Implement Passkey Authentication for ChatGPT

ChatGPT Feature requests
1

I am requesting the implementation of passkey authentication for logging into ChatGPT. The goal is to enhance security and simplify the user experience by replacing the current method of passwords and OTPs with a passkey-only system.

Feature Request: Passkey Authentication

Description: Integrate passkey authentication into the ChatGPT login process, allowing users to log in using a secure passkey. This should replace the need for both a password and OTP, aligning with the FIDO2 standard.

Key Points:

  1. Passkey-Only Login: The system should allow users to log in using only a passkey, without requiring a password or OTP.
  2. Security and Convenience: Passkeys offer enhanced security through public-key cryptography and provide a more user-friendly login experience.

Benefits:

  1. Enhanced Security: Passkeys reduce risks associated with phishing, man-in-the-middle attacks, and credential stuffing.
  2. User Convenience: Logging in with a passkey is quicker and easier, using biometric authentication or a hardware security key.
  3. Future-Proofing: Adopting passkeys ensures alignment with modern authentication standards and industry trends.
  4. Reduced Support Overhead: Fewer password reset and OTP issues reduce the support burden.

Implementing passkey authentication will improve both security and usability for ChatGPT users.

27 Likes
2

Thank you for requesting this! Passkeys are now live as a first-class auth method and we now support passwordless sign-in with passkeys on supported browsers and platforms.

Read more here: https://help.openai.com/en/articles/20001039-passkeys-to-secure-your-openai-account

2 Likes
3

@vc-openai, help.openai.com/en/articles/20001039-passkeys-to-secure-your-openai-account#how-to-enable-passkeys states:

  1. Sign in to your OpenAI account via website.

  2. Open ChatGPT Security Settings.

  3. Find the Passkeys section.

However, I don’t see any such option at chatgpt.com/#settings/Security’s //*[@id="radix-_r_l5_-content-Security"], for beedellrokejulianlockhart@gmail.com: [1]

680×600 51.1 KB

…although I do, for xjyb44gn@rokejulianlockhart.addy.io: [1:1]

680×600 51.8 KB

  1. t/494091/19 ↩︎ ↩︎

1 Like
4

Hi, great question! From this section of the doc, it seems like Passkeys aren't 100% rolled out. I don't see any particular flags on either of your accounts, so we may just need to wait for the Passkey gates to fully open.

2 Likes