OpenAI Launches PIN-Locked Chat Feature

OpenAI introduced a new security option on November 2, 2026, allowing users to secure specific conversations with a four-digit PIN. The feature, named Locked Chats, moves selected dialogues into a distinct section of the interface. This separation removes the chats from regular history, pinned lists, and standard search results, providing a visual barrier for shared devices.

Users can access these protected conversations by entering their PIN. On supported hardware, the system also accepts Face ID, Touch ID, or the device’s standard unlock method. The same PIN functions across all devices linked to the OpenAI account, streamlining access for users who switch between computers and phones. To activate the feature, users select 'Lock chat' from the conversation menu. OpenAI is rolling out the tool gradually, so the option may not appear for every account immediately.

The feature is available across all major subscription tiers, including Free, Go, Plus, Pro, Business, Enterprise, and Edu plans. It works on web browsers, iPhone and Android apps, and desktop applications for Mac and Windows. However, it is not available for ChatGPT for Healthcare. Certain conversation types, such as Temporary Chats, archived chats, and group chats, cannot be locked.

OpenAI clarifies that locking a chat does not provide end-to-end encryption. The data is not stored in a separate encrypted vault. The action also does not alter how long the company retains the information. Users who have enabled the 'Improve the model for everyone' setting must manually turn it off to stop that process. Memory created before locking remains in regular Memory, while new information from locked chats is stored in a separate area.

Resetting a forgotten PIN carries a high cost. If a user initiates a reset, all locked chats, related files, and memories are permanently deleted. OpenAI’s support team cannot recover this data. Additionally, locking a chat does not automatically revoke previously shared links. Users must manually delete those links to restrict external access. For workplace accounts, organizational policies still apply, and compliance systems may access the chats for oversight.

The company describes the tool as a convenience for access control rather than a guarantee of absolute confidentiality. Workspace administrators cannot unlock chats or reset a user's PIN. Biometric authentication applies only to the specific device where it is configured. OpenAI recommends caution for highly sensitive information, noting that the feature is designed to prevent casual viewing rather than to secure data against determined adversaries.