Does ChatGPT Locked Chats keep client information private?

ChatGPT Locked Chats keeps a client conversation out of sight for anyone who is using your screen or your device. A locked chat leaves your regular history, your pinned chats and regular search, and it opens only with your four-digit account PIN or, on a phone, Face ID, Touch ID or device authentication.

OpenAI announced the feature on October 20, 2026. If you paste client names, quotes or contract clauses into ChatGPT on a shared laptop or a phone the family borrows, the lock covers that situation well.

What the lock leaves alone is the part that decides who else can see the chat: what OpenAI keeps, what the "Improve the model for everyone" setting does, what ChatGPT already remembered, and any link you shared. Each of those has its own switch, and each takes a minute or two to check.

A locked chat hides client information from anyone using your screen

Think of the lock as a door on the chat list. Once a conversation is locked, a family member who borrows your phone or a colleague who sits down at your laptop will not see it in your history, in your pinned chats or in a regular search. They would need the account PIN, or on a phone, your Face ID, Touch ID or device authentication.

To lock a chat, open its three-dot menu, choose Lock chat, and create or enter the four-digit PIN. Locked chats then sit under Projects > Locked chats. The feature is rolling out gradually across Free, Go, Plus, Pro, Business, Enterprise and Edu accounts, on web, iOS, Android and the new ChatGPT apps for macOS and Windows. OpenAI's Help Center article on locked chats lists ChatGPT for Healthcare as not included.

Retention, training and Memory sit outside the lock

OpenAI describes the lock as an access barrier. The chat stays in your account, and the settings that govern the account keep working as before. How long OpenAI retains the chat, the Improve the model for everyone setting, and anything ChatGPT remembered before you locked the chat are all unchanged. OpenAI also says locked chats do not override workspace policies or legal and compliance obligations.

On a work account, the admin side matters. Workspace admins cannot open a locked chat, reset your PIN or switch the feature off. In Enterprise and Edu workspaces, locked chats still appear in the Compliance Platform logs. So, the lock hides a chat from the person at the next desk, and the workspace keeps the controls it already had.

Two smaller facts affect a shared device. Anyone who can open a locked chat can copy what is in it. On mobile, the chats relock after one minute away or in the background.

Resetting a forgotten PIN deletes every locked chat

Write the PIN down somewhere safe before you lock the first client chat. OpenAI's Help Center says that resetting a forgotten PIN permanently deletes all your locked chats and their protected files, and OpenAI Support cannot recover them. Changing a PIN you still know keeps everything.

That matters for client work. A contract summary or a quote draft you wanted to keep could vanish with the reset. Copy anything you need to a client folder in your own files before you lock the chat, or keep the PIN in your password manager.

Shared links stay live until you delete them

If you ever shared a client conversation through a link, locking the chat does not close that link. OpenAI's article on sharing conversations explains where to manage links, and the Locked Chats article tells you to delete the link separately.

Check this one before you lock anything. A link you forgot about is the quickest way for a client's details to reach a person you never meant to see them.

A ten-minute routine protects client information beyond the lock

The lock handles who can see the chat on your device. This routine handles what OpenAI keeps and what ChatGPT remembers. Run it once, then repeat it whenever you change plans or devices.

1. Check Improve the model: Open Settings > Data Controls and read the Improve the model for everyone setting. On a personal account, turning it off keeps new chats in your history without using them to improve OpenAI's models, per OpenAI's data controls FAQ.
2. Use Temporary Chat for short jobs: A Temporary Chat stays out of history, does not create or use memories while it is temporary, and is not used to improve models while it stays temporary. OpenAI may keep it for up to 30 days for safety, and a temporary chat cannot be locked.
3. Delete shared links: Open your sharing controls and remove every link for a client conversation.
4. Review Memory: Open the Memory settings and delete saved details such as a client's name or project.
5. Delete finished chats: Deleting removes the chat from your account view and schedules permanent deletion within 30 days, subject to legal or security exceptions. A file saved in Library or a Space may need its own deletion.

