OpenAI introduces Advanced Account Security

OpenAI is introducing Advanced Account Security, a new opt-in setting for ChatGPT accounts, designed for people at increased risk of digital attacks, as well as for those who want the strongest account protections available. The company believes it brings together a set of heightened security measures that help safeguard against account takeover while making those protections easier to activate in one place. Once enrolled, Advanced Account Security protects users in Codex as well. an increased responsibility for account recovery. Advanced Account Security requires passkeys or physical security keys while disabling password-based login, helping make phishing-resistant sign-in the default for people who need it most. If a user’s email account or phone number is compromised, an attacker may try to use one of them to gain access to their ChatGPT account via e-mail or SMS based recovery. To reduce this risk, Advanced Account Security disables email and SMS recovery and requires stronger recovery methods: backup passkeys, security keys, and recovery keys. Sign-in sessions are shortened to reduce the window of exposure if a device or active session is compromised. People working with especially sensitive information may opt not to have those conversations used for model training. “Using physical security keys, such as YubiKeys, is one of the strongest defenses against phishing. To make that level of protection easier to access, we have partnered with Yubico, a leader in hardware-based authentication and account protection, to offer our users preferred pricing on a customized bundle of best in class security keys. The YubiKey C Nano is designed to stay in your laptop for simple, low-friction daily authentication, and the YubiKey C NFC for backup, and use across laptops and mobile devices,” OpenAI added. Publicly traded companies in the space include Check Point (CHKP), CrowdStrike (CRWD), CyberArk (CYBR), F5 (FFIV), Fortinet (FTNT), Gen Digital (GEN), Okta (OKTA), Palo Alto Networks (PANW) and Qualys (QLYS).