OpenAI has announced Lockdown Mode, a new ChatGPT security setting designed to reduce the risk of prompt injection attacks that could expose sensitive data. The feature limits how ChatGPT interacts with the web and external tools, but OpenAI says it does not remove the risk entirely.
Prompt injection attacks happen when malicious instructions are hidden inside webpages, uploaded files, or other content sources that a chatbot may read. These instructions can affect how the chatbot responds or handles information, including sensitive user data.
What Lockdown Mode Changes
In its announcement, OpenAI said Lockdown Mode restricts several ChatGPT features that may create data exfiltration risks. These include live web browsing, web image retrieval and display, deep research, and agent mode.
Users can still generate images while Lockdown Mode is enabled. However, ChatGPT will not retrieve and display images from the web, and web access is limited to cached content instead of live browsing.
The feature is meant to reduce the chances that hidden instructions in outside content can influence ChatGPT’s behavior. According to OpenAI’s help page, Lockdown Mode is designed to reduce prompt injection-based data exfiltration risks in ChatGPT and supported OpenAI products.
OpenAI Says Risk Still Remains
OpenAI said Lockdown Mode does not guarantee full protection from prompt injection attacks. Malicious instructions may still appear in cached web content or uploaded files and may still affect the accuracy or behavior of a response.
The company said the setting is not meant for everyone. It is designed for people and organizations that handle sensitive data and want stricter protection against data exfiltration risks linked to prompt injection.
According to TechCrunch, OpenAI is rolling out the feature to self-serve ChatGPT Business accounts and eligible personal accounts. OpenAI’s release notes also describe Lockdown Mode as an optional opt-in security setting that limits access to the web and external services.
Featured image credits: Wikimedia Commons
For more stories like it, click the +Follow button at the top of this page to follow us.