Then lock the chats you want to keep. A locked chat that you no longer need is better deleted, because deletion removes it and the lock only hides it.

A solo owner on a shared device may need only the lock and a settings check

If you are the only person in your business and the real worry is a spouse, a child or a visitor picking up your laptop, the lock plus the ten-minute routine covers the main parts you can control. Turn off Improve the model, use Temporary Chat for anything you would not want kept, delete old chats, and sign out when you step away.

Nothing here requires a new subscription. A paid workspace solves different problems, and buying one because the lock exists would be paying for the wrong thing.

A Business workspace changes the defaults, and the lock stays a separate feature

OpenAI says that data from ChatGPT Business, Enterprise, Edu, Healthcare, Teachers and the API is not used for model training by default, and its Business data privacy and Enterprise privacy pages describe admin controls, encryption, retention options and compliance features for those plans. Those controls belong to the workspace. The lock belongs to each person's chat list.

Paid help starts to pay for itself when several people use ChatGPT, when the information is regulated or restricted by a client contract, when ChatGPT connects to your files or other tools, when you need a retention rule, or when you need an AI-use policy written and taught. Our posts on how to choose a ChatGPT plan for a team and what an AI-use policy should cover go through those choices. If you are still deciding whether the free tier can carry your work, is free ChatGPT enough for your business covers it, and which accounts to connect to an AI assistant helps once you add tools.

Lawyers and accountants carry duties beyond any setting

Professional rules sit on top of whatever ChatGPT offers. Lawyers have specific guidance on using generative AI with client information, in ABA Formal Opinion 512, dated July 29, 2024. Accountants and other licensed professionals should check their own confidentiality and client-contract requirements. This post is not legal advice, and a software setting does not settle a professional duty.

The FTC added a general point on January 9, 2024: AI companies must keep their privacy and confidentiality promises, and the agency wrote that "there is no AI exemption from the laws on the books." If a client contract limits where their information may go, read it before you paste anything.

Frequently Asked Questions About ChatGPT Locked Chats

Do Locked Chats encrypt my ChatGPT data?

OpenAI describes the lock as an access barrier, with no end-to-end encryption and no separate encrypted vault. It decides who can open the chat on your account and device.

Do Locked Chats stop my chats from being used for training?

The lock leaves the Improve the model for everyone setting as it was. Change that setting under Settings > Data Controls, or use Temporary Chat for work you do not want used to improve models.

Can someone see my locked chat?

A person needs your four-digit account PIN or, on a phone with the option on, your Face ID, Touch ID or device authentication. Anyone who gets in can copy what the chat contains, and mobile relocks after one minute away.

Can my employer or workspace admin see a locked chat?

Admins cannot open locked chats or reset your PIN. In Enterprise and Edu workspaces, locked chats still appear in Compliance Platform logs, and locked chats do not override your organization's access to workspace data.

What if I forget the PIN?

Resetting a forgotten PIN permanently deletes all locked chats and their protected files, and OpenAI Support cannot recover them. Changing a PIN you still know keeps them.

Does locking a chat delete it or stop a shared link?

Locking keeps the chat in your account. A shared link stays live until you delete the link, and a deleted chat is scheduled for permanent deletion within 30 days, subject to legal or security exceptions.

What This Means for You

A locked chat keeps client conversations away from anyone using your screen or device, and that is a real gain on a shared laptop or a family phone. Retention, the Improve the model setting, Memory and shared links need their own checks, and a forgotten PIN costs you the locked chats for good. Ten minutes in Data Controls, Memory and your sharing settings covers the rest of what you control.

Once the routine is in place, you can paste client work into ChatGPT with a clear idea of where it goes, who can see it and when it is deleted. That is also the point where you can tell whether the free tool still fits or whether a team workspace and a written policy are due.

If your business has grown past one person and one laptop, Web Leveling can set up the accounts, the data rules and the staff training with you, through our AI automation and AI consulting work. We work with small and medium businesses across the country and overseas. Contact us about your client-data rules and we will map what your business actually needs.

Terms