ChatGPT Now Stays Logged Into Your Customer's Account. Your Cancel Page Was Built for Somebody Else.

· CX Pulse

OpenAI's agent can now sign in to your site and stay signed in. Every screen you built to persuade a person is now being read by something else.

On August 25 OpenAI added a sign-in form to ChatGPT Work's cloud browser. Until this week the agent stopped cold at every login wall. Now it pauses, shows a secure form, and the person types their own username, password and two-factor code straight into it.

The credential handling is careful, and that deserves saying out loud. OpenAI's own wording is that the model does not see the username or password, that they are not stored, and that they are not used for training. A separate review model checks the page for phishing before the form appears at all.

The sentence that matters to anyone running a website is the one after that. OpenAI: "The authentication will persist for future tasks until it expires."

The session lives somewhere your customer isn't

That cookie sits in a browser OpenAI hosts. Not on the phone, not on the laptop. Your customer can close the app, put the device in a drawer and go to dinner, and the logged-in session on your site is still sitting there waiting for the next instruction.

From your side of the glass, that session is your customer. Real account, real password, real 2FA code. Every bot control most companies own runs at the front door, and this one walked through the door holding the key.

So the question of whether a human is on your site stopped being a traffic question. It moved behind the login.

Your cancel page was built to persuade a person

Think about what is actually on a cancellation screen. A pause option. A discount. A three-question survey. A "before you go" panel listing the features they never opened. Every one of those elements is there because a human being is sitting on the other side with a second of hesitation available to work with.

An agent sent to cancel a subscription will read that screen and cancel the subscription. The discount is one more element in the DOM. The survey is a form with required fields. The save rate on that flow is going to move, and nothing in a funnel report will explain why, because the sessions will look exactly like the ones that used to convert.

The same thing applies anywhere a screen exists to slow somebody down. Upsell interstitials. Cross-sell modals. The "are you sure" that talks people out of downgrading. Those were all built against human hesitation, and hesitation isn't something the software brings with it.

What OpenAI gated, and what it left open

Consequential actions do get a confirmation step. Payments and bookings need individual approval, and anything carrying a financial, legal or account commitment stops for a human yes. Site access defaults to asking every time, and the setting that skips the question is labeled by OpenAI as not recommended.

That covers the expensive mistakes, and it leaves a long tail of everything else. Downloading an invoice. Changing a mailing address. Updating a communication preference. Opening a support ticket. Filling out a form. Reading a policy page. Those are exactly the errands people are most willing to hand off, and they run on your site with nobody watching the screen.

Which means the confirmation email you fire at the end goes to a person who wasn't there for any of it.

What this is worth to a small company

None of this needs a project or a vendor. It needs one honest walk through your own account portal, done the way a customer would hand it to an agent.

Start with cancellation, because that is where the money is. Then a plan change, then an address update. On each screen, ask which parts only work if somebody's reading them. That list is the part of your product that just lost its audience.

Then open your session logs and try to tell which of last week's logins was a person and which was software acting on a person's behalf. Most companies can't answer that, and knowing you can't is a more useful place to stand than assuming you can.

The retention offer on your cancel page is one of the most expensive screens your company owns. As of this week it is running for an audience that can't be talked into anything.

Source: ChatGPT can now sign in to your accounts and stay signed in, reporting OpenAI's August 25 rollout.