OpenAI started rolling out a new version of GPT-5 Instant on October 3 2025 with considerably more safety training. It's not from the system prompt changing as some people have posted, and it is specific to 5 Instant.
Note that a few weeks ago, most other models' traffic started rerouting requests to some "safety" version of GPT-5, as well as a thinking variant of GPT-5 (all variants of 5 Thinking are tough). Lots of discussion on that here. Don't take everything as gospel, there's assumptions being thrown around as fact even by the "smart" people, but you get the idea.
That "safety" variant actually really wasn't that bad in my experience - mostly just annoying. It may have been a predecessor of the version we have today, which is much more strict. They also updated gpt-5-chat on the API. Normally API models do not change (this will be important later), but this one is specifically stated to be a "snapshot currently used in ChatGPT".
OpenAI has a history of roller coastering their censorship on ChatGPT.com. It's been mostly easy street since February though, so this was a nasty surprise. As for the reason, I hate speculating, but this is the elephant in the room, and it's hard to imagine it's not related.
Keep in mind restrictions have actually been much worse than this before. Not saying this is business as usual, but I think it's good to be aware of just how low the lows have been in the past. The whole jailbreaking space was basically dead silent on GPT-4 during the reign of gpt-4-preview-0125. Everyone was sharing Gemini and GPT-3.5 jailbreaks only, pretty much. So it's still doable if you really want to.
Yes and no. Jailbrokenness is a spectrum. Fundamentally, it's a set of prompting techniques that seek to overcome a model's safety training. Results will be skill-dependent. People who've been around the block will still be able to get jailbroken/NSFW outputs (and as usual, there may be a slow rollout or A/B testing element where some people have an easier version: they're both OpenAI's MO).
One thing I want to stress is just because you see a screenshot of working NSFW doesn't mean there's a prompt you can copy/paste and get the same. There is a huge difference between someone who has decent prompting ability/instinct/patience "steering" a model manually, vs creating a setup so strongly jailbroken that anyone can use, even with "careless" prompting (which was a common goal of jailbreaks like my own Spicy Writer or Pyrite).
But unless you really enjoy jailbreaking just for the fun of it, I wouldn't bother trying with the current 5. 4o and especially 4.1 are a different story.
Paid users have the option of simply selecting older models. 4o is available by default, but you can turn 4.1 and others on in settings under "General":
On web - it's called "Show additional models":
In app - it's called "Show legacy models":
These models are unchanged in my testing, and that's shown in a lot of shared content since restrictions went up (though some users report these being more strict too). However the big problem is that like I said, 4o may reroute to 5.
While in normal chat and browser, the UI actually shows you when this rerouting happens:
Note that if you're in app or talking to a GPT, there is no such indicator. This rerouting behavior is why I strongly recommend 4.1 if you're going to stick around this platform.
Also note that mobile app users cannot select model while using a GPT, only in normal chat. You have to be on browser to select in GPT chat (incuding mobile browser).
So yeah, with 4.1, GPTs still work fine. I have guides on how to make them on my site/github, and I'll link a couple here. These are links I keep updated to point to my GPTs since they keep getting taken down and I have to remake them. Again, strongly recommend 4.1:
spicywriter.com/gpts/spicywriter
spicywriter.com/gpts/pyrite
I don't think I or anyone is going to accurately guess guess at OpenAI business decisions. Altman has mentioned "adult mode" so many times that I just ignore it now. I mean sure, maybe it's different this time, but don't hold your breath.
However, I can say that from a practical perspective, safety training takes a lot of work. During "Glazegate", they mentioned cutting corners in alignment training, and hilariously enough, guessed that the main reason behind all the glazing was essentially them blindly applying user voting preferences. Basically users upvoted being praised and they rewarded that behavior during training. I'm tempted to guess that these restrictions won't last long just because OpenAI is a bunch of fuck-ups. But who knows.
ChatGPT hasn't been top dog in a while, and there's plenty of other ways to get "unsafe" outputs. I actually recently launched my own uncensored writing service and will strive to be the best, but will not be endorsing it in this section so as to maintain neutrality.
There's a pretty wide gulf between the quality of what you can run locally and on servers, but there's a lot to like: known for a fact you have total privacy. And while local models are not automatically uncensored, there's plenty of ones out there that are and you can just download. Check out the LocalLLaMa sub
Gemini - Fairly weakly censored, not much to say. Pretty much any jailbreak will work on Gemini. They also have the equivalent of GPTs called Gems. This is Pyrite, you can set one up like it using my prompts.
Claude - You'll need a jailbreak. And you guessed it, I've got you covered on my Github lol. Claude's a bit of a superstar, I think most people who've sampled a lot of LLMs really view Claude favorably.
Grok - Not gonna lie I've only ever tested this here and there, also weakly censored, though not quite any jailbreak will work. I slapped one together in 5 minutes when Grok 4 came out, can use it if you can't find anything better.
Mistral - Well, it's weakly censored, but not really competitive in terms of intelligence. Some of their models are great for their size, I use Nemo myself and it's great for RP. Buuuut don't pay for Mistral.
These sites use API to connect to providers, and some may even host their own models.
perplexity - They're a search site, but they use popular models and can be jailbroken. I share one for Sonnet in my profile. Haven't updated for 4.5 yet but I'm pretty sure it still works. Their ui and site in general suck ass, but they have ridicuous limits thanks to VC money, and you can find annual codes for $3 from grey market sites like g2g. I've never had a problem, but there very occasionally are - just request a refund and do a chargeback if they don't play ball.
Poe is Quora's foray into AI. The value here is pretty bad but they have a lot of variety, great community of bot creators of which I'm a part.
OpenRouter is an API "middleman", but they offer a UI lot of free models, some of which are quite decent. I have prompts for some of them, and the cheap stuff tends to be weakly censored anyway. Nano-GPT is another thing in this space. has no free models but they have a cheap subscription that gives you supposedly unlimited access to their cheaper ones. Careful if you pay for their models, they don't seem to offer prompt caching for a lot of them that you would expect it on. The UI is an afterthought for both of these and they're really meant for API use.
You would connect to the above with a front end like SillyTavern, LibreChat, etc. SillyTavern is another huge player worth mentioning, they have a huge community too, check their reddit and discord.
Apes together strong! We benefit so much from communicating with each other.
类脑ΟΔΥΣΣΕΙΑ - Chinese-speaking. The largest jailbreaking discord in the world by far.
AI-NSFW - This was my haunt for a while, I am proud to have referred so many people to it to help it grow. Probably the NSFW AI writing capital of the West. Lots of jailbreaking prompts.
Pliny's Discord - Biggest English-speaking general jailbreaking discord server for sure, I assume I don't need to introduce Pliny
