In summary
- OpenAI now mandates hardware-backed passkeys for all Trusted Access for Cyber program members, disabling weaker methods like SMS one-time passwords and push notifications.
- Yubico has expanded its OpenAI + YubiKey two-pack bundle to ten additional countries, including Australia, Japan, Mexico and the United Arab Emirates.
- The bundle offers two custom-branded keys, the YubiKey C NFC and YubiKey C Nano, with existing OpenAI account holders able to access preferred pricing.
Yubico has expanded its partnership with OpenAI into Australia and nine other countries as OpenAI begins mandating hardware-backed passkeys for members of its Trusted Access for Cyber program.
OpenAI's Advanced Account Security program went live earlier this year, requiring hardware-backed passkeys for all Trusted Access for Cyber members.
Under the program, enrolling a security key disables weaker, phishable authentication methods - including SMS one-time passwords and push notifications - to create what Yubico describes as a higher-assurance account environment.
Alongside the mandate, Yubico has made its custom two-pack OpenAI + YubiKey bundle available in ten additional countries: Australia, Egypt, Japan, Malaysia, Mexico, Saudi Arabia, Singapore, South Korea, Taiwan and the United Arab Emirates.
The bundle includes two custom-branded YubiKey models: the YubiKey C NFC - OpenAI, designed for tap-to-authenticate use across mobile devices, tablets and computers; and the YubiKey C Nano - OpenAI, a low-profile key intended to remain in a laptop's USB-C port for ongoing authentication.
Existing OpenAI account holders can access the bundle at preferred pricing through the partnership.
Yubico said hardware-backed security keys provide a phishing-resistant root of trust using credentials that cannot be copied or silently synced between devices, helping disrupt attacks that rely on credential theft and account takeover.
The technology can also be used to strengthen protection for consumer ChatGPT and Codex accounts, the company added.
Traditional multi-factor authentication methods, including SMS one-time passwords and push notifications, can be intercepted or bypassed by techniques such as Adversary-in-the-Middle attacks, according to Yubico.
"Trusted use of AI depends not only on model safety but also on strong identity and authenticator assurance," the company said, citing the growing use of AI platforms for sensitive research, software development and business workflows as a driver of the expansion.
