OpenAI Enhances ChatGPT: Advanced Security, Sacrificed Simplicity

⚡

Key Takeaways

1OpenAI launches Advanced Account Security to protect ChatGPT accounts with enhanced measures.

2Passwords are being replaced with passkeys or physical security keys for better protection.

3OpenAI partners with Yubico to offer discounted security keys, strengthening defenses against phishing.

💡Why it matters — This initiative aims to protect sensitive users but complicates access in case of lost security keys.

OpenAI Introduces Advanced Account Security

OpenAI has recently announced the launch of Advanced Account Security, a series of optional security measures designed to enhance the protection of ChatGPT accounts. This new feature is now available globally.

A Set of Enhanced Measures

The Advanced Account Security program offers several security options grouped within the account settings. Once activated, this protection also applies to Codex accounts using the same login credentials. OpenAI emphasizes that ChatGPT accounts may contain sensitive personal and professional information, making them a target for cyberattacks, particularly from groups such as journalists, elected officials, political dissidents, and researchers.

Concrete Changes with Advanced Security

Activating this advanced security leads to several modifications:

Password login is replaced by passkeys or compatible FIDO security keys.
Account recovery via email or SMS is disabled, replaced by more robust methods such as backup passkeys and recovery keys.
Login sessions are shortened to reduce risk in case of compromise.
Login alerts and management of active sessions across all devices are implemented.
Conversations are automatically excluded from model training.

Partnership with Yubico

OpenAI has partnered with Yubico to facilitate access to physical key authentication, one of the most effective defenses against phishing. Users can benefit from a discounted rate on a set of two keys: the YubiKey C Nano, which can remain plugged into a computer at all times, and the YubiKey C NFC, suitable for mobile use. However, any FIDO-compatible security key can be used.

Security vs. Simplicity

OpenAI acknowledges that this advanced security prioritizes protection at the expense of simplicity. In the event of losing the keys or recovery methods, OpenAI support will not be able to restore access.

Activation Procedure

To activate this advanced security, users must go to their ChatGPT account settings on the web:

Click on the profile icon, then go to Settings > Security.
In the Advanced Account Security section, click on Integrate.
Click on Activate (a confirmation code is sent via email).
Configure the login methods: choose between a passkey or a physical security key.
Save the recovery keys.
Complete the registration.

Activation will log the user out of all devices, requiring a reconnection with the new authentication method to access the account again.