Every YubiKey and Security Key we sell works with ChatGPT, because ChatGPT sign-in uses FIDO2 and all of them do FIDO2. OpenAI's Advanced Account Security will not switch on with fewer than two sign-in methods registered, so the practical order is two keys. For most people that is a pair of Security Key C NFC by Yubico, or a YubiKey 5C NFC with a YubiKey 5C Nano that stays in the laptop.
Who has to use a hardware key, and who can choose to
Since 1 September 2026, individual members of OpenAI's Trusted Access for Cyber programme have needed Advanced Account Security with a hardware-backed passkey to keep access to its most capable cyber models. If that is you, a security key is a condition of the programme.
For everyone else the setting is optional. It is available on personal ChatGPT accounts, and it is worth having if the account holds client material, source code or anything else you would not want read by whoever phishes your password. It is not available on enterprise-managed accounts or accounts on a verified company domain. Those are expected to sign in through the organisation's own identity provider, where the equivalent control is single sign-on with a Conditional Access policy that requires a phishing-resistant method.
What Advanced Account Security asks for
OpenAI's help centre sets the requirement at two or more secure sign-in methods, one of which works across devices. Two hardware keys meet it. So does one key plus a passkey, or two passkeys if one of them syncs. Trusted Access for Cyber members need a hardware-backed passkey among them.
We recommend two keys over a key and a synced passkey. A synced passkey is as safe as the cloud account it syncs through, and the reason to enrol is to stop depending on anything that can be recovered by email. The reasoning is set out in the two-key rule.
Which key to buy
Security Key C NFC or Security Key NFC: all that ChatGPT needs
The Security Key Series does FIDO2 and nothing else, which is the only thing ChatGPT uses. It costs less than the 5 Series, and for an OpenAI account you give up nothing by choosing it. Pick the Security Key C NFC by Yubico for a USB-C port and the Security Key NFC by Yubico for USB-A. Both also tap against a phone over NFC.
YubiKey 5C NFC or 5 NFC: when the key has other jobs
The YubiKey 5 Series adds authenticator codes, smart card and OpenPGP on top of FIDO2. ChatGPT uses none of those extras, so they are worth paying for only if the same key will also protect a password manager, a VPN, SSH or an older service that takes six digit codes. The 5C NFC is the USB-C model and the 5 NFC is the USB-A one.
YubiKey 5C Nano: a key that stays in the laptop
The 5C Nano sits nearly flush in a USB-C port and is meant to be left there. It suits the machine you use ChatGPT on all day, because Advanced Account Security shortens sessions and you will be asked to sign in more often. It has no NFC, so pair it with an NFC key for your phone. OpenAI chose the same combination for its own bundle.
Using the key with a phone
An NFC key taps against the back of an Android handset or an iPhone. A USB-C key also plugs straight into an Android phone or an iPhone 15 or later. A USB-A key without NFC cannot be used with a phone at all, so check the connector before you order. You can start enrolment from the ChatGPT mobile apps, and OpenAI passes you to a web browser to finish it.
OpenAI's own YubiKey bundle
OpenAI and Yubico sell a co-branded pair to existing ChatGPT account holders at what both companies call preferred pricing. The pair is a YubiKey C NFC and a YubiKey C Nano, both USB-C. Yubico said on 2 September 2026 that the offer was being extended to ten more countries, Australia among them. When we checked OpenAI's help page on 11 November 2026 it still listed the order prompt for the US, UK and EEA only, so look for the offer in your own account during enrolment before counting on it.
If the bundle is offered to you and USB-C suits every device you use, it is a sensible buy. OpenAI is clear that it is optional and that any FIDO-compatible key works. Buying from us makes sense when you need USB-A, want more than two keys, need a GST tax invoice for the business, or want the keys posted from Sydney this week.
Before you enrol
Enrolling removes the usual ways back into the account. OpenAI switches off password sign-in, emailed and texted codes, and recovery by email, and its support team cannot switch them back on for you.
OpenAI gives you a set of recovery keys during setup. Each one works once, and using one starts a 48 hour wait before the account unlocks. Keep them somewhere other than the ChatGPT account and the laptop you use it on. A printed copy in a safe works, and so does a password manager that is itself protected by a key.
Decide where the second key lives before you start. It should be somewhere you can reach on a bad day that does not share a fate with the first, which rules out the same bag. Register your backup key covers the storage question, and what happens if you lose your YubiKey covers the day it goes wrong.
Turning it on
These are the steps in OpenAI's help centre as they read on 11 November 2026. OpenAI moves its settings around from time to time, so treat the menu names as a guide.
In ChatGPT, open Settings, then Security, then Advanced Account Security, and select Enroll. Add both keys when you are asked for your sign-in methods: insert or tap each one, touch it, and enter its PIN if prompted. Save the recovery keys and confirm that you have them.
ChatGPT then signs you out on every device. Sign back in with the first key, sign out, and sign in again with the second. That minute of testing confirms both keys are registered to the account you think they are.
What we would buy
For an OpenAI account on its own, buy two of the Security Key C NFC by Yubico if your devices are USB-C, or two of the Security Key NFC by Yubico if they are USB-A. If the keys will also protect other accounts that need more than FIDO2, buy a 5C NFC and add a 5C Nano for the laptop.