release

Introducing Advanced Account Security

For AI builders, account security directly impacts the integrity of their workflows—a compromised account could expose proprietary models, API keys, or customer data. This update makes it harder for attackers to gain access, reducing operational risk.

OpenAI Blog·April 29, 2026·1 min readrelease

releaseIntroducing Advanced Account Security

openai.com

What happened

OpenAI has announced Advanced Account Security, a set of new protections aimed at reducing account takeover risks. The update introduces phishing-resistant login methods, such as passkeys, alongside stronger account recovery processes and enhanced safeguards for sensitive data. According to OpenAI Blog, these measures are designed to protect users who store proprietary models, API keys, or other critical assets within their OpenAI accounts. For developers and solopreneurs building AI workflows, this update addresses a growing security concern: as AI tools become central to business operations, compromised accounts can lead to data leaks or unauthorized usage. The new features align with industry best practices like FIDO2 authentication, making accounts more resilient against credential theft. While the announcement doesn't specify exact rollout dates, it signals OpenAI's commitment to enterprise-grade security for all users.

Key takeaways

OpenAI introduced Advanced Account Security, including phishing-resistant login (e.g., passkeys) and stronger recovery workflows.
The update aims to prevent account takeover and protect sensitive data used in AI development and deployment.
Enhanced protections include additional verification steps for high-risk actions, according to the OpenAI Blog.
Security measures are based on industry standards like FIDO2 and WebAuthn to reduce reliance on passwords alone.
The feature is expected to benefit developers and solopreneurs who rely on OpenAI's platform for production AI workflows.