How does OpenAI’s Computer History feature for the ChatGPT macOS app work, including what it captures, where and for how long it stores data, how OpenAI processes that data, and who can enable it; why do its unencrypted memory files raise concerns amid the rise of macOS infosteal

Computer History is an opt-in feature in the ChatGPT macOS app that turns activity from selected apps and websites into a timeline and memories ChatGPT and Codex can use. Its main trade-off is that the resulting memory files remain readable on the Mac without file-level encryption, making a compromised user account more valuable to an infostealer. 215

• What it captures: It records interaction events, such as activity in allowed apps and websites—not screenshots, screen recordings, microphone input, or system audio. That distinction does not make the events harmless: activity can still reveal sensitive work and context. 1012
• Storage and processing: Raw event files stay in the ChatGPT app’s local data container for up to 48 hours while OpenAI’s AI processes them into summaries; the raw files are then deleted. The resulting plain-text memory files stay on the Mac until the user deletes them. “Stored locally” therefore does not mean the activity is never processed by OpenAI’s systems. 1516
• Who can turn it on: It is off by default and requires Memories. Pro users can opt in; Business and Enterprise users also need a workspace administrator to enable it before they can opt in. OpenAI’s September 2026 release notes include availability in the EEA, Switzerland, and UK for those plans. 25716
• Why the files matter: A program already running as the same macOS user can read the unencrypted memory files without gaining administrator privileges. An infostealer could take a persistent, condensed account of a person’s work, not merely the short-lived raw events. This is a post-compromise exposure risk, not evidence that enabling Computer History itself installs malware. 915
• Prompt injection: Malicious instructions placed in a page or app that Computer History reads could be carried into a memory and later treated by an assistant as useful context. Treat remembered material as untrusted source content, especially before letting ChatGPT or Codex run commands, access secrets, or send information elsewhere. 816

To reduce exposure, leave the feature off unless you need it; otherwise allow only necessary apps and websites, pause it during sensitive work, and review and delete history you no longer need. Keep macOS and apps updated, avoid untrusted downloads and extensions, and restrict agents’ access to credentials and external services. Turning collection off prevents new capture; review or delete existing memories separately. 2416