In plain English
- What happened
- OpenAI added security history to ChatGPT on September 25, 2026, a new screen that lists recent sign-ins, sign-outs, and changes to multi-factor authentication, passkeys, and other security settings. Each entry can include the time, location, and device used, though OpenAI notes some of those details may be approximate or missing. It appears under Settings, then Security and login, then Security history.
- Why it matters to your business
- If more than one person signs into the same ChatGPT account, or the account holds business documents through connected files and plugins, this is the first easy way to see whether someone else has been in it recently. It will not stop unauthorized access on its own, but it gives an owner something concrete to check instead of guessing.
- Do this
- Open ChatGPT on the web, go to Settings, then Security and login, then Security history, and scan the last few entries for a sign-in, location, or device that does not look familiar.
OpenAI's release notes describe security history as a way to review recent security activity on a ChatGPT account without contacting support first. The log covers sign-ins and sign-outs plus any change to how the account is protected, including turning on multi-factor authentication or adding a passkey.
Entries can carry the time of the event, an approximate location, and the device that was used. OpenAI is upfront that some of that detail will be missing or imprecise in certain cases, so the log is a starting point for checking activity rather than a full audit trail.
Who this is useful for
A single freelancer using their own login gets less out of this than a small team that shares one ChatGPT account across a shop, a salon front desk, or a small office. Shared logins are common in small businesses, and until now there was no built-in way to see who signed in and when.
It is also worth a look if the account is connected to plugins that reach into Gmail, a calendar, or business files through Library, since those connections carry real data. A sign-in from an unfamiliar location is a reasonable prompt to check what that account is currently connected to.
How to check it
- 1
Open ChatGPT on the web
Security history is currently viewable on web; mobile support was not mentioned in OpenAI's notes.
- 2
Go to Settings, then Security and login
This is the same menu where multi-factor authentication and passkeys are managed.
- 3
Select Security history
This opens the list of recent sign-ins, sign-outs, and security setting changes.
- 4
Scan for anything unfamiliar
Look at the location and device fields on recent entries. If something does not match how the account is normally used, that is worth acting on.
- 5
Update MFA or passkeys if anything looks off
The same Security and login menu is where those settings live, so a fix is one screen away from the log.
Reality check
This is a history view, not an alert system. OpenAI's notes describe it as something a user checks, not something that pings anyone when a new sign-in happens, so it only helps if someone actually opens it now and then.
Location and device details in the log may be approximate or unavailable, according to OpenAI's own notes.
Availability details beyond the web interface were not specified in OpenAI's release notes, and the feature reflects the current state of ChatGPT's settings menu as of September 2026.
Sources
