OpenAI's latest GPT-5.6 models will require hardware-backed passkeys from Yubico starting September 2026. This move aims to enhance security and is a validation for Yubico's technology.
TL;DR
- OpenAI's GPT-5.6 models now require hardware-backed passkeys for access, with a deadline of September 2026.
- Yubico's CEO sees this as a validation of their product as the best defence against account takeover.
- GPT-5.6 Sol shows significant improvements in cybersecurity benchmarks, with performance gains across ExploitBench, ExploitGym, and SEC-Bench Pro.
What happened
OpenAI has announced that individual members of its Trusted Access for Cyber (TAC) programme must adopt hardware-backed passkeys to maintain access to its most advanced models, including the newly released GPT-5.6 family. The deadline for this requirement is September 2026. Users who do not comply will lose access to frontier models and revert to default access levels.
The GPT-5.6 family, particularly the flagship model GPT-5.6 Sol, offers significant performance gains in cybersecurity benchmarks. According to OpenAI, GPT-5.6 Sol achieves 73.5% on ExploitBench, compared to 47.9% for GPT-5.5. It also shows improvements on ExploitGym (24.9% vs. 15.1%) and SEC-Bench Pro (71.2% vs. 45.8%).
OpenAI has partnered with Yubico to provide hardware-backed security keys. Yubico's CEO, Jerrod Chong, views this as a strategic and commercial validation for their product, stating that hardware-backed passkeys are the best defence against account takeover.
Why it matters
This move by OpenAI underscores the importance of robust security measures in the AI industry. By mandating hardware-backed passkeys, OpenAI is setting a higher standard for access control, which could influence other companies to adopt similar measures.
For developers and startups, this requirement highlights the need for secure authentication methods to protect advanced AI capabilities. It also presents an opportunity for Yubico to expand its market presence, as OpenAI offers preferred pricing for Yubico security keys.
Investors may see this as a positive development for Yubico, as the partnership with OpenAI validates their technology and could drive adoption. However, the long-term impact on Yubico's stock and market position remains to be seen.
Key facts
- OpenAI's GPT-5.6 models require hardware-backed passkeys for access, with a deadline of September 2026.
- GPT-5.6 Sol achieves 73.5% on ExploitBench, a significant improvement from GPT-5.5's 47.9%.
- Performance on ExploitGym increased from 15.1% to 24.9%, and on SEC-Bench Pro from 45.8% to 71.2%.
- Yubico provides hardware-backed security keys for OpenAI users, with preferred pricing offered by OpenAI.
- Yubico already secures OpenAI employees and infrastructure with YubiKeys.
- Hardware-backed passkeys are considered more resistant to phishing attacks than software-based alternatives.
- OpenAI is implementing additional restrictions for high-risk entities and jurisdictions.
- Jerrod Chong, CEO of Yubico, sees this as a validation of their product and a deepening of their partnership with OpenAI.
Context
OpenAI's decision to mandate hardware-backed passkeys is part of a broader trend in the tech industry towards enhanced security measures. As AI capabilities advance, the need to protect these technologies from unauthorized access becomes increasingly important.
Yubico's involvement in this partnership is a significant development for the company. It not only validates their technology but also positions them as a key player in the AI security space. This could open up new opportunities for Yubico in the AI and cybersecurity markets.
The release of GPT-5.6 Sol and the associated security measures highlight OpenAI's commitment to pushing the boundaries of AI capabilities while ensuring the security and responsible use of these technologies.
