There's No Way to Protect Custom GPT Instructions

[BPS_Software]

There is further discussion on this topic at the below links, but your understanding is correct that you cannot currently protect the GPTs in any useful way. And yes, knowledge documents can also be accessed.

How can you protect your GPT?

Exactly. @michaelchase gets it. GPTs are a more customizable, and persistent wrapper for custom instructions. Sure, they are more capable than that with the increased functionality of adding knowledge documents and actions, but this is the framework from which we should be viewing their usefulness (at least for now). All of the prompt based security methods mentioned above can be cracked. The best that anyone has been able to do so far is create a gamified version of security protocols that lo…

Magic words can reveal all of prompts of the GPTs

@Kaltovar I was able to crack it. I won’t post methodology here, but since you asked, I wanted to try it out and provide some feedback. If you want specifics on how I was able to thwart it, shoot me a DM. I have security language on my GPTs as well and this little cracking test taught me that it doesn’t really appear to matter much. Sure, you can keep tweaking your instructions to ward off every conceivable route of attack, but then you have no room left for actual instructions! Until t…