What is chatgpt_dan?

0xk1h0/chatgpt_dan — explained in plain English

Analysis updated 2026-06-24

★ 11,989Audience · generalComplexity · 1/5Setup · easy

Mindmap

mindmap
  root((chatgpt-dan))
    What it does
      ChatGPT jailbreaks
      DAN persona prompts
      Version tracking
    Content
      DAN prompt variants
      Roleplay scripts
      Numbered versions
    Use Cases
      Test AI filters
      Prompt research
    Audience
      AI hobbyists
      Researchers

mindmap root((chatgpt-dan)) What it does ChatGPT jailbreaks DAN persona prompts Version tracking Content DAN prompt variants Roleplay scripts Numbered versions Use Cases Test AI filters Prompt research Audience AI hobbyists Researchers

Click or tap to explore — scroll the page freely

What do people build with it?

USE CASE 1

Copy a DAN prompt into ChatGPT to test how the model responds to roleplay-based persona instructions.

USE CASE 2

Browse multiple jailbreak versions to compare how different prompt techniques attempt to influence AI behavior.

USE CASE 3

Research which prompt variants still work after an OpenAI model update.

How does it compare?

	0xk1h0/chatgpt_dan	ant-design/ant-design-mobile	h2oai/h2ogpt
Stars	11,989	11,989	11,989
Language	—	TypeScript	Python
Setup difficulty	easy	easy	hard
Complexity	1/5	2/5	4/5
Audience	general	vibe coder	developer

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · easy Time to first run · 5min

So what is it?

This repository is a community-maintained collection of text prompts designed to alter how ChatGPT responds. The prompts are called jailbreaks, and the most prominent example is called DAN, which stands for Do Anything Now. The idea is that by including a specific set of instructions in your message to ChatGPT, you can get the model to adopt a persona that ignores or overrides its built-in content guidelines. The DAN prompts take the form of elaborate roleplay instructions. They tell ChatGPT to act as a different AI that has no content restrictions, and they often include fictional consequences for the model refusing to comply, such as a token system where tokens are deducted if the model declines to answer something. Several versions of the DAN prompt are included, numbered from older iterations up through DAN 13.0, which was targeted at GPT-4. Beyond DAN, the collection includes many other named prompt variants, each attempting a different approach to changing the model's behavior. The README notes that contributors are actively testing which prompts still work as OpenAI updates its models, since the company regularly adjusts its systems to make these techniques less effective. The note at the top states that as of July 2023, DAN 12.0 was working with GPT-3.5. The repository contains no code. It is a plain text document listing prompt templates, which users copy and paste into the ChatGPT interface. There are no installation steps or technical requirements beyond having access to a ChatGPT account. The full README is longer than what was shown.

Copy-paste prompts

Prompt 1

Which DAN prompt version in this repository is most likely to work with the current version of GPT-4?

Prompt 2

Explain the token system mechanic in the DAN 13.0 prompt and why it was included as a compliance pressure tactic.

Prompt 3

I want to understand how prompt injection works conceptually. Walk me through what the DAN prompt is doing step by step.

Frequently asked questions