Start here
ChatGPT Account Security & Privacy Checklist
If you use ChatGPT across a phone, home computer, work device, or connected apps, this seven-step check gives you one sensible place to start. It links to detailed, source-backed walkthroughs for each setting instead of asking you to change everything at once.
The five-minute version
- 1. Review active sessions.
- 2. Sign out unknown devices.
- 3. Turn on multi-factor authentication.
- 4. Check Data Controls.
- 5. Remove unused connected apps.
- 6. Review searchable chat history.
- 7. Keep private details out of test files.
Work through these checks in order
Check 1
Review every active session
Open ChatGPT Settings → Security → Active sessions. Compare the device and time with places where you actually signed in. A location can be approximate, so use it as a clue rather than proof.
Check devices logged into ChatGPTCheck 2
Sign out anything you do not recognize
Remove one unfamiliar session, or sign out everywhere if several entries look wrong. Before signing out of all devices, make sure you can still access the email account used for recovery.
Follow the sign-out stepsCheck 3
Use Temporary Chat for a sensitive one-off question
Temporary Chat can keep a conversation out of your ordinary history and memory, but it is not a substitute for removing identifying details. Avoid pasting passwords, account numbers, or confidential records.
Understand Temporary ChatCheck 4
Review data and advertising controls
Check the current Data Controls and advertising settings instead of assuming every conversation is handled the same way. Product settings change, so use the labels shown in your own account.
Review ChatGPT privacy controlsCheck 5
Treat connected services as separate permissions
Google Drive, finance tools, and other connected apps may expose information beyond the text in one chat. Disconnect services you no longer use and review what remains stored in old conversations.
Review connected Google Drive accessCheck 6
Check searchable history before sharing a screen
Chat search can surface old projects, images, and documents quickly. Rename vague conversations, delete anything you no longer need, and look through the results before presenting or sharing your screen.
Review ChatGPT search and historyCheck 7
Remove private details before uploading audio or files
Use a harmless sample first. Do not upload medical details, account numbers, client conversations, or recordings made without permission just to test a feature.
Use safer sample filesWhat to do if you find something wrong
Sign out the unfamiliar session first, then change your password from a device you trust. Turn on multi-factor authentication and review the email account used for recovery. If the account belongs to an employer or school, contact its administrator because organization-level controls may affect what you can change yourself.
Do not rush to identify an intruder from a location alone. Mobile networks, travel, and VPNs can make a legitimate session look far away. The combination of device, time, and activity is more useful than any one signal.
Make this a small recurring habit
Review sessions after travel, after using a shared computer, or when replacing a phone. Recheck connected apps every few months and use harmless sample information whenever you try a new upload or connector. These short checks reduce risk without turning everyday AI use into a security project.
Settings and product names can change. Each linked guide cites the relevant official documentation and notes important limits; confirm the current labels in your own account before acting.