OpenAI gives users the options to ditch passwords
A recent wave of cyberattacks has exploited basic security weaknesses — like stolen passwords — to take over user accounts.
TL;DR
- OpenAI introduced 'Advanced Account Security' allowing users to use passkeys or hardware security keys instead of passwords.
- The new security controls aim to protect against cyberattacks that exploit weak passwords.
- The feature is available to all users, including free tier users.
- Users must set up two authentication methods: two hardware keys, two passkeys, or one of each.
- Opting into higher security also opts users out of model training and provides enhanced login alerts and session management.
- Account recovery via email or text message is disabled in this mode, and OpenAI support cannot assist with lockouts.
- Hackers are increasingly targeting AI accounts, with stolen credentials for millions of ChatGPT accounts found circulating online.
- OpenAI is partnering with Yubico to offer discounted hardware security keys.
- Members of OpenAI's Trusted Access for Cyber program will be required to enable this feature starting June 1.