OpenAI and Yubico have announced a partnership that brings custom security keys to ChatGPT users through a new Advanced Account Security program. Starting now, users can purchase a specialized 2-pack set of YubiKeys designed specifically for securing their OpenAI accounts against phishing attacks.
The collaboration represents a significant step in securing AI platforms as they become increasingly central to business and personal workflows. With ChatGPT handling sensitive conversations and data for millions of users, the move addresses growing concerns about account security in the AI space.
The custom bundle includes two devices optimized for different use cases. The YubiKey C NFC enables tap-to-authenticate functionality on mobile devices, while the low-profile YubiKey C Nano stays plugged into laptop ports for everyday use. Both keys support modern authentication standards and provide what the companies call “the strongest hardware-backed passkeys” available today.
This partnership matters because it signals a broader industry shift toward treating AI platforms with the same security rigor as traditional enterprise systems. OpenAI already uses YubiKeys internally to protect their employees and infrastructure, and they’re now extending that same level of protection to their user base.
The timing is particularly relevant as cyberattacks targeting AI users have increased. Security researchers have documented rising attempts to compromise AI accounts, often seeking access to conversation histories, custom GPT models, or organizational data stored within these platforms. Hardware security keys like YubiKeys are considered one of the most effective defenses against these attacks because they’re nearly impossible to phish or duplicate.
“We are introducing a new model for phishing-resistant security at scale for the AI ecosystem,” said Jerrod Chong, Yubico’s CEO. The partnership aims to “drastically reduce the threat of unauthorized access to sensitive data in OpenAI accounts worldwide.”
Dane Stuckey, OpenAI’s chief information security officer, emphasized the practical benefits: “Security keys are one of the best ways to protect accounts from phishing, and Yubico has played a leading role in making that protection practical and accessible.”
The security keys work by requiring physical presence during login, making remote attacks nearly impossible even if passwords are compromised. Users simply plug in or tap their YubiKey when prompted, creating a fast, passwordless experience that’s more secure than traditional two-factor authentication methods.
The collaboration also reflects broader industry trends around “zero trust” security models, where every login attempt is verified regardless of the user’s location or device. As AI tools become more integrated into business workflows, companies are demanding stronger security controls for these platforms.
For existing OpenAI users, the custom YubiKeys are available at exclusive pricing through the Advanced Account Security program. The partnership represents what both companies describe as an “industry-first” approach to securing AI platforms at scale.
This move could influence other AI companies to offer similar security options. As competition intensifies in the AI space, robust security features may become a key differentiator for platforms handling sensitive data or serving enterprise customers.
