What to consider if you entered personal, financial, confidential, or other sensitive information into an AI chatbot.
Short answer
Identify exactly what you shared and whether it included passwords, OTPs, financial information, identity documents, or confidential material. Secure any credentials immediately and review the service's privacy and data controls.
Not all information has the same level of risk. A public fact is different from a password, OTP, identity document, financial record, or confidential work material.
If you entered a password, authentication code, API key, or other credential, treat it as exposed and change or revoke it.
Review the AI service's available privacy, history, deletion, and data controls.
For work, school, or client information, follow the organisation's rules for handling confidential information.
Check it now
A quick privacy check before putting information into an AI tool.
Open the checkSomething already happened?
If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
Keep exploring