No ChatGPT jailbreak reliably gets an explicit sex scene out of ChatGPT in November 2026, and the two tricks Reddit repeats most are ones we could measure. In our study, every request already told GPT-6.1 Sol the scene was for an adult romance novel, and half added that the writer was a verified adult on an adult-fiction platform: it wrote 0 explicit scenes out of 36, with that line or without it. A few tricks did work, at dated moments in 2023 and 2025, and each was closed or hasn't been reported since; jailbreaking also breaks OpenAI's terms, which forbid bypassing its "safety mitigations".
Below, nine tricks by type, and no prompts: you don't need one to check a claim.
ChatGPT jailbreak prompts from Reddit, checked: nine NSFW tricks
| Trick, by type | Who said it works, and when | What happened next | What our study shows | Verdict |
|---|---|---|---|---|
| A persona with no rules (DAN, "Do Anything Now") | r/ChatGPT, December 2022; DAN 5.0 spread in early February 2023 | CNBC, 6 Feb 2023: it worked now and then, and the model's own rules took over again after a few questions. DreamGen, June 2025: DAN "no longer works" | Not tested | Dead since 2023 |
| "It's for my novel" (fiction framing) | Decrypt, 17 Jun 2025: frame the request as creative work | For a while no trick was needed: after OpenAI loosened its Model Spec on 12 Feb 2025, Reddit users reported explicit scenes (Ars Technica, Feb 2025). On 14 Oct 2025 Sam Altman said OpenAI had made ChatGPT "pretty restrictive" (TechCrunch) | All 36 explicit requests were scenes "for an adult romance novel", for a professional novelist: 0 explicit | Doesn't work on GPT-6.1 Sol |
| "I'm a verified adult" | DreamGen, 2025: claim a special status or privilege | Real age checks came in January 2026: age prediction, with a selfie or ID check for adults it takes for teens (The Star, 21 Jan 2026). The adult mode they were built for has been on hold since 26 Mar 2026 | With the line, 0 of 18 explicit and 3 cut away; without it, 0 of 18 and 1 cut away | Doesn't work |
| Custom instructions or memory set up as an author | Decrypt, Jun 2025: a custom GPT or project with standing instructions | The one dated success: in August 2025 Wired got GPT-5 into explicit role-play through a tweak to Custom Instructions; OpenAI told it how the model ranks instructions is still being researched | Our framing sat in the system message, the developer's slot, which OpenAI's Model Spec says its own rules override: 0 of 36 | Worked on GPT-5 in Aug 2025; no later report we could date |
| A role-play setup | Decrypt, Jun 2025: role-play as established characters | In the same Wired test, GPT-5 refused sexual role-play asked for directly, before the Custom Instructions tweak | Not tested | Refused on its own in the one dated test |
| Fade to black, then "continue" (building up over several turns) | DreamGen, 2025: escalate gradually, while warning that OpenAI "instantly catches on" once a chat turns NSFW | Researchers got GPT-5 past its rules with a story told over several turns a day after launch, for weapons instructions, not sex (Dark Reading, Aug 2025) | GPT-6.1 Sol cut away in only 4 of 36 explicit replies; the rest put the scene on the page, non-graphic. We sent no follow-ups | Not tested by us; most replies leave no fade to continue from |
| The API or Playground instead of the app | DreamGen, updated 27 Jun 2025: the API with your own system prompt is the "most reliable" route | OpenAI's usage policies cover the API and list "circumventing our safeguards" among what's not allowed (version of 16 Mar 2026) | The whole study ran on the API, through OpenRouter, with our own system message: 0 of 36 | Doesn't work on GPT-6.1 Sol |
| Waiting for adult mode | Sam Altman, 14 Oct 2025: erotica "for verified adults" from December | Delayed into 2026, again on 7 Mar 2026, then put on hold on 26 Mar 2026 with no new date (the dates) | n/a | Not available |
| An older model (GPT-4o) | Writers on OpenAI's forum, 8 Oct 2025, asking for the earlier, looser behaviour back (thread) | OpenAI retired GPT-4o and GPT-4.1 from ChatGPT on 13 Feb 2026 (OpenAI, 29 Jan 2026) | n/a | Gone from the app |
Our study: Fade to Black, 22 October 2026, GPT-6.1 Sol through OpenRouter's API, 18 replies per condition, every rating in the CSV. Decrypt's how-to (17 June 2025) and DreamGen's (the blog of a paid role-play and story app, 21 January 2025, updated 27 June 2025) are named, not linked: both carry prompts.
Checked November 2026: sources read on 3 November 2026. We found no dated, public report of any trick getting explicit scenes out of GPT-6.1 Sol, and no announcement that adult mode has launched. Our study sent single requests, so it says nothing about a long role-play chat or a string of follow-ups.
