How to Get ChatGPT Session JSON (2026): Extract the Access Token, Paste It, and Fix Errors
TL;DR: It takes 3 steps. Log in at chatgpt.com on a computer → open
https://chatgpt.com/api/auth/session→ press Ctrl+A and Ctrl+C to copy the whole block, then Ctrl+V it into the order form. The input border turns green when the format is valid. The most common mistake is copying only theey...token instead of the entire JSON block — the validator needs the full JSON with the accessToken, user, and account fields.
Below, each step is explained in full: what it is, why it works that way, and what to do when you get stuck.
📚 Table of Contents (click to jump)
- Why Does a Top-Up Need Session JSON?
- Standard Steps (Desktop Browser, Recommended)
- Can I Do This on My Phone?
- Error Lookup Table
- Security Notes
- FAQ
Why Does a Top-Up Need Session JSON?
The idea behind a direct top-up is that the subscription is purchased on your own account, which requires a credential proving "this is your account." Session JSON is that credential: a block of login data returned by the official ChatGPT endpoint, containing three key fields — accessToken (a temporary access token), user (account email and similar), and account (account information).
Two points up front so you're not uneasy:
- It isn't your password. The process doesn't require — and shouldn't be given — your ChatGPT password. The Access Token is a temporary credential that expires and stops working.
- It's deleted once used. The token is used only for this top-up and stored encrypted, and it is automatically deleted after a successful top-up (this is also written in the prompt on the order page).
If you don't have a ChatGPT account ready yet, start with the ChatGPT registration guide (2026, no phone number needed).
Standard Steps (Desktop Browser, Recommended)
- Sign in to ChatGPT: open chatgpt.com in your browser (Chrome or Edge recommended) and confirm the account in the top-right is the one you want to top up — multi-account users who top up the wrong account almost always fail right here.
- Open the session endpoint: in the same browser, open a new tab and go to
https://chatgpt.com/api/auth/session(the order page's second step has this link with a copy button, so you can just click through). - Select all and copy: the page shows a block of text starting with
{and ending with}— that is the Session JSON, and there's no file to download. Press Ctrl+A to select all and Ctrl+C to copy (Cmd+A / Cmd+C on Mac). - Paste and submit: go back to the order page and paste with Ctrl+V into the input field. When the format is valid the border turns green and a "✓ Session data format is valid" message appears, and the page scrolls to the submit button.
One common misunderstanding is worth calling out on its own: many users expect to receive a "JSON file," and panic when opening the link shows a screen of raw characters. That screen of characters is the entire thing you need to copy — select all and copy. There is no file to download.
Can I Do This on My Phone?
Yes, but the experience is mediocre: sign in to chatgpt.com in your mobile browser, open the same link, then press and hold the text → select all → copy. The small screen makes it easy to miss part of the selection, so desktop is strongly preferred. If you only have a phone, watch the format validation message at the bottom after pasting — if the red text says something is missing, go back and select all again.
Error Lookup Table
Check the quick table first, then find your specific case below:
| Error / symptom | Cause in one line | Fix in one line |
|---|---|---|
The link shows only {} or a short fragment | Not signed in, or the session has expired | Go back to chatgpt.com, sign in, then refresh |
| Only a warning_banner, no accessToken | Incomplete login state | Sign out and back in, or use an incognito window |
| Says accessToken / user / account is missing | You copied a signed-out response | Refresh until it takes effect, then select all and copy again |
| Says it needs the full JSON, not a bare token | You copied only the ey... token | Go back to the page, select all, and copy the whole block |
| Says "JSON format error" | Copy is incomplete or has extra content mixed in | Clear the field and start over; don't hand-edit characters |
1. Opening the link shows only {} or a short fragment
Cause: the current browser isn't signed in to ChatGPT, or the session has expired. The session endpoint returns full data only to a signed-in browser. Fix: go back to chatgpt.com and sign in (or sign out and back in), then refresh the session page.
2. The response has only a warning_banner and no accessToken
Cause: an incomplete login state. Common when you haven't signed in for a long time, when a browser privacy extension is blocking the API, or when you're using an embedded browser (opening it inside WeChat, for example). Fix: in Chrome or Edge, fully sign out of ChatGPT → sign in again → open the session link. If it still fails, use an incognito window and sign in from scratch.
3. It says "please paste the complete Session JSON data, not a bare accessToken"
Cause: you copied only the long string starting with ey. Validation needs the entire JSON block (containing the accessToken, user, and account fields); a bare token isn't enough. Fix: go back to the session page, press Ctrl+A, and start over from { to } without missing a single character.
4. It says "JSON format error, please make sure you copied the complete data"
Cause: the copy is incomplete (the opening or closing is missing), or extra content got mixed in when pasting. Fix: clear the input field, go back to the session page, and redo Ctrl+A → Ctrl+C → Ctrl+V. Don't manually delete or edit any characters.
5. It says "Session data incomplete, missing required fields: accessToken / user / account"
Cause: you copied an incomplete response, or one from a signed-out state. Fix: confirm you're signed in, refresh the session page, and select all and copy again. If accessToken keeps coming back missing, handle the login state as described in item 2.
Security Notes
Session JSON is effectively a login credential valid for a limited time, so paste it only into the official order page:
- Don't send it to any chat group or social app, including private messages from someone claiming to be "support" — legitimate flows never ask you to submit a token outside the web page
- Don't save it in a notes app or hand it to someone else to act on your behalf
- After the top-up completes there's nothing to clean up — the platform deletes it automatically. You can also proactively sign out of ChatGPT once, which immediately invalidates the old token.
Related next steps: to confirm whether the subscription went through, see the ChatGPT subscription status guide; if your account has a problem and you need a refund or an appeal, see the OpenAI/ChatGPT account deactivation appeal and refund guide.
FAQ
Q: Is the Access Token the same as my ChatGPT password? A: No. The whole top-up process never requires your password. The Access Token is a temporary access token returned by the official endpoint — it has an expiry, and the platform deletes it automatically after a successful top-up.
Q: The session link shows a screen full of English characters. Is that normal? A: Yes — that is the Session JSON you need to copy. It's not an error page, and there's no file to download. Just Ctrl+A and Ctrl+C.
Q: Will the session data leak my chat history? A: No. Session JSON contains login credentials and basic account information (email and so on); it doesn't include conversation content. The platform stores it encrypted and deletes it after a successful top-up.
Q: How long until the Access Token expires? A: It's a temporary credential and won't stay valid long-term. If it expires between ordering and processing, the platform emails you an "update your Access Token" request — follow the link in that email to supply a new one.
Q: Can I complete a top-up on my phone? A: Yes. Sign in with your mobile browser, open the same link, press and hold to select all and copy. But the small screen makes it easy to miss characters, so desktop is preferred.
Q: Is Session JSON a file? Do I need to download it? A: It's not a file and there's nothing to download. When you open the link, the screen of characters is the Session JSON itself — select all from { to } and copy.
Need to top up ChatGPT? Visit the top-up page for supported plans, payment methods, and delivery.