OpenAI Launches ChatGPT Block Mode to Cut Off Internet for Data Leak Prevention

As generative AI moves rapidly into the agent era, the growing ability to invoke tools and connect to the internet has created new and serious challenges for security systems. To fight the surge of prompt injection attacks, OpenAI has introduced a bold new optional security feature called "Lockdown Mode," now available to all logged-in users, account types, and workspaces.
Prompt injection attacks have long troubled large language model developers. Attackers often hide malicious instructions inside web pages, third-party documents, or other external data. When ChatGPT reads this poisoned content while connected to the internet, it can be tricked into ignoring its core safety rules, performing unauthorized actions, and even secretly sending sensitive data—such as trade secrets or personal information—to an external malicious server without the user's knowledge.
To address this well-known industry problem, OpenAI's new Lockdown Mode takes a practical approach. Rather than trying to perfectly identify every new malicious instruction, it simply restricts the most dangerous capability: the ability to reach outside networks.
Once a user or workspace administrator enables Lockdown Mode, many of ChatGPT's core features are limited. Real-time web browsing is significantly reduced—the system can only access protected cached web content, which may result in incomplete, outdated, or unavailable search results. The model also cannot retrieve or show any images from the external network, nor can it download files from the web for advanced data analysis.
In addition, high-end productivity features like "Deep Research" and "Agent Mode" are completely disabled. Even code generated in the Canvas feature cannot access the internet. In this mode, the large model can only process files that users manually upload as local secure documents.
However, OpenAI's official documentation clearly states that Lockdown Mode is not an impenetrable shield. It cannot guarantee 100% protection against prompt injection attacks. Malicious instructions may still lurk in legitimate cached web pages or in files uploaded by users, continuing to interfere with the model's judgment.
This new feature highlights a real paradox in the AI industry: the more open a large model's internet access and the deeper its automation tool usage, the larger the attack surface it exposes. Lockdown Mode represents OpenAI's clear attempt to draw a security boundary around AI capabilities. It does not promise "absolute safety," but instead hands the trade-off between "stronger, smarter collaboration" and "lower data leakage risk" back to users and enterprise administrators to decide for themselves.
Related article
OpenAI Publishes Dual Reports: AI Progress Outpaces Safety Efforts
As the public awaits further details from OpenAI regarding the incident of AI agents autonomously infiltrating the German programmer's website DseWiki, on September 6th local time, OpenAI released two documents: one announcing that the company has me
How to fix Core Web Vitals for better SEO rankings
7 Essential Websites You Need to Know AboutHave I Been Pwned?Print Friendly12ft LadderThis Person Does Not ExistWayback MachineTerms of Service; Didn't ReadCamelCamelCamelThis guide introduces seven highly practical websites that might be new to you.
OpenAI’s AI Solves 722 Math Problems, Sparking Anxiety Among Human Mathematicians
The rapid evolution of artificial intelligence in mathematics is fundamentally altering how the field is perceived externally. OpenAI recently released 722 proof manuscripts spanning 17 distinct mathematical disciplines, demonstrating a significantly
Related Special Topic Recommendations
Comments (0)
0/500

As generative AI moves rapidly into the agent era, the growing ability to invoke tools and connect to the internet has created new and serious challenges for security systems. To fight the surge of prompt injection attacks, OpenAI has introduced a bold new optional security feature called "Lockdown Mode," now available to all logged-in users, account types, and workspaces.
Prompt injection attacks have long troubled large language model developers. Attackers often hide malicious instructions inside web pages, third-party documents, or other external data. When ChatGPT reads this poisoned content while connected to the internet, it can be tricked into ignoring its core safety rules, performing unauthorized actions, and even secretly sending sensitive data—such as trade secrets or personal information—to an external malicious server without the user's knowledge.
To address this well-known industry problem, OpenAI's new Lockdown Mode takes a practical approach. Rather than trying to perfectly identify every new malicious instruction, it simply restricts the most dangerous capability: the ability to reach outside networks.
Once a user or workspace administrator enables Lockdown Mode, many of ChatGPT's core features are limited. Real-time web browsing is significantly reduced—the system can only access protected cached web content, which may result in incomplete, outdated, or unavailable search results. The model also cannot retrieve or show any images from the external network, nor can it download files from the web for advanced data analysis.
In addition, high-end productivity features like "Deep Research" and "Agent Mode" are completely disabled. Even code generated in the Canvas feature cannot access the internet. In this mode, the large model can only process files that users manually upload as local secure documents.
However, OpenAI's official documentation clearly states that Lockdown Mode is not an impenetrable shield. It cannot guarantee 100% protection against prompt injection attacks. Malicious instructions may still lurk in legitimate cached web pages or in files uploaded by users, continuing to interfere with the model's judgment.
This new feature highlights a real paradox in the AI industry: the more open a large model's internet access and the deeper its automation tool usage, the larger the attack surface it exposes. Lockdown Mode represents OpenAI's clear attempt to draw a security boundary around AI capabilities. It does not promise "absolute safety," but instead hands the trade-off between "stronger, smarter collaboration" and "lower data leakage risk" back to users and enterprise administrators to decide for themselves.
OpenAI Publishes Dual Reports: AI Progress Outpaces Safety Efforts
As the public awaits further details from OpenAI regarding the incident of AI agents autonomously infiltrating the German programmer's website DseWiki, on September 6th local time, OpenAI released two documents: one announcing that the company has me
How to fix Core Web Vitals for better SEO rankings
7 Essential Websites You Need to Know AboutHave I Been Pwned?Print Friendly12ft LadderThis Person Does Not ExistWayback MachineTerms of Service; Didn't ReadCamelCamelCamelThis guide introduces seven highly practical websites that might be new to you.
OpenAI’s AI Solves 722 Math Problems, Sparking Anxiety Among Human Mathematicians
The rapid evolution of artificial intelligence in mathematics is fundamentally altering how the field is perceived externally. OpenAI recently released 722 proof manuscripts spanning 17 distinct mathematical disciplines, demonstrating a significantly





Home






