OpenAI mandating Yubico hardware keys is actually a big step forward for auth security

[u/EnthusiasmRoutine]

Seeing OpenAI mandate hardware security keys and expand their Yubico partnership is a solid move. FIDO2 authentication eliminates man-in-the-middle phishing completely. App authenticators and SMS codes were always temporary fixes, and phishers bypass them easily now.

Having physical possession of your private key on a token gives you real cryptographic proof of identity. The FIDO2 standard itself is open, and getting everyday users comfortable with hardware tokens builds better security habits. I moved my own systems to physical keys a while back, and it solved a lot of credential headaches.

Are you picking up the discounted OpenAI bundle key set, or are your existing YubiKeys already doing the job?

[u/EnthusiasmRoutine]

Source : https://www.yubico.com/blog/yubico-expands-openai-partnership-to-new-countries-as-hardware-backed-passkey-mandate-begins-for-trusted-access-for-cyber-program/

[u/Toldoven]

I actually wanted to add a hardware key to my OpenAI account like a month ago, and was disappointing that it wasn't an option. Happy to see it's fixed now

The hardware keys are so cool and it's so frustrating to see software providers implement it so slowly. Especially banks, and other financial apps, which you would assume should implement this first