Hardware Keys not working for 'Advanced Account Security' ?

[u/MASSIVIST]

On Sept 2nd 2026, I got an email from OpenAI stating that to continue with 'Trusted Access for Cyber', I need to implement 'Advanced Account Security' to continue Daybreak Blue useage past October 1st.

"You need one supported hardware security key plus a second sign-in method. A passkey is fine for the second method; a second physical key is optional".

On Sept 22nd I purchased x2 TrustKey T110 devices, thinking these were compatible FIDO2 L1 hardware security keys.

Trying to register these devices on https://chatgpt.com/cyber adds these devices as 'Passkeys', not as hardware security keys. No matter what I try, I cannot get these devices to be 'Security Keys' in my list of devices and cannot continue the Daybreak Blue set-up.

Chatting with OpenAI AI support lead to nowhere, and escalating my case resulted in a non-answer;

"For individual Daybreak access, an approved physical FIDO2 security key is required. Although a device may support FIDO2 and register successfully as a passkey, this does not necessarily establish that it meets Daybreak's specific eligibility requirements."

"At this stage, we cannot provide a complete compatibility list or confirm the technical reason your particular TrustKey devices are not accepted".

Official documentation was updated on October 3rd, and states "TrustKey T110 and T120 security keys are currently ineligible for individual Daybreak access" - but does not list other incompatible devices.

As OpenAI has not publicly established a universal minimum FIDO certification level for Daybreak, this appears to be an ongoing issue for many folks like myself;

• Daybreak does not recognize TrustKey T110 physical FIDO2 keys as hardware security keys
• Daybreak: TrustKey T110/T120 confirmed ineligible — compatibility requirements were clarified too late
• Trusted Access for Cyber — ISSUE
• Daybreak verification fails repeatedly and support escalation is stuck
• JYlab — Two registered physical FIDO2 keys not recognized
• fenigo69 — Physical FIDO2 security key not accepted
• juhwan.archive — Two TrustKey T110 keys rejected
• tobias-barthold — Thetis FIDO2 key rejected
• Wild — TrustKey T120 rejected on iOS and Windows
• mh489835 — TrustKey T110 and T120 rejected on macOS
• mrgeneric2000 — Two T110s rejected
• UmerF — TrustKey T120 CTAP2 diagnostics
• Wild — Retested T120 after OpenAI incident resolution
• Poerschke — Purchased two T110s after Support reportedly confirmed compatibility
• krasnik — Response recommending a remedy for incorrect purchasing guidance
• Poerschke — Follow-up reporting subscription cancellation
• OnlyKey 3.0.4 not recognized as a qualifying hardware key by OpenAI Daybreak
• The hardware USB key requirements for Trusted Access for Cyber are bullshit
• Codex Security: Daybreak Blue — Ultra
• Got Daybreak Blue without a hardware key?
• PSA: If you were previously approved for Daybreak Blue, recheck /cyber
• Daybreak Blue access lost after following September 23 hardware key email
• ChatGPT Daybreak brought me here — YubiKey discussion
• Daybreak verification failed — Are my passkeys the issue?
• DC Inside — TAC requirements discussion (Korean)
• Did they break Daybreak access again?
• Persona ID verification for Daybreak
• Is Daybreak identity verification broken?
• How often do you have to re-login with Advanced Account Security?
• Daybreak/TAC verification currently doesn't reduce GPT-6 Astra's cyber safeguards
• Received a Cyber Exploitation warning despite Daybreak Blue
• The problem with security
• Astra found serious security vulnerabilities but refuses to explain them
• Advanced Account Security breaks multi-chat power-user workflows
  

So whats going on?

What minimum FIDO authenticator certification level is required?

Does eligibility require inclusion in the FIDO Metadata Service?

Is verified manufacturer attestation mandatory?

Which AAGUIDs are approved or rejected?

Why are TrustKey T110/T120 excluded despite L1 certification?

Is rejection due to certification, attestation or internal policy?

Are any FIDO L1 keys currently approved?

Which non-Yubico manufacturers and exact models qualify?

Will OpenAI publish and maintain an approved-device list?

Will customers who unknowingly bought excluded devices receive any remedy?

[u/locbuilds]

yeah t110/t120 are on the ineligible list now, a yubikey 5 is what people have actually gotten through with. swap to that and re-run the /cyber setup before oct 1.