目錄
On October 20, 2026, ChatGPT introduced “Locked chats,” a feature that lets users protect conversations they do not want others to see using a four-digit PIN, Face ID, Touch ID, or supported device authentication methods. Once locked, selected conversations are hidden from the regular chat history and search results. Their contents remain in the account, however, so users can reopen them later and continue the conversation.
This feature is particularly useful for people who regularly use ChatGPT to discuss personal matters, plan work projects, or handle client information. Previously, users who wanted to keep certain conversations out of the sidebar generally had to archive or delete them. Locked chats adds another option: keeping conversations while restricting everyday access. It is especially useful when sharing a screen, using a shared computer, or occasionally handing a phone to someone else.
However, locking a conversation is not the same as encrypting its data. OpenAI has not changed its chat retention periods, model training settings, or enterprise workspace policies as a result of this feature. Locking a conversation may also affect ChatGPT Projects, Memory, and file access. If you rely on ChatGPT as a long-term work tool, there are several limitations worth understanding before setting up a PIN.
What Are ChatGPT Locked Chats, and Which Accounts and Devices Support Them?
ChatGPT Locked chats is an access protection feature for existing conversations. Its primary purpose is to preserve chat contents while preventing sensitive information from appearing directly in the regular chat list.
Once enabled, a conversation moves to a dedicated area under “Projects → Locked chats.” It no longer appears in the regular chat history, pinned items, or chat search results. To view the conversation, users must authenticate with a PIN or a supported device authentication method. After successfully unlocking it, they can continue sending messages without creating a new conversation.
Importantly, “locking” a conversation does not create a completely isolated data environment within the account. The conversation still belongs to the original OpenAI account, and moving it into Locked chats does not automatically change the rules governing data retention, model improvement, or workspace administration.
Which ChatGPT Plans and Platforms Support Locked Chats?
OpenAI has confirmed that Locked chats began rolling out gradually on October 20, 2026. The feature is available to Free, Go, Plus, Pro, Business, Enterprise, and Edu plans. Supported platforms include the web version, iOS, Android, and newer versions of the macOS and Windows desktop apps. It is not restricted to paid subscribers.
Authentication methods vary slightly by platform. Smartphones can use supported biometric authentication or device unlocking methods, while the web and desktop applications primarily use a four-digit PIN.
| Platform | Supported Authentication Methods | Differences in How It Works |
| ChatGPT Web | Four-digit PIN | Authentication is valid only in the current tab |
| macOS Desktop App | Four-digit PIN | Requires a supported newer version |
| Windows Desktop App | Four-digit PIN | Requires a supported newer version |
| iOS | PIN, Face ID, Touch ID | Biometric authentication must be supported and enabled on the device |
| Android | PIN, supported device unlocking methods | Authentication options depend on the device's capabilities |
The same OpenAI account uses the same account PIN across supported devices, but biometric authentication must be configured separately on each device. Additionally, this feature is unavailable in ChatGPT for Healthcare. Codex conversations and local Work conversations are also unsupported, while eligible cloud Chat or Work conversations can be locked depending on platform support.
Because the feature is still being rolled out gradually, eligible accounts may not immediately see the “Lock chat” option.
Which ChatGPT Conversations Cannot Be Locked?
Locked chats does not support every type of conversation. According to OpenAI's official documentation, temporary chats, archived chats, group chats, chats created from shared links, and conversations containing scheduled tasks, meeting recordings, or background tasks cannot be locked directly.
Some conversations involving the older Health experience are also restricted, as are conversations whose responses have been saved as project sources. If a conversation already contains a scheduled task, the associated schedule must first be removed before its eligibility for locking can be checked again, even if the task is currently paused.
This limitation is particularly important for people who frequently use ChatGPT automation. For example, if a conversation is responsible for compiling a daily news summary and already has a scheduled task, it cannot simply be moved into Locked chats with the expectation that the schedule will continue working normally. The locked area also does not support creating or updating scheduled tasks, so conversations that need to retain automation capabilities should remain in the regular chat area.
How to Lock a ChatGPT Conversation: Setting Up a PIN and Unlocking Chats
The first time you use Locked chats, you need to start with an existing conversation that is eligible for locking. After setting up your account PIN, you can create new conversations directly within the locked area without first creating a regular chat and moving it afterward.
How to Set Up a Four-Digit ChatGPT PIN
Open the conversation you want to protect, click the “⋯” menu next to its title, select “Lock chat,” and confirm your choice. If you have not yet configured an account PIN, ChatGPT will ask you to create a four-digit code. Enter the PIN and confirm it again to complete the setup and move the conversation into Locked chats.
