OpenAI Rolling Out ChatGPT Account Security Controls
OpenAI expands ChatGPT account security features like Lockdown Mode and Active Sessions.
OpenAI is making two account security features, Lockdown Mode and Active Sessions, more widely available to ChatGPT users. Lockdown Mode aims to prevent data exfiltration from prompt injection attacks by limiting outbound network requests, while Active Sessions allows users to review and manage their logged-in devices. These features provide enhanced protection for sensitive data and account integrity.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OpenAI?
Get an email when a new story names OpenAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonOpenAI's rollout of Lockdown Mode and Active Sessions demonstrates proactive security measures to address emerging threats in AI platforms. Lockdown Mode specifically targets prompt injection attacks that could lead to data exfiltration, while Active Sessions provides users visibility into their account access patterns. These controls highlight the importance of implementing defense-in-depth strategies for AI systems that handle sensitive data. Organizations using AI platforms should prioritize enabling available security features and maintaining awareness of their account activity.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.