prioritize security above all else, thus recovery options become more limited in the event of a lockout.
Yubico says it's launched the two-pack with exclusive pricing for existing OpenAI account holders – we're working to find out what this is.
