Anthropic has added a built-in browser to Claude Cowork, giving the AI assistant a separate environment for navigating websites and completing web-based tasks. The browser is integrated into the Claude desktop app and can open webpages, read information, click elements and fill out forms when a task requires online access. Unlike Claude in Chrome, the new browser does not run inside the user’s regular browser session.
Anthropic says it does not automatically access existing tabs, bookmarks or saved passwords. The feature is rolling out to Pro, Max and Team users, while Enterprise administrators can manage access for their organizations. Anthropic says the built-in browser carries the same prompt-injection risks as Claude in Chrome.
Claude Cowork Gets A Separate Browser For Web Tasks
Anthropic announced the built-in browser on August 26, saying it allows Claude to handle the web portion of a Cowork task without relying on the user’s existing browser. When a task requires a website, a browser opens in Cowork’s side panel, where Claude can navigate pages, read information, click buttons, type text and fill out forms. The company gives several examples, including gathering information for a report, collecting figures from an online dashboard and retrieving invoices from a vendor portal. It can also work with websites that do not have a dedicated Claude connector.
The main distinction is between the new Cowork browser and Claude in Chrome. Anthropic’s Chrome integration is designed for situations where Claude needs to work with a webpage the user already has open or an account they are already signed into. Claude in Chrome reads and interacts with pages, moves between tabs and fills forms using existing logins. The Cowork browser takes a different approach. Anthropic describes it as a separate browser that does not automatically share the user’s existing tabs, bookmarks or passwords. Users can choose to transfer supported logins when they need Claude to remain signed in to a particular website. Banking, email and single sign-on sites are excluded from that process unless the user specifically chooses to include them.
Cowork now has its own built-in browser
by u/ClaudeOfficial in ClaudeAI
The distinction has also drawn attention from users discussing the update on Reddit. In the ClaudeAI discussion, users highlighted that Cowork can now access websites without installing the Chrome extension and that the new browser is separate from their normal browser environment. The change comes alongside broader development of Cowork and Claude’s browser capabilities. Anthropic’s Claude Cowork product page describes Cowork as a tool for multi-step work such as research, analysis and document creation, while the desktop application can use a browser when a task requires access to a website.
Browser Separation Does Not Remove AI Security Risks
Separation limits what Claude starts with, but it does not remove the risks of giving an AI agent control over websites. The main concern is prompt injection, where a webpage carries instructions aimed at an AI agent rather than a human reader, attempting to redirect it from the user’s original task. Anthropic says the browser carries the same prompt-injection risk as Claude in Chrome, and that its safeguards, which check actions against the user’s original request, cannot eliminate the risk.
The distinction between browser separation and complete security isolation is therefore important. Claude does not automatically inherit the user’s existing tabs, bookmarks or saved passwords, but it still visits external websites and processes information found on those pages. Anthropic has previously described prompt injection as malicious instructions hidden in websites, emails or documents that can attempt to persuade an AI agent to act against a user’s wishes. The company’s Claude in Chrome security explanation says it uses a safety classifier to assess browser actions before they are performed.
Cowork users: The browser extension delivers better web research results than built-in tools
by u/rebelytics in ClaudeAI
There is also some indication from earlier Cowork users that browser-based research has had practical limitations. A Reddit discussion from March included users comparing Cowork’s earlier browser capabilities with the Chrome extension, with one user reporting that websites could block automated access and that search results could sometimes be outdated. These are individual user experiences rather than evidence of a general product limitation, but they provide some context for why the new browser could matter for web-based tasks.
The built-in browser is rolling out this week to Pro, Max and Team users through the Claude desktop app on macOS, Windows and Linux, with Windows and Linux listed as beta. Enterprise customers can have administrators manage the feature through organization settings. The update therefore gives Cowork a separate way to interact with websites without automatically using the user’s existing browser session. It also leaves the security considerations of AI-controlled browsing in place, meaning the new separation addresses what information Claude starts with, rather than removing the risks involved in letting an AI navigate and act on external webpages.
