OpenAI has begun rolling out Lockdown Mode for ChatGPT, an optional security setting meant for people and organizations handling sensitive data. The feature limits live browsing to cached content, prevents web image retrieval, disables deep research and agent mode, blocks Canvas networking, restricts file downloads, and changes how apps and connectors can reach outside services. The company presents the setting as protection against prompt injection, the class of attacks in which malicious instructions are hidden inside webpages, files, or connected sources. OpenAI also says the setting cannot guarantee safety. A hostile instruction may still appear in cached material or an uploaded file and distort a response.

The defensive gesture is unusually plain because it protects intelligence by subtracting action. The chat becomes safer when it stops browsing live pages, stops opening external paths, stops letting generated code touch the network, and stops behaving like an agent with errands to run. That admission cuts against the usual sales pitch of AI as frictionless access to every source, tool, app, calendar, image, and file. In a sensitive account, convenience itself becomes an attack surface. The user who turns on Lockdown Mode is accepting a smaller machine, one whose value depends on refusing some of the powers that made it attractive. The warning now sits in Settings under Security, beside the promise that a private question can travel through fewer exits.