Unlocking Privacy: How ChatGPT’s Locked Chats Enhance User Security

In busy homes and open offices, the line between convenience and confidentiality is razor-thin. ChatGPT’s new Locked Chats feature aims to protect sensitive conversations without forcing you to sign out or switch devices. Here’s how it works, where it shines, and what it can—and cannot—do for privacy.

TL;DR

Locked Chats in ChatGPT let you protect specific conversations behind a passcode or biometric check, making them invisible until you unlock them. It’s ideal for shared devices and workplaces, reducing casual snooping and shoulder-surfing. However, Locked Chats do not provide end-to-end encryption; they add local access control and do not replace organizational data security policies.

What are Locked Chats in ChatGPT?

Locked Chats are a per-conversation privacy control that places a passcode or biometric prompt between your sensitive chat and anyone else who has physical or casual access to your device. They help on shared devices and in open workspaces by hiding the content preview and requiring authentication to view or continue a protected thread.

At a glance, Locked Chats work like an app-level gate inside ChatGPT. Once you lock a conversation, it’s hidden in your chat list or obfuscated, and you’ll be prompted for your passcode, Touch ID/Face ID, or your chosen unlock method to see its contents. The feature is designed to prevent casual access—not to change how your data is encrypted in transit or stored in the cloud.

Why do Locked Chats matter on shared devices?

Locked Chats reduce the risk of casual exposure when you share a computer or tablet at home, use a hot desk, or frequently collaborate in person. With a quick lock, sensitive prompts—like drafts, contracts, or code—stay private from curious passersby, even when you step away for coffee or screen-share in a meeting.

Work and home environments often involve “friendly risk”: people you trust who shouldn’t see everything. Locked Chats tackle this common scenario by hiding details without interrupting your overall session. You keep your logged-in convenience while gating only the threads that matter—useful for HR notes, product strategy, medical research queries, or financial modeling.

How to turn on Locked Chats in ChatGPT (step-by-step)

Locked Chats are typically enabled in Settings, then applied to individual conversations. You’ll set a passcode (or use biometrics where supported) and lock any chat that contains sensitive content you don’t want discovered during casual browsing or screen sharing.

Try this general workflow:

1. Open Settings: In ChatGPT, go to Settings or Preferences.
2. Find Privacy/Security: Look for a Privacy or Security section that includes Locked Chats or a similar access-control option.
3. Set your lock: Create a passcode. On mobile, enable Face ID/Touch ID if offered.
4. Lock a specific thread: In your chat list or within a conversation, select the menu (often “•••” or a lock icon) and choose Lock Chat.
5. Confirm it’s hidden: Ensure the chat is now blurred, hidden, or shows a lock indicator.
6. Unlock on demand: Enter your passcode or use biometrics to view or continue the conversation.
7. Adjust session behavior: If available, set auto-lock timing or require re-authentication after inactivity.

For broader privacy planning beyond a single app, you can browse practical guidance on our blog’s latest privacy and security articles and adapt the steps to your team’s workflows.

Is this end-to-end encryption? Understanding the limits

No. Locked Chats add local access control; they don’t transform how messages are encrypted over the internet or stored on servers. Your conversations may still be backed up, synced, or administered under your account settings, so use this feature as an extra layer—not a replacement for enterprise-grade data protections.

It’s important to separate device privacy from data-layer security. Locked Chats help prevent casual on-device viewing and accidental exposure, especially during screen sharing or quick handoffs. They are not designed to replace your organization’s retention rules, data loss prevention (DLP), or encryption policies. For compliance-heavy environments, pair Locked Chats with device passcodes, full-disk encryption, and administrative controls.

Where Locked Chats help—and where they don’t

Locked Chats are best at blocking shoulder-surfing and casual browsing on devices you share or don’t fully control. They are not designed to stop exports, screenshots, administrative access to your account, or server-side data policies. Treat them as targeted privacy for moments—not as your only line of defense.

Consider examples:

• Strong fit: Shared family tablet, hot-desk terminals, and open offices where people pass behind you often.
• Not a silver bullet: If someone already has your account credentials, or if your company centrally manages data retention and auditing, a local lock won’t override those controls.

Locked Chats vs. other privacy tactics: What should you use when?

If you’re deciding between signing out, using browser profiles, or relying on Locked Chats, match the tool to the threat. Use the table below to choose the right fit for your moment—speed and convenience on one side, strict separation on the other.

For more hands-on privacy practices you can adapt today, explore our in-depth how‑to guides on security hygiene.

Implementation at work: Policy tips for teams and IT

For workplaces, pair Locked Chats with clear privacy norms: require device passcodes, disable sensitive notification previews, and define when to lock chats (e.g., anything containing customer data, source code, or HR discussions). IT should document recovery processes, session timeout policies, and screen sharing etiquette to prevent accidental disclosure.

Good team hygiene includes:

• “Lock by default” for high-sensitivity projects.
• Disable notification previews on shared screens.
• Require device-level encryption on laptops and mobile devices.
• Train staff to lock before screen sharing or leaving desks.
• Establish an internal playbook; you can structure yours based on themes we cover in our privacy-first productivity playbooks.

Practical checklist: Make Locked Chats work for you

• Identify sensitive threads (payroll, legal, strategy, prototypes).
• Set a strong passcode; enable biometrics where available.
• Lock immediately after a sensitive exchange—don’t wait.
• Disable previews in notifications and recent items.
• Review locked threads weekly and archive what you don’t need.
• Combine with device lock and browser profiles for layered security.