ChatGPT in offline mode for individual users, sacrificing some online features to prevent data leaks

According to Dynamic Beating monitoring, OpenAI announced the expansion of the Lockdown Mode of ChatGPT, previously restricted to enterprise and education version users, to now include all individual and commercial accounts. The Lockdown Mode, serving as the last line of defense against prompt injection attacks, is currently available on versions such as Free, Plus, Pro, and ChatGPT Business.

In Lockdown Mode, ChatGPT will disable various networking and analysis features. Real-time web browsing is restricted to accessing only cached content, and capabilities such as Deep Research and Agent Mode are entirely disabled. Additionally, Lockdown Mode blocks Canvas-generated code from accessing the network and severs the file download channel used for data analysis. Furthermore, the function to retrieve and display images from the web is limited, although users can still generate and upload images normally.

The core of a prompt injection attack lies in concealing malicious commands within a webpage or uploaded file to induce large models to perform unintended actions. Security expert Simon Willison pointed out that Lockdown Mode severs the "fatal triad" data exfiltration channel. Unlike traditional defenses that rely on the AI itself to assess risks, Lockdown Mode, by shutting down network requests and other physical boundaries, establishes a deterministic defense system impervious to malicious prompt interference. However, OpenAI emphasizes that Lockdown Mode does not prevent prompt injection from affecting the model's logical behavior or response accuracy but only mitigates the risk of sensitive data leakage.

Lockdown Mode was initially announced in February 2026, exclusively available to enterprise and education subscription users. OpenAI's Chief Information Security Officer, Dane Stuckey, stated that Lockdown Mode is not for all users but is a security tool designed for groups facing higher risks. While Lockdown Mode involves compromises in functionality and usability, it is deemed worthwhile for specific user groups.