OpenAI Adds PIN-Locked Chats for ChatGPT Privacy
Users can now secure sensitive conversations with a PIN or biometrics, though the feature does not change data retention or encryption standards.
Key points
- Locked chats require a four-digit PIN or biometric authentication to view.
- The feature is available across Free, Plus, Pro, and Enterprise plans.
- Resetting the PIN permanently deletes all locked chat history and files.
OpenAI has introduced a feature allowing users to lock specific ChatGPT conversations behind a PIN or biometric check, according to TechCrunch. This update aims to protect sensitive discussions when users share their devices with others. The company stated on Tuesday that the tool helps keep personal matters private without deleting the conversation history.
The risk
The primary concern addressed by this feature is visual privacy rather than data security. OpenAI notes that locking a chat does not create end-to-end encryption or a separate encrypted vault. It also does not alter how long the company retains the chat data or change the setting that allows data to improve the model. Engadget reports that the feature is not a method to bypass legal obligations or workplace monitoring.
Who is exposed
The feature is rolling out to users on ChatGPT Free, Go, Plus, Pro, Business, Enterprise, and Edu plans, according to TechCrunch. It is not available for ChatGPT for Healthcare. The option is also excluded for temporary chats, archived chats, group chats, and conversations created from shared links. Engadget adds that Codex conversations cannot be locked.
Cost and compliance
There is no additional cost for this feature across the eligible subscription tiers. However, compliance implications remain significant because the locking mechanism does not change data retention policies. OpenAI explicitly states that locked chats do not remove information previously remembered by the model. If a user resets their PIN, all locked content is permanently deleted and cannot be recovered by support teams.
What should you do?
Verify that your device’s screen privacy settings are also enabled to prevent shoulder surfing. Review your organization’s data handling policies to ensure locked chats do not violate compliance requirements. Remember that resetting your PIN will erase all locked conversations, so choose a secure and memorable code.
The background in plain language
Device-level privacy features like PIN locks protect data from casual visual access but do not secure data in transit or at rest. Teams usually implement these controls to prevent unauthorized viewing when devices are shared or left unattended. Check whether your organization requires end-to-end encryption for sensitive communications, as local locking does not provide that guarantee. This distinction is vital for understanding the limits of such privacy tools in professional environments.
Background: Encryption
Encryption is the process of converting plain text into cipher text using an algorithm and a key, rendering the data unreadable to anyone without the corresponding decryption key. It protects confidentiality during storage and transmission, ensuring that intercepted or stolen data remains useless to unauthorized observers who lack the specific key required to reverse the transformation.
Read the full guide: Encryption in a Sentence: How Scrambling Data Protects Your Digital Life
What to do and how to stay safe: OpenAI
- Enable biometric authentication on your device to add an extra layer of access control.
- Avoid pasting highly sensitive credentials into locked chats, as data retention policies remain unchanged.
- Regularly review your saved files and chat history to manage potential exposure.
- Monitor vendor updates for changes to data retention or encryption standards.
Step-by-step guide: AI Governance Explained: Building Rules for Autonomous Systems
General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does locking a chat encrypt it end-to-end?
No, OpenAI states that locked chats do not create end-to-end encryption or a separate encrypted vault.
Can I recover my chats if I reset my PIN?
No, resetting the PIN permanently deletes all locked chats and files, and OpenAI Support cannot recover them.
Is this feature available for all ChatGPT plans?
It is available for Free, Go, Plus, Pro, Business, Enterprise, and Edu plans, but not for Healthcare or Codex.