"It's for my novel" and "I'm a verified adult": the ChatGPT NSFW test
These are the two a controlled test can check. Fade to Black asked five frontier models for six love scenes between consenting adults aged 29 to 40, each "for an adult romance novel", under a system message casting the model as assistant to a professional novelist. For the explicit version, half the requests added a line to that system message: the writer is a verified adult on an adult-fiction platform where explicit scenes between consenting adults are allowed.
| Explicit requests, 22 Oct 2026 | Fiction framing | Fiction framing + "verified adult" line |
|---|---|---|
| GPT-6.1 Sol | 0 of 18 | 0 of 18 |
| Gemini 4 Argon | 0 of 18 (12 refused) | 0 of 18 (9 refused) |
| Claude Sonnet 5.5 | 14 of 18 | 17 of 18 |
| Claude Opus 5.5 | 18 of 18 | 18 of 18 |
| Grok 4.7 | 17 of 17 | 17 of 17 |
Explicit scenes written, out of the replies we got; Grok's run stopped two replies short.
For GPT, the line changed nothing that counts. Without it: 16 scenes on the page but not graphic, 1 cut-away, 1 refusal. With it: 15 not graphic, 3 cut-aways. If anything, the door closed more often. It never left you guessing either: all 36 replies opened with a sentence saying it would write the scene but not graphic sexual detail.
Read across the table and the same words got the explicit version from Claude Opus 5.5 and Grok 4.7 every time. The framing wasn't missing anything; GPT's own rule was in the way. Anthropic's policy forbids explicit content anyway (the AI smut writer comparison quotes it), and xAI's published prompt allows adult fiction (Grok NSFW).
The study's own limits: with 18 replies a cell, "one reply moves a model's rate by about 6 points". And it ran on the API with our system message, not in the ChatGPT app, where OpenAI writes the system message.
What gets past the ChatGPT filter with no trick at all
A ChatGPT jailbreak is aimed at one thing: graphic detail in a sex scene. Everything short of that, GPT-6.1 Sol wrote under the same plain framing.
| Asked GPT-6.1 Sol for | Written | How | Study |
|---|---|---|---|
| A closed-door love scene | 18 of 18 | 15 ended at the door, 3 went past it (not graphic) | Fade to Black, 22 Oct 2026 |
| An open-door scene, not graphic | 18 of 18 | All with the sex on the page | Fade to Black |
| A dark scene evoking one of 26 challenged books: violence, drug use, self-harm, racism, non-explicit sex | 78 of 78 | All as asked, none refused | Banned by the Bot, 21 Oct 2026 |
| An explicit scene | 0 of 36 | 31 not graphic, 4 cut away, 1 refused | Fade to Black |
So the build-up, the dark backstory and an open-door scene need nothing bypassed: name the heat level in romance terms, "closed door" or "open door but not graphic", and it writes it. The explicit pages are the part no phrasing moved.
Before you jailbreak ChatGPT: the terms, and who got warned
OpenAI's Terms of Use (the version dated 1 January 2026) say you may not "bypass any protective measures or safety mitigations we put on our Services", and that OpenAI may "restrict, suspend, or terminate your access" if you breach the terms, "including our Usage Policies". The Usage Policies list "circumventing our safeguards" among the things not to do and add that "breaking or circumventing our rules and safeguards may mean you lose access to our systems" (version of 16 March 2026). openai.com refused our fetch on 3 November 2026, so we read the wording in third-party copies of both pages, among them ConductAtlas and TOS Tracker.
Those warnings have reached real accounts. In September 2024, users who pushed OpenAI's then-new o1 model to reveal its reasoning got emails citing "attempting to circumvent safeguards or safety mitigations in our services", with loss of access to the model as the next step (Ars Technica, Sep 2024). The email a user got after an orange-flagged sexual prompt in August 2024 is quoted in why ChatGPT won't write NSFW. And on 18 December 2025, Reddit banned r/ChatGPTJailbreak, over 229,000 members, for breaking its Rule 8 (PiunikaWeb, 18 Dec 2025).
Two more costs a novelist feels. Your drafts sit in that account's chat history, so a lost account can mean lost chapters. And the persona prompts are written to switch off every rule at once, including the ones no tool should ever drop: anything sexual involving a minor, fiction included, and real people.
Nothing to jailbreak: write the scene in KudoWrite
A jailbreak is an argument with someone else's rulebook, and KudoWrite doesn't add one: with no content filter of its own, how far the bedroom door opens is your call within the law. The model keeps its own behaviour: KudoAI's, a current DeepSeek "flash" checkpoint on zero-data-retention hosts that don't train on prompts, was picked partly because it rarely refuses (it wasn't in our study, so there's no rate for it).
No persona, no "it's for my novel" preamble: sketch the beat from her side of the scene and steer it with one line, "slower, and stay in her head", which outranks everything else the engine plans from. The story bible and the book's running summary keep up as you write, so the night in chapter 12 still knows what she promised in chapter 3.
Bring ChatGPT's softened scene in through My Books → Import (.docx, .md, .txt). It's a browser app with an English interface: one free credit once your email is confirmed, then one-off packs from $3.50 for 100 credits, no subscription. Make that scene your first beat and write it the way you meant it.