Security at Code GPT

Your account

• You sign in with your email and a password. Passwords are stored only as a strong one-way hash (scrypt).
• New accounts confirm their email with a 6-digit code. Every new browser or device is confirmed with a code too.
• After too many wrong tries, sign-in and codes are paused for a short time.
• You can sign out of all other browsers from the Account page. Changing your password signs out other browsers.
• Login and sign-up are protected by a browser check against automated bots.

Your data

• All traffic is encrypted with HTTPS.
• Chats, files, Codex workspaces and memory notes belong to your account and are not shown to other users, unless you share a chat link yourself.
• You can delete single chats, notes and workspaces, or your whole account at any time.
• Code you preview or run in Codex runs in a locked sandbox inside your browser.

Report a problem

If you find a security issue, email [email protected] with the subject "Security". Please do not share it publicly until we have fixed it.