OpenAI Adds PIN Protection for Sensitive ChatGPT Chats

OpenAI has introduced a native privacy feature called Locked Chats for ChatGPT, allowing users to conceal sensitive interactions behind a custom four-digit PIN or device-level biometrics. Announced on 20 October 2026, the gradual rollout spans all ChatGPT tiers, ranging from Free to Enterprise and Edu plans. Locked conversations are isolated from regular chat histories, global search queries, and general memory personalisation. For Malaysian ChatGPT users who share desktop workstations, family tablets, or mobile devices, this update adds an on-device privacy layer to prevent casual exposure of private transcripts without requiring full account logouts.

Key Facts

How Does Locked Chats Secure User Conversations?

Locked Chats secures conversations by isolating selected threads into a dedicated, authenticated folder accessible only via a custom four-digit PIN or native biometrics. Moving a chat to this section removes its title and contents from regular history, pinned lists, and internal search results across desktop and mobile clients.

The feature also introduces isolated memory handling. Personal information disclosed inside a locked thread is confined to that specific dialogue and will not influence regular ChatGPT memory personalisation. However, OpenAI notes that this is an interface privacy measure rather than end-to-end encryption. The underlying data remains governed by standard retention rules and legal compliance mandates.

Keep sensitive conversations out of view with Locked Chats in ChatGPT. Move chats out of your regular history and search into a protected space you can unlock with a PIN on web and desktop, or a PIN, Face ID, Touch ID, or device unlock on supported mobile devices.

OpenAI

OpenAI confirms that locked chats utilise an isolated memory partition that prevents sensitive disclosures from personalising regular conversations.

How Do Users Lock, Access, and End Protected Sessions?

Users lock chats by selecting the three-dot menu on an existing thread and choosing Lock Chat, which prompts the creation of a four-digit PIN. First-time users must lock an existing conversation before initiating a new one under Projects > Locked chats, where authentication is required before messaging begins.

Session persistence varies by platform. On desktop applications and web browsers, access remains tied to the active window or tab until refreshed, closed, or manually locked via the Lock now control. On Android and iOS mobile applications, session timeout is automated: access locks after one minute of inactivity, after one minute running in the background, or upon switching accounts.

Mobile ChatGPT sessions automatically re-lock after one minute in the background or after leaving the protected section.

What Are the Limitations and Data Loss Risks?

The primary risk involves forgotten PINs, as resetting a four-digit PIN permanently erases all locked chats, attached files, and stored content without recovery options. Furthermore, multiple conversation types are strictly excluded from the feature, including group chats, temporary chats, archived threads, scheduled tasks, and meeting recordings.

Compatibility constraints also exclude Codex conversations and local Work chats. Additionally, while threads with existing shared links can be moved to Locked Chats, doing so does not deactivate the public link; users must manually delete shared links to revoke external web access.

Resetting a forgotten account PIN permanently deletes all locked conversations, and OpenAI Support cannot recover the lost content.

What It Means for Malaysian Buyers

For Malaysian subscribers paying for Plus, Pro, or Enterprise plans, as well as non-paying Free users, Locked Chats carries no additional subscription fee. OpenAI is distributing the tool via a staggered account-level rollout across web and app stores in Malaysia, meaning local availability depends on individual account provisioning rather than regional geographic restrictions.

While local pricing and payment terms via local debit or credit cards remain unchanged, users relying on shared devices in Malaysian corporate or domestic settings should exercise caution regarding the strict PIN recovery mechanism to avoid accidental, irreversible data loss.

Malaysian access to Locked Chats is governed by OpenAI's gradual rollout schedule across existing free and paid account tiers.

Common Questions

Does locking a chat provide end-to-end encryption?

No, Locked Chats does not provide end-to-end encryption or a separate cryptographic vault. It serves as an access-control layer that hides conversations locally while OpenAI's standard data retention, model training preferences, and legal compliance obligations remain unchanged.

Can OpenAI Support restore locked conversations if a PIN is forgotten?

No, OpenAI Support cannot recover locked content if a PIN is forgotten. Resetting the four-digit PIN permanently and irreversibly erases all locked conversations, associated uploaded files, and stored session data linked to that protection code.

Which conversation types cannot be locked?

Users cannot lock Temporary Chats, archived chats, group chats, shared link conversations, background task outputs, project source responses, meeting recordings, Codex chats, or local Work chats. Shared links also remain accessible online unless deleted separately.

Sources and Methodology

Information sourced directly from official technical details published by OpenAI on 20 October 2026 and documented by Lowyat.NET on 21 October 2026. All operational specifications, feature constraints, and tier availabilities reflect OpenAI's published technical guidance. No currency conversions were required as no subscription price changes were introduced.