OpenAI Launches Advanced Account Security for ChatGPT

OpenAI launched an optional security upgrade called Advanced Account Security on Thursday for users of its ChatGPT and Codex platforms, replacing traditional passwords with passkeys or physical security keys to thwart phishing attacks and unauthorized access.

The feature, available through web account settings, requires users to register at least two authentication methods, such as passkeys stored on devices or FIDO-compliant hardware keys. Password logins are permanently disabled once enabled, and common recovery options like email or SMS codes are eliminated. Instead, recovery relies solely on backup passkeys, security keys, or a one-time recovery key issued during setup. OpenAI's support team cannot assist with regaining access, a deliberate design to prevent social engineering attacks on help channels.

"People are turning to AI for deeply personal questions and increasingly high-stakes work," the company stated in a blog post. "Over time, a ChatGPT account can hold sensitive personal and professional context, and sit at the center of connected tools and workflows. For some people, like journalists, elected officials, political dissidents, researchers, and those who are...