Enable Advanced Account Security for Personal Accounts

## What changed On April 30, 2026 OpenAI started rolling out Advanced Account Security as an optional toggle for personal ChatGPT accounts. The setting requires passkeys or compatible security keys for sign-in and disables password login, email or SMS recovery codes, and email-based account recovery. It also adds recovery keys, shorter session times, login notifications, and session management tools.

The feature targets account takeover risks and data exposure on consumer plans. It is not available for Business, Enterprise, or Edu workspaces at launch.

## Why it matters Solo builders who keep project files, automation logs, or client context in ChatGPT now have a direct lever to reduce unauthorized access. The change treats personal accounts as production assets rather than throwaway chat spaces. It pressures users to weigh daily friction against the cost of a compromised thread history or connected data.

OpenAI is betting that serious users will accept stricter recovery in exchange for fewer silent breaches. Casual users may simply ignore the toggle and stay exposed.

## How to use it Open ChatGPT on the web and go to Settings. Find the Advanced Account Security section and turn the toggle on. Immediately save the recovery keys shown on screen and register a passkey or security key before logging out. Test the new sign-in flow from another device to confirm access.

The option appears only for personal accounts in supported regions. Storage management and file library features remain unchanged after enabling the setting.

## Watch for Widespread adoption among users who store files or run long-running Codex sessions will confirm the security bet. Mass lockouts from lost passkeys or recovery keys will break it. The next logical step is extension of the same controls to team workspaces.