Artificial intelligence
What not to paste into a public AI tool
A practical privacy checklist before putting text, files or screenshots into an AI assistant.
What you will learn
You'll know which kinds of information should stay out of public AI tools and how to ask in a safer way.
Before you continue
Do not paste passwords, one-time codes, identity documents, customer details or confidential business material into a public AI tool.
Stop and seek appropriate advice if the material includes personal information, confidential work, legal documents, health details, financial information or another person’s private information.
Start with the safe assumption
Treat a public AI tool like an online service, not a private notebook. If you would not post the information into another website, pause before pasting it into AI.
The exact rules depend on the tool, its settings and your situation. When in doubt, leave private details out.
Do not paste passwords or codes
Never paste passwords, recovery codes, one-time codes, security questions or password-manager exports into an AI tool.
An AI assistant does not need those details to explain a general problem.
Leave out identity and account details
Be careful with driver licences, Medicare details, passports, tax file numbers, bank details, account numbers and screenshots that show them.
If you need help understanding a form or message, remove the private parts first.
Protect other people’s information
Customer details, staff records, private emails, school information and family messages may include personal information about someone else.
For small businesses, this matters even when the task feels harmless, such as summarising notes or rewriting an email.
Be careful with confidential work
Business plans, contracts, quotes, unpublished content and internal documents may be confidential. Check whether you are allowed to share them with the tool.
If you are not sure, do not paste them.
Use a safer version of the task
Instead of pasting the real document, describe the problem in general terms. Use fake names, remove account details and ask for a structure or checklist rather than giving the tool the private material.
What to expect
You can remove or avoid sensitive details before using a public AI tool.
Sources and further reading
- What is personal information? · OAIC
Supports guidance about personal information and privacy caution.
- Artificial intelligence · eSafety Commissioner
Supports safety and privacy framing for AI tools.
- Data Controls FAQ · OpenAI Help Center
Supports checking tool data controls before sharing information.