OpenAI now requires hardware-backed passkeys for members of its Trusted Access for Cyber (TAC) program using GPT‑5.6. Members who skip the passkey setup by September 1st lose access to advanced cyber-focused AI models. The move reflects a shift across AI companies towards stronger account protection, as most advanced models may pose greater risks if accessed by unauthorized users. OpenAI’s partner in this initiative is Yubico, a cybersecurity company that designs hardware authentication devices called YubiKeys. Yubico CEO Jerrod Chong stated that “true security requires a phishing-resistant, hardware-backed root of trust built on credentials that cannot be copied or synced,” noting that traditional protections such as SMS codes and mobile push notifications can be intercepted, redirected, or manipulated.