Introducing Lockdown Mode and Elevated Risk labels in ChatGPT

Update June 4, 2026: Lockdown Mode is rolling out to personal ChatGPT accounts as well as self-serve ChatGPT Business accounts. First introduced for ChatGPT enterprise plans, Lockdown Mode is an optional setting for people and teams who want a more conservative ChatGPT experience when working with sensitive information or connected features.

Lockdown Mode is designed for users with higher security needs, or for moments when users are willing to trade elements of product functionality for stricter product guardrails. When enabled, it limits or turns off certain features that connect ChatGPT to the web or external services, including live web access, image support in responses, Deep Research including shopping research, Agent Mode, Canvas networking, live connectors, and file downloads. This reduces the ways prompt-injection-style attacks could cause information to be shared outside the conversation. Personal users can turn it on from Settings > Security.

This is part of our broader defense-in-depth approach: as ChatGPT becomes more capable and connected, we’re continuing to add practical protections that give users more choice over how ChatGPT works with sensitive information and connected features.

As AI systems take on more complex tasks—especially those that involve the web and connected apps—the security stakes change.

One emerging risk has become especially important: prompt injection⁠. In these attacks, a third party attempts to mislead a conversational AI system into following malicious instructions or revealing sensitive information.

Today, we’re introducing two new protections designed to help users and organizations mitigate prompt injection attacks, with clearer visibility into risk and stronger controls:

• Lockdown Mode in ChatGPT, an advanced, optional security setting for higher-risk users

• “Elevated Risk” labels for certain capabilities in ChatGPT, ChatGPT Atlas, and Codex that may introduce additional risk