Secure accounts with Advanced Account Security

## What changed OpenAI rolled out Advanced Account Security on April 30, 2026 as an optional setting for personal ChatGPT accounts. The feature requires passkeys or physical security keys for sign-in and disables password login, email or SMS codes, and email-based recovery.

It adds recovery keys, shorter session times, login notifications, and session controls. Users must keep their recovery keys and enrolled keys safe, since losing all access methods can permanently lock them out of the account.

## Why it matters This change raises the bar for account protection at a time when many builders store prompts, files, and connected data inside ChatGPT. It directly reduces easy takeover paths that still work on most consumer accounts.

The trade-off is clear: stronger security means fewer recovery options if something goes wrong. Solo operators who rely on quick resets or shared devices will feel the friction first.

## How to use it Go to ChatGPT settings on web, find the Advanced Account Security toggle, and enable it. Set up a passkey or compatible hardware key during the process and immediately save the provided recovery keys.

The setting is available only for personal accounts, not Business, Enterprise, or Edu workspaces. Test sign-in from your usual devices before relying on it for daily work.

## Watch for Confirm the bet if OpenAI adds recovery options that still avoid SMS while remaining usable. The feature breaks if too many users lose access and complain loudly. Expect similar controls to appear in the Business plan next.