OpenAI Rolls Out Locked Chats with 4-Digit PIN on October 20, 2026

OpenAI Rolls Out Locked Chats with 4-Digit PIN on October 20, 2026

by

OpenAI rolled out a new privacy feature on October 20, 2026, allowing ChatGPT users to lock sensitive individual conversations behind a four-digit PIN or biometric authentication. The feature hides secured chats from regular history and search while remaining accessible across desktop, web, and mobile platforms.

When OpenAI announced the debut of locked chats, the update targeted a common friction point for everyday users. People frequently hand their phones or laptops to friends, family, or colleagues to show them a specific piece of information, risking casual exposure of unrelated conversations. While the platform’s temporary chats vanish entirely without leaving a trace in user history, locked conversations stay saved so users can revisit them whenever they want, provided they pass an authentication check.

Authentication and Access Across ChatGPT Plans

The feature supports a custom four-digit PIN code. The rollout spans a broad range of tiers, including Free, Go, Plus, Pro, Business, Enterprise, and Edu plans. However, OpenAI has confirmed that the capability is excluded from ChatGPT for Healthcare.

Once a chat is secured, it leaves the main sidebar, pinned conversations, and search results, relocating to a dedicated section under Projects. On desktop applications for macOS and Windows, locked sessions relock automatically if the user moves away from the window, and web sessions clear when the tab closes or the page refreshes. Mobile users can also trigger an immediate lock through a manual option in the interface. On iOS and Android, access ends after a minute of inactivity away from the locked section or if the app remains in the background for a minute.

Memory Handling and Privacy Limitations

Enabling the feature introduces specific rules for how the chatbot handles ongoing memory. When Memory is turned on, locked conversations establish a separate memory system. New messages sent inside a locked chat update this isolated space rather than leaking into everyday conversations. At the same time, locking a chat does not wipe away any details the model recalled before the lock was applied. While locked chats can draw upon a user’s regular memories, the information picked up within the locked environment remains strictly contained.

On Enterprise Accounts, Locked ChatGPT Chats Stay in the Company's Logs, OpenAI Says

Crucially, locked chats are not end-to-end encrypted. The mechanism acts as an interface restriction on the local device rather than a comprehensive cryptographic vault. It leaves existing data retention policies and the Improve the model for everyone training setting completely untouched. OpenAI explicitly notes that this feature does not alter how long the company retains chat data, nor does it override workspace policies, safety requirements, or legal and compliance obligations. In Enterprise and Edu workspaces, locked chats remain visible through the OpenAI Compliance Platform.

Permanent Risks of PIN Resets and Excluded Chat Types

Users face a permanent consequence if they misplace their account security code. OpenAI cautions that resetting a forgotten PIN permanently deletes all locked chats, associated files, and private memories protected by that credential. The company emphasizes that this action cannot be undone, and their customer support team cannot recover the erased information. Significantly, while resetting a PIN triggers this deletion, users can change a known PIN without losing their protected data.

OpenAI Rolls Out Locked Chats with 4-Digit PIN on October 20, 2026
Photo: Mashable India

The feature also imposes strict limitations on compatibility. Certain conversation types are ineligible for protection, including:

  • Temporary chats and archived conversations
  • Group chats and conversations generated from shared links
  • Chats involving scheduled tasks or meeting recordings
  • Local Work conversations and Codex chats

For those who previously shared a link to a conversation, locking the chat does not automatically delete that link; users must manage the link separately to cut off access. In addition, while Voice is supported in locked chats on mobile and web, it is not available within the locked environment on the desktop app. Because the rollout started as a gradual deployment, availability continues to expand across eligible accounts worldwide.

More on Rolls Out: Microsoft Rolls Out Windows 11 Version 26H2 as Enablement Package · Google Rolls Out Android Sideloading Verification in Pilot Countries

More on Compliance Platform

NEW ChatGPT Locked Chats — Easy Guide | Lock Your Private Chats with a PIN + How to Use It
ChatGPT Adds Locked Chats. Gemini Adds Personal Intelligence in Cars. U.S. Blocks DeepSeek in Gov…

Worth a look

Read next