To view the conversation later, go to “Projects → Locked chats” in the sidebar and authenticate using your PIN or a supported device authentication method.
The PIN is linked to your OpenAI account rather than protecting only the phone or computer you are currently using. If the same account is signed in to multiple workspaces, it still uses the same account PIN. However, switching to another OpenAI account means managing its PIN separately.
PIN entry is also not unlimited. If you enter an incorrect PIN too many times in succession, ChatGPT temporarily blocks further authentication attempts. You must wait until the restriction expires before trying again.
Do Locked Chats Automatically Lock Again?
After you successfully enter your PIN, ChatGPT grants temporary access, allowing you to view or continue conversations within the current Locked chats area. This authentication does not permanently remove the lock, but it also does not necessarily require you to enter your PIN again immediately after leaving each individual conversation.
On the web, authentication applies only to the current browser tab. Refreshing or closing the tab ends the access session, and opening another tab requires authentication again. In desktop applications, authentication applies to the verified window, which automatically locks again after you have been away from that window for a period of time.
The rules are more specific on smartphones. On iOS and Android, the current access session automatically ends one minute after leaving the locked chat area or one minute after switching the app to the background.
One important detail is that locking a conversation does not necessarily make the text currently displayed on your screen disappear immediately. The web version may continue displaying content that is already open in the current tab, while other signed-in devices may temporarily show an old chat title until their lists refresh. Before sharing your screen or handing over your device, it is best to select “Lock now” manually and confirm that both the conversation text and title are hidden before proceeding.
How to Unlock a ChatGPT Conversation
If a conversation no longer requires additional protection, go to Locked chats, open the relevant conversation, select “Unlock chat” from the additional options, and confirm.
After unlocking, the conversation returns to the regular chat history and reappears in search results once the search index has been updated. However, if the conversation originally belonged to a ChatGPT Project, unlocking it does not automatically return it to that project. Instead, it moves to the regular chat list, meaning you will need to review any project instructions and files it previously depended on.
ChatGPT Locked Chats vs. Archived Chats, Temporary Chats, and Deleted Chats
ChatGPT already offers archiving, temporary chats, and deletion, so the introduction of Locked chats can make it difficult to distinguish what each option actually does.
From a data management perspective, these features address different needs. Archiving primarily helps organize the interface. Temporary chats are suitable for discussions that do not need to remain in the regular history. Deletion removes content that is no longer needed. Locked chats provides a middle ground between retaining content and restricting access, making it appropriate for conversations you still need but do not want visible during everyday use.
| Feature | Primary Purpose | Retained in the Account? | PIN Required? | Data Handling |
| Locked Chats | Hide sensitive conversations and restrict access | Yes | Yes | Existing data and model improvement settings continue to apply |
| Archived Chats | Organize the regular chat list | Yes | No | Same retention period as regular chats |
| Temporary Chats | Hold discussions that do not need to remain in regular history | Not saved to regular history while they remain temporary | No | Not used for model improvement; may be retained for up to 30 days for safety purposes |
| Deleted Chats | Remove conversations that are no longer needed | No | No | Handled according to data deletion and retention policies |
For example, if you have finished drafting an article and simply do not want to see it for a while, archiving is sufficient. If you need to revisit a private discussion regularly but do not want it appearing in search results, locking it is more appropriate.
If you never intended to keep a conversation long-term, Temporary Chat may be a better fit. While it remains temporary, its content is not used for model improvement and does not create or update memories. However, a copy may still be retained for up to 30 days for safety purposes. If you choose to save a temporary chat as a regular conversation, it will subsequently be handled according to the settings for regular chats.
For data that no longer needs to be retained, consider deletion. OpenAI explains that deleted chats are immediately removed from the account interface and are generally scheduled for permanent deletion from its systems within 30 days. However, exceptions may apply for safety reasons, legal obligations, or other requirements.
Are ChatGPT Locked Chats Secure? A PIN Is Not a Substitute for Data Encryption
Locking a conversation improves privacy during everyday access. Its most direct benefit is preventing other people from casually opening conversations through the regular chat history.
However, OpenAI clearly defines the scope of this feature in its official documentation: Locked chats does not provide end-to-end encryption or create a separate encrypted vault. This means that even if a PIN is required to open a conversation through the interface, you cannot assume that only the account owner can decrypt the data or that the conversation is completely exempt from the platform's existing data handling policies.
