How to Use Passkeys to Secure Your OpenAI Account

You can secure your OpenAI account with a passkey by signing in to ChatGPT on the web, going to Settings > Security, and selecting Add passkey under Passkeys. After that, you can sign in with Face ID, Touch ID, your device PIN or a hardware security key instead of typing a password. Passkeys are much harder to steal or phish than passwords.

What Are Passkeys?

A passkey is a digital sign-in key saved on your phone, computer, password manager or a physical security key. Instead of remembering a password, you confirm it is you with your fingerprint, face, screen lock PIN or a touch on a hardware key.

Why Passkeys Are Safer Than Passwords

• They cannot be phished: a passkey only works on the real OpenAI website, so fake login pages cannot steal it.
• Nothing to leak: there is no password that can be exposed in a data breach or reused on other sites.
• Faster sign-in: one fingerprint or face scan replaces typing a password and waiting for a code.

How to Add a Passkey to Your OpenAI Account

1. Sign in to ChatGPT on the web.
2. Click your profile icon and open Settings.
3. Go to the Security section.
4. Under Passkeys, select Add passkey.
5. Follow the prompt on your device to save the passkey with Face ID, Touch ID, your PIN or a security key.

You can add more than one passkey, for example one on your phone and one on your laptop. Hardware keys such as YubiKey are also supported.

Important Points Before You Set It Up

• Passkeys are not available for accounts that do not have an email address.
• Availability can depend on how your account was created and the sign-in method you use.
• If a passkey is saved on only one device and you lose that device, you may not be able to use it. A synced passkey, such as one stored in iCloud Keychain or Google Password Manager, is safer.
• For work accounts managed through single sign-on (SSO), you still sign in through your organisation, and the passkey works as the extra verification step.

How to Sign In With a Passkey

Once a passkey is set up, it becomes the default sign-in method after you enter your email address. Approve the prompt on your device and you are signed in. If you want to use your password instead, or your passkey is not available, select Try another method.

On some devices, you can also sign in on a computer that does not have your passkey by scanning a QR code with your phone.

How to Manage or Remove Passkeys

Go to Settings > Security > Passkeys to see your saved passkeys. From here you can add a new passkey or remove one you no longer use, such as a passkey saved on an old phone.

Turn On Advanced Account Security for Extra Protection

OpenAI also offers an optional Advanced Account Security setting for personal ChatGPT accounts. When it is on, passkeys and security keys become your only sign-in methods, and password, email code and SMS code sign-in are switched off.

1. Go to Settings > Security > Advanced Account Security.
2. Select Enroll, then Continue.
3. Add at least two secure sign-in methods, including one that works across devices.
4. Save your recovery keys in a safe place and confirm.
5. Sign back in with your passkey or security key.

Keep your recovery keys safe. If you lose both your sign-in methods and your recovery keys, OpenAI support may not be able to restore access. If you ever get locked out for other reasons, our guide on how to fix a deactivated ChatGPT account can help.

Extra Tips to Keep Your OpenAI Account Safe

• Keep a strong, unique password as a backup; see how to change your ChatGPT password. See our strong password ideas for help.
• Never share your OpenAI API keys in code, screenshots or public repositories.
• Delete API keys you no longer use from the OpenAI platform dashboard.
• Sign out of shared or public computers after using ChatGPT.

Developers can also enable ChatGPT Developer mode to connect MCP apps.

Frequently Asked Questions

Where do I add a passkey in ChatGPT?

Sign in to ChatGPT on the web and go to Settings > Security. Under Passkeys, select Add passkey and follow the on-screen steps.

Can I still use my password after adding a passkey?

Yes, unless you turn on Advanced Account Security. On the sign-in screen, select Try another method to use your password instead.

What happens if I lose the device with my passkey?

If the passkey was synced, you can use it on your other devices. If it was saved on only one device, sign in with another method and add a new passkey. Adding at least two passkeys avoids this problem.

Final Takeaway

Passkeys are one of the easiest ways to protect your OpenAI and ChatGPT account from phishing and password theft. Add at least two passkeys, keep a backup sign-in method, and consider Advanced Account Security for the strongest protection.