OpenAI Rolling Out ChatGPT Account Security Controls
Summary
OpenAI is expanding two security features for ChatGPT accounts. Lockdown Mode helps prevent data exfiltration (unauthorized data theft) from prompt injection attacks (tricking an AI by hiding instructions in its input) by limiting outbound network requests, though it disables features like web browsing and file downloads. Active Sessions lets users see where their account is logged in and log out of unrecognized sessions.
Solution / Mitigation
OpenAI provides two explicit mitigations: (1) Enable Lockdown Mode in Settings > Security > Advanced Security to limit outbound network requests during prompt injection attacks, and (2) use Active Sessions in Settings > Security to review and log out of unrecognized account sessions. Additionally, OpenAI offers Advanced Account Security, which disables password-based login in favor of physical security keys or passkeys, replaces email/SMS account recovery with backup passkeys and recovery keys, and shortens sign-in sessions to reduce account takeover risk.
Classification
Affected Vendors
Related Issues
Original source: https://www.securityweek.com/openai-rolling-out-chatgpt-account-security-controls/
First tracked: June 8, 2026 at 08:00 AM
Classified by LLM (prompt v3) · confidence: 92%