ChatGPT Lockdown Mode is an optional security setting from OpenAI that cuts down what ChatGPT can reach on the internet. It is meant to stop a trick called prompt injection. In this guide, we explain what the mode blocks, who can use it and why most people do not need it.

Quick answer

  • What it is: an optional, advanced setting for highly security-conscious users.
  • What it limits: live web browsing, deep research, Agent Mode, file downloads and more.
  • Who had it first: Enterprise, Edu, Healthcare and Teachers plans, as per OpenAI’s announcement.
  • Does it make ChatGPT risk free? No. OpenAI says it reduces the risk but cannot remove it.

What prompt injection means

A chatbot follows instructions in plain language. However, it can also read web pages, files and emails. Prompt injection happens when an attacker hides instructions inside that content.

For example, a web page might carry hidden text that tells the assistant to copy private details somewhere else. The assistant may treat the text as a command, because it cannot always tell your request from the page’s text. So the risk grows when the tool can browse, run tasks or send data out.

What ChatGPT Lockdown Mode blocks

According to OpenAI’s announcement and the Privacy Guides report on it, the mode tightens several features. In short, it closes the routes that attackers could use to move data out.

  • Web browsing is limited to cached pages, so ChatGPT does not make live requests.
  • Image responses are switched off, although you can still upload images and use image generation.
  • Deep research, Agent Mode and Canvas network access are disabled.
  • File downloads are blocked.
  • Outbound network requests that could carry data to an attacker are blocked.

Because of these limits, some everyday tasks will stop working. Research that needs fresh web pages, for instance, will be weaker.

Who can use Lockdown Mode

At launch, OpenAI offered the setting on ChatGPT Enterprise, Edu, ChatGPT for Healthcare and ChatGPT for Teachers. It said consumer and Team plans would follow “in the coming months”. Availability may have changed since then, so check your own plan’s settings.

Also, the setting is built for a small group. Think of a legal team handling client papers, or a research office working with sensitive records. For most individual users, ordinary habits matter more.

What Lockdown Mode does not fix

Lockdown Mode does not stop bad instructions from entering the chat. Cached web content, for example, can still carry them. Instead, the mode limits the damage those instructions can do. OpenAI itself says it greatly reduces the risk but does not eliminate it.

OpenAI also added “Elevated Risk” labels to features that carry extra security risk. It plans to remove each label once enough protections are in place.

Simple habits that still help

Whatever plan you use, a few habits lower your exposure. First, avoid pasting passwords, Aadhaar numbers or bank details into any chatbot. Then, be careful with web pages and files from sources you do not know. Finally, review what an AI agent plans to do before you approve it.

If you are an IT admin in India, also read your organisation’s data policy. Then decide whether staff who handle sensitive material should get the stricter mode. For personal security basics, our guide on WhatsApp two step verification is a good next step.

FAQ

Is ChatGPT Lockdown Mode free for everyone?

No. OpenAI first offered it on business and education plans. It said consumer plans would come later, so check your account settings for the current position.

Does ChatGPT Lockdown Mode stop all hacking?

No. It reduces the risk of data theft through prompt injection. OpenAI says it does not remove that risk entirely.

Will I lose features if I turn it on?

Yes. Live browsing, deep research, Agent Mode and file downloads are limited or off. That is the trade for stronger protection.