Skip to content
LatestEvaluate Inception Mercury 3 for Faster, Cost-Effective Agentic Workloads
AI

Secure Private ChatGPT Conversations with New PIN or Biometric Lock

OpenAI introduces a feature to hide sensitive chats behind a PIN or biometric authentication, keeping them separate from your main history and search results.

Illustration: A smartphone lies on a wooden table, its screen displaying a blank chat interface partially covered by a translucent overlay featuring a simple geometric lock icon.
AI-generated illustration: Vector Update

Key points

  • Users can now lock specific ChatGPT conversations using a four-digit PIN or device biometrics like Face ID.
  • Locked chats are removed from regular history, pinned items, and search results, but remain accessible to the account holder.
  • The feature does not provide end-to-end encryption or change how OpenAI stores or retains conversation data on its servers.

OpenAI has added a new privacy tool that lets users hide specific conversations from casual viewers by locking them behind a code or fingerprint scan. This feature addresses situations where a user might hand their phone to a friend or family member, wanting to ensure that sensitive discussions remain private while other chats stay visible. According to TechCrunch, the company designed this for personal planning or private matters where screen visibility is a concern.

In plain English

Think of locked chats as a separate, secured drawer in a desk. Your regular conversations stay in the open folders where anyone looking at your screen can see the list. When you lock a chat, it moves out of that main view. To see what is inside the locked drawer, you must prove it is you. This proof is either a four-digit number you create or a biometric check like your face or fingerprint on supported phones. It keeps prying eyes away without deleting the data.

The background

Previously, users relied on temporary chats to avoid leaving a trace in their history, but those sessions disappeared once closed. TechCrunch reports that locked chats are different because they are permanent and retrievable. You can return to them anytime, provided you have the correct credentials. However, Engadget notes that this is not a substitute for strong encryption. OpenAI explicitly states that locking a chat does not create an encrypted vault. The data is still stored on OpenAI servers according to their standard retention policies.

What changes now

Locked chats appear in a dedicated section, distinct from pinned conversations and search results. TechCrunch explains that if you have Memory enabled, locked chats maintain their own separate memory pool. New information shared in a locked chat will update that specific memory but will not leak into your regular chat memory. This separation helps keep sensitive context contained. However, resetting your PIN permanently deletes all content in the locked section. OpenAI warns that this deletion is irreversible and support cannot recover the lost files.

Key terms explained

Pin protection relies on a shared secret known only to the user, creating a barrier to casual access. Biometric authentication uses unique physical traits, such as facial structure or fingerprints, to verify identity quickly. End-to-end encryption ensures that only the sender and recipient can read the message, keeping it unreadable even to the service provider. Locked chats provide access control, not encryption. Teams usually distinguish between hiding data from view and securing data in transit or at rest. Check whether your privacy needs require hiding content from local viewers or protecting data from server-side access.

Background: Biometric authentication

Biometric authentication systems verify identity using unique physical or behavioral traits. They replace shared secrets with personal characteristics, offering convenience but introducing permanent identity risks. You must understand the difference between raw data and stored templates to manage the security trade-offs effectively.

Read the full guide: Biometric Authentication Systems: How They Work and Where They Fail

What to do and how to stay safe: OpenAI

  • Review your chat history and move sensitive conversations to the locked section if you frequently share your device with others.
  • Choose a PIN that is not easily guessed, such as a sequence related to your birthdate, to prevent unauthorized access.
  • Remember that resetting your PIN will permanently erase all locked chats, so back up any critical information before changing it.
  • Monitor your account settings to ensure that model training preferences remain aligned with your privacy expectations, as locking does not alter these defaults.

Step-by-step guide: Stop AI Chatbots Leaking Sensitive Business Data

General security guidance from the Vector Update newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Does locking a chat delete it from OpenAI's servers?

No, locking a chat only hides it from your regular view; OpenAI still retains the data according to its standard policies.

Can I use Face ID or Touch ID to unlock my chats?

Yes, on supported devices like iPhones or Android phones, you can use biometric authentication instead of a PIN.

What happens if I forget my PIN and reset it?

Resetting your PIN permanently deletes all locked chats and files, and this action cannot be undone or recovered by support.

Sources

  1. TechCrunch
  2. Engadget

Related stories

OpenAI absorbs Orchestra Bio to boost Rosalind's drug discovery AI for pharma teams

OpenAI acquires the biotech startup to integrate its operational AI tools into the Rosalind research platform for pharmaceutical teams.