In their October 20, 2026 coverage, TechCrunch and Engadget also characterized the feature as an additional layer of privacy protection for the chat interface rather than a technical update that fundamentally changes how data is stored securely.
Can Locked Chats Still Be Used to Train AI?
Whether conversation content is used to improve models still depends on the account's existing data control settings.
For personal ChatGPT accounts, users who do not want future conversations used for model training can go to “Settings → Data controls” and turn off “Improve the model for everyone.” This setting is managed separately from Locked chats. Locking a conversation therefore does not automatically disable model improvement, and disabling model improvement does not automatically hide or delete existing conversations.
Business, Enterprise, and Edu workspaces follow different data management practices. OpenAI states that content from these workspaces is not used to train models by default. However, organizations may still apply different retention, access, and compliance policies through their administrative settings.
Do ChatGPT Shared Links Stop Working After a Conversation Is Locked?
No. This is one of the most important limitations to understand when using Locked chats.
If a shared link was created before a conversation was locked, that link may continue working even after the original conversation has been moved into Locked chats. Anyone holding the link can still view the content that was previously shared. Messages added after the conversation is locked are not automatically included in the existing shared content, and new shared links cannot be created while the conversation is locked.
For example, suppose an unreleased product proposal was shared with an external partner through a ChatGPT shared link. Later, the conversation is locked because it contains sensitive information. Even though the conversation has disappeared from your sidebar, the external recipient may still be able to access the previously shared content through the original link.
To stop external access, you must separately manage and delete the link under “Settings → Data controls → Shared links.” Even after revoking the link, there is no guarantee that copies, screenshots, or files previously saved by other people will disappear.
Can Enterprise Administrators View Locked Chats?
In enterprise workspaces, Locked chats cannot replace an organization's existing data governance mechanisms.
OpenAI explains that workspace administrators cannot directly unlock employees' conversations or reset their account PINs on their behalf. However, this does not mean locked conversations are completely outside enterprise oversight. In ChatGPT Enterprise and Edu workspaces, locked conversations are still included in conversation message records accessible through the OpenAI Compliance Platform. Eligible data may remain accessible to authorized parties under the organization's existing policies.
Therefore, moving conversations into Locked chats can reduce the risk of accidental exposure during meetings or when using shared devices. However, if the content involves client personal information, nondisclosure agreements, or internal confidential materials, you still need to confirm whether your company permits such information to be entered into ChatGPT. A PIN does not change the confidentiality classification of the underlying data.
Does Locking ChatGPT Conversations Affect Memory, Projects, and Files?
For people who regularly use ChatGPT to manage long-term projects, the effects of Locked chats extend beyond the chat list.
ChatGPT currently has separate rules for project instructions, memory, and file management, and locking a conversation changes how some of this information can be accessed. If you rely on the same Project to continue writing articles, analyze client requirements, or organize research into other knowledge bases, you should first identify which background information you will need to keep using after locking a conversation.
How Does ChatGPT Memory Work After a Conversation Is Locked?
Locked chats can use separate memories, but the separation does not work entirely in both directions.
According to OpenAI's official documentation, when Memory is enabled for an account or workspace, locked conversations can still use relevant information from regular Memory. On the other hand, new messages added after a conversation is locked can create memories available to other locked conversations, but they do not directly update the Memory used by regular chats.
For example, suppose ChatGPT remembered a brand name, content preferences, or work-related background information from a conversation before it was locked. Using “Lock chat” afterward does not automatically delete those existing memories. If you then add information about another unreleased project while the conversation is locked, that information may be available to other locked conversations when the relevant settings allow it, but it will not flow directly into regular chat memory.
It is important to note that after a conversation is permanently unlocked, the complete conversation may once again contribute to regular Memory, depending on the account's settings. However, memories created while the conversation was locked are not automatically added to regular Memory simply because the lock has been removed.
These rules allow Locked chats to reduce the extent to which some information carries over into regular conversations. However, when handling sensitive background information about different clients or companies, this feature alone should not be treated as a complete method of data isolation.
Do ChatGPT Project Conversations Lose Their Original Project Settings When Locked?
Yes, and this change can directly affect the results of subsequent work.
OpenAI has confirmed that when an eligible project conversation is moved into Locked chats, it leaves its original ChatGPT Project and can no longer use that project's instructions, files, or memory. Even if the conversation is permanently unlocked later, it returns only to the regular chat history and does not automatically rejoin the original project.
