ChatGPT Locked Chats Won’t Hide Your Data From OpenAI
Resetting your PIN permanently destroys hidden threads, and OpenAI retains full server-side access to the data.
OpenAI is rolling out a feature that hides ChatGPT conversations behind a four-digit PIN, but the company explicitly confirmed it will still retain full access to the data and can be compelled to hand it over in legal proceedings.
The new locked chats tool, detailed on a newly published support page by OpenAI, removes selected exchanges from standard chat history, pinned lists and conversation search. It does not encrypt them. Users on iOS and Android can substitute biometric authentication like Face ID for the PIN, according to the company. All hidden threads are grouped under a project labeled “Locked chats.”
For enterprise users and professionals handling sensitive information, the distinction matters. The feature targets shoulder surfing in public spaces or casual snooping by someone handed an unlocked phone. It offers no protection against workplace audits, law enforcement subpoenas or internal reviews by OpenAI itself. The company stated directly that locked chats do not alter its model training settings or change how long it retains user data.
A forgotten PIN carries a steep penalty. Resetting the account PIN permanently deletes every locked chat and any files uploaded to their project space. “This cannot be undone, and OpenAI Support cannot recover the deleted content,” the company warns on its support page. This creates a narrow margin for error compared to standard device passcodes, where recovery options typically exist through manufacturer accounts.
Igor Bonifacic for Engadget
The rollout is gradual. Free accounts will receive the feature alongside Go, Plus and Pro subscribers, OpenAI said. Mobile users can apply it to voice mode interactions, though Codex conversations remain excluded from the locking mechanism entirely.
Privacy-focused messaging platforms like Signal and WhatsApp rely on end-to-end encryption, meaning the companies operating the servers cannot read message contents even if served with a court order. OpenAI’s architecture operates differently. Because the AI must process text to generate responses, conversations exist unencrypted on company servers regardless of local visibility settings. The locked chats update changes the interface, not the infrastructure.
