OpenAI began rolling out Lockdown Mode to all personal ChatGPT accounts and self-serve Business accounts on June 4, 2026. Previously available only for enterprise plans, the optional security feature is designed to protect users from data exfiltration risks related to prompt injection attacks by limiting ChatGPT's connectivity to external services.
Lockdown Mode Disables Web Connectivity and External Features
When enabled, Lockdown Mode limits or turns off several features that connect ChatGPT to the web or external services. Disabled features include live web access, image support in responses, Deep Research (including shopping research), Agent Mode, Canvas networking, live connectors, and file downloads. OpenAI designed the feature for users with higher security needs or those willing to trade product functionality for stricter security guardrails.
Available Across Free, Plus, Pro, and Business Tiers
The security feature is now available to all personal ChatGPT accounts, including Free, Go, Plus, and Pro tiers, as well as self-serve ChatGPT Business accounts. To activate Lockdown Mode, users open ChatGPT's settings menu, select 'Safety and security', navigate to 'Advanced security', tap 'Lockdown mode', and flip on the toggle. The feature is intended for people and organizations that handle sensitive information or use connected features that could expose them to prompt injection risks.
Expansion Follows Documented Security Incidents
The rollout to all users suggests OpenAI is taking prompt injection and data exfiltration risks seriously enough to offer protection tools beyond enterprise customers. Security researchers have noted the expansion as a significant step in acknowledging that AI systems with external connectivity pose real security risks that require user-controllable safeguards. The feature targets the growing concern about malicious actors using prompt injection techniques to extract sensitive information from AI conversations or manipulate model behavior.
Key Takeaways
- OpenAI rolled out Lockdown Mode to all personal ChatGPT accounts (Free, Go, Plus, Pro) and self-serve Business accounts starting June 4, 2026
- The security feature disables live web access, image support, Deep Research, Agent Mode, Canvas networking, live connectors, and file downloads
- Lockdown Mode is designed to protect against data exfiltration risks from prompt injection attacks
- The expansion from enterprise-only to all users signals OpenAI's recognition of security risks in AI systems with external connectivity
- Users can activate the feature through ChatGPT's settings under 'Safety and security' > 'Advanced security'