Yubico Partners with OpenAI to Support Passkey Mandate for its Trusted Access for Cyber (TAC) Program Users

Key Terms

phishing-resistant authentication technical

A way of verifying a user’s identity that cannot be tricked by fake emails, websites or copied passwords—think of a lock that only opens with a uniquely shaped key rather than a code you could be persuaded to share. Investors care because it lowers the risk that hackers will steal customer data, drain accounts, or cause costly outages and reputation damage, which can protect revenue and reduce the chance of unexpected losses.

passkeys technical

A passkey is a modern digital login method that replaces passwords with a pair of cryptographic keys stored on a user’s device and backed by biometric checks (like fingerprints or face unlock) or a device PIN. Think of it as a unique physical key kept in your phone’s secure vault that opens only the right account; it greatly cuts the risk of account hacks, reduces help‑desk and fraud costs, and can boost customer trust and retention—factors that affect a company’s security expenses and revenue stability.

hardware-backed passkeys technical

Hardware-backed passkeys are digital login credentials stored and processed on a separate physical component (for example, a phone’s secure chip or a USB security key) that verify identity without using traditional passwords. For investors, they matter because they sharply reduce the chance of account takeover and costly breaches, boosting customer trust and potentially increasing the value of companies that adopt or produce stronger, more reliable authentication—like replacing flimsy keys with a tamper-resistant lock.

zero-knowledge recovery technical

A way to regain access to a digital account or assets without revealing passwords, private keys, or other sensitive details. It uses cryptographic checks that prove you are entitled to recovery—like showing you can open a safe without giving away the combination—so custodians or services can restore access while keeping secrets private. For investors, this reduces the risk of theft or accidental exposure while preserving privacy and trust in digital-asset platforms.

enterprise attestation technical

Enterprise attestation is a formal, written statement from a company's leadership that its systems, controls, or reports meet specific legal, contractual or industry standards—like a business issuing a signed certificate that its house is in order. For investors it matters because such attestations increase confidence in the accuracy of financials, compliance posture and operational controls; a weak or withdrawn attestation can signal higher regulatory, legal or operational risk that may affect valuation.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Passkeys anchor the transition to phishing-resistant authentication, empowering cyber defenders and Codex developers to secure the most powerful AI models and codebases

STOCKHOLM & SANTA CLARA, Calif.--(BUSINESS WIRE)-- Regulatory News:

Yubico (Nasdaq Stockholm: YUBICO), the pioneer of phishing-resistant security keys and creator of the YubiKey, the strongest form of hardware-backed passkeys, today announced its significant role in securing the AI frontier as OpenAI mandates the use of passkeys for individuals that are part of their Trusted Access for Cyber (TAC) program.

As a leading global AI research and development company, OpenAI is setting a precedent for empowering its users to take control of their own security posture with more secure authentication options. Starting June 1, 2026, individuals in TAC with access to OpenAI’s most powerful and permissive AI models will be required to enable Advanced Account Security (AAS). This mandate signals a new industry precedent: when working with agents, sensitive codebases, and powerful cybersecurity capabilities in frontier models, proven security protection like hardware-backed passkeys are no longer optional – they are the essential circuit breaker for the AI frontier.

“We are in an era where AI can analyze vulnerabilities and act on our behalf. In that world, the only thing more powerful than the AI itself is the identity of the person controlling it,” said Albert Biketi, chief product and technology officer, Yubico. “OpenAI’s mandate is a pivotal moment, moving the industry away from 'probabilistic' security – where we hope a password is strong enough – to a cryptographic certainty that only hardware can provide. Yubico applauds OpenAI’s ‘security by default’ approach by enforcing rigorous security through passkeys, such as a hardware security key, for users who need it most.”

Hardware-Backed AI Security Matters: How Yubico Anchors OpenAI’s TAC Program

As AI evolves into autonomous agents like Codex, developer accounts become high-consequence control points. A breach now means unauthorized code access and environment manipulation. OpenAI’s new mandate allows users to modernize their security posture through:

• A Higher Level of Protection for TAC: Utilizing passkeys, including hardware-backed passkeys like YubiKeys, provide the phishing-resistant, hardware-backed protection required for the AAS program.
• Enterprise Attestation: Organizations can meet OpenAI’s standards by integrating Yubico’s phishing-resistant authentication into their SSO workflows.
• Zero-Knowledge Recovery: With OpenAI removing manual account resets, Yubico’s "Primary and Backup" bundles ensure users maintain mission-critical access.
• Verifying Human Intent: The physical "tap" of a YubiKey acts as a vital circuit breaker, ensuring high-consequence AI actions are authorized by a verified human.

This mandate builds on the Yubico and OpenAI partnership to deliver hardware-backed security to the builders of the AI future. For more information on how Yubico secures AI workflows and to access custom OpenAI YubiKey bundles, visit Yubico’s OpenAI solutions page.

About Yubico

Yubico (Nasdaq Stockholm: YUBICO) is a modern cybersecurity company on a mission to make the digital world safer for everyone. As the inventor of the YubiKey, we set the gold standard for modern phishing-resistant, hardware-backed authentication, stopping account takeovers and making secure login simple.

Since 2007, we’ve helped shape global authentication standards, co-created FIDO2, WebAuthn, and FIDO U2F, and introduced the original passkey. Today, our passkey technology secures people and organizations in over 160 countries—transforming how digital identity is protected from onboarding to account recovery.

Trusted by the world’s most security-conscious brands, governments, and institutions, YubiKeys work out of the box with hundreds of apps and services, delivering fast, passwordless access without friction or compromise.

We believe strong security should never be out of reach. Through our philanthropic initiative, Secure it Forward, we donate YubiKeys to nonprofits supporting at-risk communities.

Headquartered in Stockholm, Sweden; Santa Clara, California; and Singapore, Yubico is proud to be recognized as one of TIME’s 100 Most Influential Companies and Fast Company’s Most Innovative Companies. Learn more at www.yubico.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260601642349/en/

For media inquiries:

Yubico Communications Team
press@yubico.com

Source: Yubico