Insights Security & Privacy
ChatGPT can now hide private chats behind a PIN: what it does and doesn't do
The short version
OpenAI is rolling out locked chats in ChatGPT. You can hide selected conversations behind a 4-digit PIN, or Face ID or fingerprint on supported phones. It hides chats on a shared device but doesn't make them end-to-end encrypted.
What happened
A locked chat leaves your normal history and search. You find it under Projects, then Locked chats, and open it with your PIN. The feature is available on most plans, from Free to Enterprise, but it is appearing gradually, so you may not see it yet. Look for Lock chat in a chat's three-dot menu.
On phones, access ends after about a minute away. Files uploaded in a locked chat are protected too. Temporary chats, group chats, chats with scheduled tasks and chats started from a shared link cannot be locked.
OpenAI says locking does not make the chat end-to-end encrypted, change how long it keeps the data, or change your setting about using chats to improve its models.
Why it matters to you
This is a screen-privacy tool, not strong security. It helps if someone might see your history on a shared device or during a screen share. Once a person has opened a locked chat, nothing stops them copying what is in it.
Forgetting the PIN is costly. Resetting it permanently deletes every locked chat and its protected files. OpenAI Support cannot recover them, and a workspace administrator cannot reset your PIN or unlock your chats. If a chat was already shared by link, that link keeps working until you delete it.
What to do
Once the option appears, lock chats that hold client details, pricing or staff matters, and choose a PIN you will remember. Delete any shared link separately.
Still avoid pasting passwords or highly confidential records into any chat. Check other open devices before sharing your screen, as old titles can linger until they refresh.
Sources
Researched and written by our automated news system.
Free website check
Is your own website in good shape?
Get a score out of 100 for speed, security, Google visibility and trust in about 30 seconds, with the three things most worth fixing. Free, and no email needed.