ChatGPT can read and control your Chrome tabs
Confirmed
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- 3 of 5
- Last verified
- 16 October 2026
Your AI and this story
- GPT-6 Astra168 days after its cutoff
- Claude Opus 5.5107 days after its cutoff
- Gemini 4 Argon198 days after its cutoff
- Grok 4.7137 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 107 days before it.
Key facts
- Announced Oct 15, 2026 on OpenAI’s ChatGPT account on X (as quoted by Unite.AI and Digit); Chrome Web Store listing updated the same day (version 1.26.1005.11759; ~7M users per Unite.AI)
- Chat mode: reads open tabs for context. Work mode: controls tabs to send messages, fill out forms, download files; can also organise and group tabs
- OpenAI’s framing (quoted by Unite.AI): bringing ‘the power of computer use to anyone who uses Chrome’
- Works through the ChatGPT desktop app; browsers: Chrome, Edge, Brave, Opera, Vivaldi (side chat not in Opera); availability depends on rollout and workspace settings
- Permissions (OpenAI docs): ‘By default, ChatGPT asks before it interacts with each new website’ (allow once / for this site / for all sites / decline); allow-all and history access flagged elevated risk; history asked each time; computer use follows the Memories setting
- Background: OpenAI announced on July 9, 2026 that its Atlas browser would stop working on Aug 9, pointing users to the extension; the extension reached Edge, Brave, Opera and Vivaldi on Aug 31 (Unite.AI)
What happened
OpenAI’s Chrome extension used to be a side panel for chatting about a page. From Oct 15 it lets ChatGPT read every open tab (Chat mode) and act inside them (Work mode), using the sites the user is already signed in to. Tasks include sending messages, filling out forms and downloading files. It runs through the ChatGPT desktop app and also works in other Chromium browsers. OpenAI’s documentation describes per-site permission prompts, an allowlist and blocklist under Settings > Computer Use, and an elevated-risk warning for blanket site access and for reading browsing history.
Why it matters
OpenAI dropped its own browser (Atlas, retired in August) and moved computer use into the browser most people already use, with their logged-in sessions. That puts an agent in front of email, banking and work tools. In the same week JPMorgan said it will not let outside agents operate customer accounts. Agent access to logged-in sessions is also where prompt-injection attacks have done the most harm.
Sources
4 sources from 4 sites. Numbers match the chips in the text.
4 sources: 1 primary, 3 press
Primary
- OpenAI docs: ChatGPT browser extensionlearn.chatgpt.com, docs
Press
Changes
- Filed (OpenAI docs and Unite.AI read; OpenAI’s X posts not opened)