High-Risk Model Access to Require Hardware Keys
cryps1s · x · 2026-07-11
Starting September 1, individual members of Trusted Access for Cyber must enable Advanced Account Security (AAS) and use hardware security keys to retain their access. Those who fail to do so will revert to default access but can re-register later to regain their privileges.
The post stresses that hardware security keys are a strong defense against phishing and account takeovers. AAS will support primary, certified FIDO2 keys and is also exploring hardware-based, non-exportable passkeys; however, exportable software passkeys are not supported. Users can bring their own hardware keys or purchase YubiKeys through official channels at a discounted rate.
More from Safety
- ESR on the Bugpocalypse: locking down frontier models only hands the game to Chinese open weights — colinmcnamara · 2026-10-26
- OpenCode breach exposed AI API keys of 1.4% of Console users — thione · 2026-10-26
- DHS orders DeepSeek products removed from US civilian agency systems — thione · 2026-10-26
- One hacker breached 100+ company websites using AI, scope unknown — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26