OpenAI rolls out ChatGPT Lockdown mode to all users to block prompt injection data theft
OpenAI has expanded Lockdown mode to all ChatGPT plan tiers, including Free, Go, Plus, Pro, and Business users. The security feature blocks outbound network requests to prevent prompt injection attacks from stealing sensitive data, but disables live web browsing, Deep Research, and Agent mode.
OpenAI Rolls Out Lockdown Mode to All ChatGPT Users
OpenAI has expanded its Lockdown mode security feature to all ChatGPT users across Free, Go, Plus, Pro, and Business plans, according to ZDNET. The optional setting, which launched in February 2025 for Enterprise, Edu, Healthcare, and Teachers plans, aims to protect users from data theft through prompt injection attacks.
How Lockdown Mode Works
Lockdown mode blocks outbound network requests to the internet and external file services to prevent attackers from exfiltrating sensitive information through malicious prompts. The feature does not prevent prompt injection attacks themselves—attackers can still inject malicious commands that access cached web content or uploaded files.
What Gets Disabled
When enabled, Lockdown mode restricts the following capabilities:
- Live web browsing: ChatGPT can only access cached content, making search results potentially outdated or unavailable
- Web image retrieval: The model cannot display or retrieve images from the live web, though users can still upload images and request image generation
- Deep Research: The feature is completely disabled
- Agent mode: Unavailable in Lockdown mode
- Canvas networking: Code generated through Canvas cannot access network resources
- File downloads: ChatGPT cannot download files for analysis, but can still process uploaded files
Target Use Case
According to the report, Lockdown mode is designed for individuals and organizations handling sensitive or confidential information requiring additional security layers. The feature trades functionality for security by preventing live data connections that could be exploited by prompt injection attacks.
Availability and Activation
The feature is rolling out gradually across all ChatGPT accounts. Users can enable it through Settings > Security > Advanced Security > Lockdown Mode. A warning message explains the restrictions before activation.
What This Means
Lockdown mode represents a defensive approach to prompt injection rather than a solution. By cutting off live network access, OpenAI acknowledges that the underlying vulnerability—the ability to inject malicious instructions into prompts—remains unsolved. Organizations working with highly sensitive data now have a protection option, but at the cost of ChatGPT's web-connected capabilities. The tradeoff reveals the security challenges inherent in AI systems that blend user instructions with dynamic external data sources.
Related Articles
OpenAI launches ChatGPT Wallet so its dots agents can check out for limited U.S. Pro users
OpenAI launched ChatGPT Wallet on Friday, letting its agents, called dots, help users decide what to buy and complete the purchase. It is initially limited to some U.S. ChatGPT Pro subscribers aged 18 and up with a U.S.-issued Visa, Mastercard or American Express.
OpenAI research ties shrinking chain-of-thought transparency in GPT-6 Astra to training choices on capability and cost
OpenAI's safety team analyzed models from GPT-5 through GPT-6 Astra and traced the loss of chain-of-thought monitorability to four training factors. The data suggest the erosion reflects tradeoffs between safety, capability and compute cost, not an unavoidable law.
Gemini 4 Hydrogen, Google's latest Flash model, is generally available in GitHub Copilot
Gemini 4 Hydrogen, described by GitHub as Google's latest Flash model, is now generally available in GitHub Copilot. GitHub says it is designed for fast, efficient agentic coding, tool use, and multistep workflows.
Sierra releases Poppy 1.0 personal agent protocol with automatic support for every Shopify store
Sierra released Personal Agent Protocol 1.0, known as Poppy, on November 13, 2026. It adds automatic support for every Shopify store and enablement across Meta's Muse agent, and Sierra says its design partners now number more than 100.
Comments
Loading...