How To Fix ChatGPT Login Error Access Denied Easily 2026

When ChatGPT blocks a request, it doesn't show a generic "can't log in" message. It shows a full Cloudflare access-denied page with a Ray ID, a timestamp, your detected IP address, and an error reference number, most commonly 1020.

Cloudflare's own documentation describes 1020 as a firewall rule blocking the request before it ever reaches the site's own servers, which is why re-entering your password does nothing. Officially, Cloudflare's guidance for a visitor who hits this is to pass the Ray ID to the site owner so they can check their firewall logs, since only the site owner can see why the rule fired. In practice, most people get past it without contacting anyone, because the things that trip the rule (a flagged IP, stale cookies, a proxying extension) are fixable from your side too, and the rest of this guide covers those.

Corrupted or outdated session cookies are a frequent cause of this error, especially after logging in and out multiple times or switching accounts. In Chrome, go to Settings, then Privacy and security, then Site settings, and search for chatgpt.com under All sites.

Delete the site data: this signs you out of any open ChatGPT tabs and clears its stored cookies and offline data, which is exactly what you want when the session itself is the problem. Sign-in for ChatGPT also passes through OpenAI's separate account domain, so if clearing chatgpt.com alone doesn't help, clear site data for openai.com too.

Close the browser fully afterward, not just the tab, then reopen it and log in fresh. The equivalent option exists under Privacy in Safari and Edge.

Cloudflare's firewall is aggressive about IP addresses that look like VPN exit nodes, data-center proxies, or shared hosting ranges, and this is the single most commonly cited cause of error 1020 across Cloudflare's own community reports. If you have a VPN extension installed, such as CyberGhost or a similar proxy tool sitting in your browser's extensions list, disable it before retrying.

The toggle next to the extension is enough; you don't need to uninstall it. The same applies to a system-level VPN app running outside the browser and to any "unblocker" or ad blocker that reroutes traffic. Once it's off, refresh the page instead of reusing the old tab, since the blocked request may still be cached.

Opening ChatGPT in a private or incognito window strips out extensions, cached cookies, and saved session data at once, so it's a fast way to check whether the problem is environmental instead of account-related. If login works fine in incognito, the fix is almost certainly the cache-and-cookie cleanup or the extension disabled in the earlier steps. While troubleshooting, confirm Chrome, Safari, or Edge is updated to its latest version; an outdated browser can fail Cloudflare's newer checks and get flagged the same way a suspicious IP does.

If clearing cookies and disabling your VPN doesn't resolve it, visit status.openai.com to see whether ChatGPT or the login service is experiencing a broader incident. During real outages, the access-denied or error-1020 message can appear for everyone in a region at once, and no amount of local troubleshooting fixes a server-side problem. The page also shows recent incident history, so you can confirm whether this is specific to you or something OpenAI is already handling.

The ChatGPT app on iOS and Android hits the same backend and Cloudflare protection as the website, so the identical error can show up there. Force-close the app, then check whether a VPN profile is active in your phone's settings, since mobile VPN apps trigger the block just as often as a browser extension. If the app still won't log in, sign out completely, clear the app's cache from your phone's app settings (or uninstall and reinstall it), and log back in on a plain mobile data or Wi-Fi connection with no VPN running.