Suppose a project was originally created to write website articles and includes a defined brand voice, SEO writing guidelines, and reference materials. While a conversation remains inside that project, it can continue using these existing settings. However, if one of those conversations is locked, you should no longer assume that newly added content will automatically follow the original project's instructions.
Content that has already been written will not disappear as a result. The main impact is whether the conversation can still access the original project's background information when work continues. Therefore, if a conversation frequently relies on project documents or established rules, you should assess the additional work involved after locking it rather than considering only whether the conversation needs to be hidden.
Can Files in Locked Chats Be Used in Other Conversations?
Locked chats also restrict access to files uploaded or created directly within a conversation.
While the original conversation remains locked, these protected files can only be opened from that conversation. Even after successfully authenticating with your PIN, you cannot directly use them in another regular conversation or a different locked conversation. If the files were previously saved to ChatGPT Space, they will also be hidden from Space and related search results while the conversation is locked. They will reappear only after the original conversation is permanently unlocked.
However, this protection does not automatically extend to every resource that has been referenced in the conversation. If a file already exists independently in Space or comes from an external connected service such as Google Drive, its access permissions will continue to be governed by the original source.
This is why it is important to distinguish between “files created within a conversation” and “files retrieved from another location” before locking a chat. Both types may appear in the same ChatGPT conversation, but they are not necessarily subject to the same access restrictions.
How Should You Manage Data When Using ChatGPT and Notion Together?
If your workflow involves using ChatGPT to analyze information and organize drafts before saving finalized content to Notion, Locked chats can provide additional access protection for some discussion records. However, it is not a suitable replacement for your existing knowledge management system.
For example, a client proposal may go through several rounds of discussion in ChatGPT, including unconfirmed budgets, comparisons of different options, and internal opinions. If these discussions are still worth retaining but should not be directly visible during everyday use, you can decide whether to lock them based on the sensitivity of the information. Meanwhile, finalized proposals, business decisions, and collaborative documents can be organized in Notion according to organizational policies, maintaining a more stable document management and sharing process.
However, moving documents to Notion does not automatically provide more comprehensive data protection. Page sharing permissions, database member access, and the information that external AI tools are permitted to read must all be reviewed separately.
This is especially important when connecting ChatGPT and Notion through MCP or other connectors. Locking a conversation does not automatically revoke permissions previously granted to external tools. If information has already been copied, stored, or shared through another tool, its permissions must be managed within that tool.
For more on how the two platforms can divide responsibilities in knowledge management, see “Is Notion AI Worth Paying Extra For? The Role of Knowledge Bases in 2026 Through ChatGPT, Claude, and MCP Integration.” If you already use MCP to give AI agents access to Notion, you can also refer to “Notion's Official MCP Connector Accused of Inserting Ads: AI Agent Trust Boundaries and Four Steps to Protect Yourself” to further examine the scope of data access granted to external connectors.
Forgot Your ChatGPT PIN? Resetting It May Permanently Delete All Locked Chats
One of the most important limitations to understand before using Locked chats is how data recovery works if you forget your PIN.
OpenAI explicitly states that forgetting your PIN does not immediately delete your conversations. However, if you choose to reset your account PIN, all locked conversations protected by the previous PIN will be permanently deleted, along with memories, files, and other content stored exclusively in those conversations. This action cannot be undone, and OpenAI Support cannot recover the deleted data.
This is significantly different from the typical password reset process on websites, where users can reset their passwords through email while keeping their existing account contents. Before using Locked chats, it is essential to understand that “changing your PIN” and “resetting your PIN” are two operations with completely different consequences.
If You Remember Your Current PIN, You Can Change It Without Losing Chats
If you still remember your PIN and simply want to replace it with another four-digit code, go to “Settings → Security and login → Account PIN,” select “Change PIN,” enter your existing PIN, and then set a new one.
In this situation, your existing locked conversations will be preserved, and the associated memories and files will not be deleted as a result of a normal PIN change. Even if you usually open locked conversations using Face ID, Touch ID, or a device unlocking method, you must still enter your original four-digit PIN when changing the account PIN.
Therefore, if you are concerned that someone else may have learned your PIN but you still remember the original code, you should prioritize the change option to avoid unnecessary data loss.
What Data Is Deleted When You Reset a Forgotten PIN?
If you have completely forgotten your PIN, the official procedure is to go to the same settings page, select “Reset PIN,” complete identity verification, confirm the deletion warning, and create a new account PIN.
