[账号管理] Guide to Enabling Multi-Factor Authentication (MFA)

How does OpenAI MFA work? Where can I enable it?

How it works
Multi-factor authentication adds an extra layer of security to the sign-in process, making it harder for unauthorized users to access your account. Once enabled, MFA will take effect when you use your OpenAI account to sign in to OpenAI services, including ChatGPT, the API platform, and Labs. After you enter your sign-in information, you will be asked to provide a verification code generated by the authenticator app you set up. You need to use another app to get the code and then enter it during sign-in.

You can sign in using your current authentication method only when MFA is enabled. If you want to change your authentication method, you must first unenroll and re-enroll MFA.

Please note that if you have enrolled in MFA and are able to sign in, you can continue to use it or disable it.

MFA options
OpenAI supports TOTP authentication and offers a recovery code at enrollment or a verification code sent to your email as backup options.

How to enable MFA on your account
You can enable multi-factor authentication on the settings page of ChatGPT or the OpenAI Developer Platform.

ChatGPT
After signing in to chatgpt.com, click your name in the lower-left corner of the page to open the menu, then select Settings:




Under Security, turn the multi-factor authentication option on or off by selecting Enable or Disable, respectively.



OpenAI Developer Platform
After signing in to platform.openai.com, select Settings on the left side of the page.

At the bottom of the page, select your profile and find the Security tab. Under Multi-factor authentication (MFA), select the Enable MFA button to enable multi-factor authentication.



If MFA is enabled, you can select the Disable MFA button under Multi-factor authentication (MFA) to disable multi-factor authentication.

Add an additional authentication method
After you select Enable MFA, you will be prompted to verify your account. After completing verification, you will be asked to set up an authenticator app (such as Google Authenticator) as a secondary authentication method.

After selecting this option, scan the provided QR code with your preferred authenticator app and enter the one-time verification code.



Once the authentication method is set up, the system will provide a recovery code. OpenAI strongly recommends that you save this code in a safe place. You can use it if you need to sign in to your account without the authenticator app.

How to recover account access
If you lose access to your authentication method, you can follow these steps to recover account access:

1. Sign in to ChatGPT or the Developer Platform with your email and password.
2. When prompted to verify your identity, select "Try another method" (below the Continue button).



3. Select Email or Recovery code.

a. After selecting Email, a verification code will be sent to the email address associated with your account.
b. Enter the code sent to your email in the "Enter one-time verification code" field to continue accessing your account.

If you select Recovery code, you will be prompted to provide the recovery code provided when you first set up MFA.

Enter the recovery code in the "Enter one-time verification code" field to continue accessing your account.

If you have trouble signing in and are using an iOS device, first check Settings > Passwords > OpenAI and look for a verification code. If you find one, enter that code on the "Verify your identity" screen during sign-in.

What happens if you have multiple login/authentication methods?
If multiple login/authentication methods are associated with your account, you can only use the authentication method set up with multi-factor authentication.

If you prefer another authentication method, sign in, disable MFA, and then re-enable MFA using your preferred authentication method.

In ChatGPT:
After signing in to chatgpt.com, click your name in the lower-left corner of the page to open the menu and select Settings.

Under Security, select the Disable option under Multi-factor authentication to disable MFA.

After disabling MFA, sign out of your account.

Sign back in to your account using your preferred authentication method, return to Settings > Security, and select Enable MFA.

Please note that you will be prompted to complete MFA setup for your account using this authentication method.

In the OpenAI Developer Platform (API):
After signing in to platform.openai.com, select Settings on the left side of the page.

Under your profile > Security, select the Disable MFA button under Multi-factor authentication (MFA) to disable MFA.

After disabling MFA, sign out of your account.

Sign back in to your account using your preferred authentication method, return to Settings > Your profile > Security, and select Enable MFA.

Please note that you will be prompted to complete MFA setup for your account using this authentication method.

Does enabling MFA cancel or sign out any logged-in sessions?
No. Enabling MFA will not cancel existing logged-in sessions. To cancel or sign out of any logged-in sessions, select the "Sign out of all devices" option in Settings -> Security.