ChatGPT can now use your iCloud Mail and Calendar. How to connect it safely

What OpenAI added

On October 27, 2026, OpenAI added two plugins to ChatGPT: iCloud Mail and iCloud Calendar. “Much requested, and now yours to connect,” ChatGPT’s account posted. “Ask ChatGPT to find that email, catch up on your inbox, check what’s next, or update a calendar event.” OpenAI’s release notes say they are “available to all ChatGPT plans on the web, desktop app, and iOS,” Free included. Android isn’t in that list.

They are two plugins, connected separately, and each includes read-only lookup of your iCloud contacts. Contacts and Reminders don’t get plugins of their own in this launch, OpenAI says, and the rollout is global, “subject to workspace app controls” for company accounts.

	iCloud Mail	iCloud Calendar
What OpenAI lists	Find email, catch up on your inbox	Check your schedule, update events
What MacRumors reports it also does	Manage messages and drafts, send email	Schedule new events
Contacts	Read-only lookup	Read-only lookup
Signs in with	Your iCloud Mail address and an app-specific password	Your Apple Account email and an app-specific password
Not included	Gmail, Outlook and other accounts in Apple’s Mail app	Reminders, which get no plugin in this launch

MacRumors adds that the Calendar plugin works with events in the iPhone’s Calendar app and in any other app that uses iCloud Calendar.

How to connect it

1. Turn on two-factor authentication for your Apple Account, if it isn’t on already. Apple requires it for app-specific passwords.
2. Make an app-specific password. Sign in at account.apple.com, open Sign-In and Security, select App-Specific Passwords, then Generate an app-specific password. Make one for Mail and another for Calendar, so you can revoke one without the other. Apple allows 25 at a time.
3. Connect iCloud Mail. In ChatGPT, open Settings > Plugins, select iCloud Mail, then Install plugin or Connect. Enter your iCloud Mail address, ending in @icloud.com, @me.com or @mac.com, and the password. OpenAI’s setup guide says to enter it in the connection form: “do not use your regular Apple password or paste a password into the conversation.”
4. Connect iCloud Calendar the same way, with your primary Apple Account email, which may differ from your iCloud Mail address, and its own password.
5. Use it. Mention the plugin with @ in a conversation, or pick it from the + menu. “Find the email from my landlord about the lease” works better than “go through my inbox,” for reasons below.

If ChatGPT later loses its connection, check the password first. Changing or resetting your Apple Account password revokes every app-specific password, Apple says, so you’d make new ones and reconnect each plugin.

What ChatGPT can see, and what OpenAI keeps

Only iCloud. “ChatGPT can only see your iCloud Mail, not other accounts that are in the iOS Mail app, like Gmail or Outlook,” MacRumors notes. Those services have ChatGPT plugins of their own.

Your mail can train OpenAI’s models. For Free, Go, Plus and Pro, OpenAI “may use information accessed from apps to train our models if your ‘Improve the model for everyone’ setting is on,” and its data controls page says that setting is on by default for Free, Plus and Pro. Turn it off under Settings > Data controls. On Business, Enterprise and Edu, OpenAI doesn’t train on information from apps by default.

ChatGPT may remember it. With Memory on, ChatGPT “may remember relevant information accessed from the app.” Disconnecting the plugin later doesn’t automatically delete those memories, or the conversations that used your mail.

Removing access takes two steps. Apple describes app-specific passwords as the way an app can “access information like mail, contacts, and calendars that you store in iCloud” without collecting your real password. Apple also lets supported apps sign in through an approval screen instead, which you can later undo under Account Data Sharing; ChatGPT’s plugins use the password instead. To cut ChatGPT off, disconnect the plugin in ChatGPT and revoke the password at Apple. OpenAI is plain about it: “Disconnecting an iCloud connection in ChatGPT does not revoke its password at Apple.”

How to keep it in check

ChatGPT’s app permissions decide when it asks before using a plugin. Set a default under Settings > Plugins > Permissions, or a setting for your iCloud account alone from its plugin’s page. The options are:

• Always ask: ChatGPT asks before reading app information or making changes.
• Allow read actions: it reads without asking, and asks before making changes.
• Allow low-risk actions: it approves low-risk actions itself. Higher-risk ones may still need your confirmation.
• Allow all actions: it acts without asking. OpenAI says this “carries elevated risk.”

OpenAI’s examples of actions that may need extra review include “sending an email, message, comment, or invitation” and “creating, editing, or deleting a file or record.”

Mail carries a particular risk: anyone can write to you. A prompt injection, in OpenAI’s words, is when “a third-party—not the user nor the AI—misleads the model by injecting malicious instructions into the conversation context,” and an email can carry those instructions. OpenAI’s own advice uses mail as the example: a broad instruction “such as ‘review my emails and take whatever action is needed’ can make it easier for hidden malicious content to mislead the model,” so “it’s safer to ask your agent to do specific things.” In practice:

1. Keep the Mail plugin on Always ask or Allow read actions.
2. Ask for specific things: “summarize this week’s mail from my bank,” not “deal with my inbox.”
3. Read each approval card before you approve it, and above all one that sends mail or changes an event other people are invited to.

Dots, and the rest of ChatGPT

9to5Mac reports that “both plugins enable ChatGPT Dot compatibility for the first time,” and Engadget that a Pro plan’s dot can use either one. Dots are OpenAI’s always-on agents, on Pro and Business Premium, and they treat a connected app differently from a chat. OpenAI’s dot guide says a dot “can also review that information proactively and form memories from it, even when you haven’t asked a specific question about it.” Disconnecting the app “does not delete information your dot has already obtained from it”; for that you delete the dot. Give a dot your iCloud only if you want it reading your mail on its own.

Two more limits. ChatGPT’s tasks in Work can start when a connected app gets a new event, but the events OpenAI lists are new Gmail messages, new Slack messages and GitHub pull request activity, not iCloud. And 9to5Mac cautions that “various ChatGPT features don’t always work together as expected to start out.”

How Claude compares

Anthropic has no iCloud connector for Claude. Its Google Workspace connectors cover Gmail, Google Calendar and Google Drive, and there Claude “can send, reply to, and forward emails, but only does so with your explicit approval by default.” A request for an iCloud Calendar connector on Claude Code’s GitHub was closed as not planned on May 25, 2026. If your mail and calendar live in iCloud, ChatGPT is now the one of the two with an official way in.

What OpenAI hasn’t said

• The full list of actions. OpenAI’s note names finding email, catching up on your inbox, checking your schedule and updating events. It doesn’t say whether the Mail plugin can delete or move messages. Sending and drafts are in MacRumors’s report, not OpenAI’s note.
• Android. The release notes list the web, the desktop app and iOS only.
• Why a password. OpenAI hasn’t said why the plugins use app-specific passwords rather than Apple’s sign-in for third-party apps, or how it stores the password.
• Triggers. Whether a new iCloud email will be able to start a task in Work, as a new Gmail message can.

We’ll update this memo if OpenAI publishes more of what the plugins can do.