It is important to understand that resetting the PIN does not affect only the conversation you are currently working with, nor does it delete content from just one device. Because the PIN is linked to your OpenAI account, confirming a reset affects all locked conversations protected by the previous PIN. Their associated dedicated memories and protected files may also be permanently deleted.
Even in Business, Enterprise, or Edu workspaces, administrators cannot recover a member's previous PIN or restore conversations deleted through a PIN reset.
If your locked conversations contain important research findings, client communications, or long-term work materials, you should confirm in advance that essential content has been saved somewhere appropriate under the applicable policies. Do not make Locked chats the only place where important information is stored.
When Should You Use ChatGPT Locked Chats? Check Your Privacy Needs First
Locked chats is suitable for conversations you need to revisit regularly but do not want other people to see during everyday use. For example, personal discussions, drafts of unreleased projects, or work-related content that should not appear directly on a shared screen may all benefit from locking, which can reduce the likelihood of accidental exposure.
If your main goal is to organize the sidebar, archiving is usually sufficient. If a conversation does not need to be retained long-term, you can consider using Temporary Chat or deleting it. For documents involving company secrets, client personal information, or regulatory requirements, however, whether the information can be entered into ChatGPT must still be determined according to existing data usage policies. Setting a PIN does not automatically mean that confidentiality requirements have been satisfied.
In practice, you can start by choosing a completed conversation that is still worth keeping and testing the locking feature. Check whether authentication works correctly across devices and whether shared links, Memory, Projects, and file access behave in ways that meet your existing needs. If the original conversation relies heavily on project instructions or is responsible for ongoing automated tasks, you should evaluate whether locking it will create additional work later.
The purpose of ChatGPT Locked chats is clear: it allows sensitive conversations that need to be retained to remain hidden from the regular chat history. However, it does not change data retention or model improvement policies, and it cannot manage copies that have already been shared or permissions granted to external tools. For people who manage information using ChatGPT, Notion, and other work tools, the more appropriate approach is to decide whether to lock each conversation based on its purpose, retain essential finalized documents separately, and understand the potential data loss associated with resetting a PIN before taking action.
FAQs
Locked chats allows users to move selected conversations out of the regular chat history and search results while preserving their contents. Opening them requires a four-digit PIN or supported device authentication.
Open an eligible conversation, select “Lock chat” from the “⋯” menu, and follow the instructions to create a four-digit PIN. You can then access the conversation through “Projects → Locked chats” after authenticating.
OpenAI announced a gradual rollout to Free, Go, Plus, Pro, Business, Enterprise, and Edu plans. Supported platforms include the web version, iOS, Android, and newer macOS and Windows applications.
The feature may not have reached your account yet. Temporary chats, archived chats, group chats, and conversations containing scheduled tasks, meeting recordings, or certain other special features may also be ineligible for locking.
Yes, but the rules vary by device. On the web, refreshing or closing an authenticated tab ends access. On iOS and Android, conversations lock again approximately one minute after leaving the locked area or switching the app to the background.
No. It adds access authentication to the chat interface but does not create an end-to-end encrypted vault or automatically change existing data retention and model improvement settings.
Whether conversations are used for model improvement depends on the account's existing data control settings and applicable policies. Locking a conversation does not automatically disable “Improve the model for everyone.”
Not automatically. Shared links created before locking may remain accessible. You must revoke them separately under Shared links in Data controls. Content that has already been copied or saved cannot be deleted through this process.
Archiving primarily organizes the regular chat list and does not require an additional PIN. Locking removes conversations from the regular list and search results, and authentication is required to reopen them.
Yes. Existing regular memories created before locking are not automatically deleted. New memories created after locking may be available to other locked conversations under the relevant settings, but they do not directly update regular chat Memory.
An eligible project conversation leaves its original Project when locked and can no longer use that project's instructions, files, or memory. Permanently unlocking the conversation does not automatically return it to the original project.
Protected files uploaded or created directly within a locked conversation can generally only be opened from that original locked conversation. Files stored independently or accessed through external connections remain subject to their original permissions.
No. Using “Reset PIN” permanently deletes all locked conversations protected by the previous PIN, along with their dedicated memories and files. OpenAI Support cannot restore them. If you still remember your original PIN, use “Change PIN” to preserve your data.
Locking can reduce exposure through the interface, but it cannot replace corporate data classification, sharing permissions, auditing, or compliance policies. Whether confidential information can be entered into ChatGPT must still comply with organizational rules.