Quick answer
Anthropic released two related browser-agent updates on August 26, 2026. Claude Cowork now has a separate browser built into the Claude desktop app for delegated web tasks without an extension. Claude in Chrome is now generally available on paid Claude plans and works in the user's existing Chrome session, tabs, and signed-in accounts. Both can navigate, read, click, type, and fill forms, but they expose different browser context and require different setup.
What Anthropic released
Claude Cowork now includes a browser inside the Claude desktop app. When a task needs a website, Claude can open that separate browser in a side panel and navigate pages, read content, click controls, type, and fill forms. On the same day, Anthropic moved Claude in Chrome from its pilot to general availability for every paid Claude plan and expanded its ability to take browser actions without asking for approval at every step.
Quick verdict: use the built-in browser for handoffs and Chrome for an open page
The built-in Cowork browser is designed for handing off a web task while the user continues other work. It runs separately from the user's everyday browser. Claude in Chrome is intended for work on a page that is already open, using the tabs and signed-in accounts in the user's Chrome session. The choice is therefore about which browser context the task needs, not which product has a universally better agent.
The Cowork browser is separate from personal browsing
Anthropic says the Cowork browser does not automatically see the user's tabs, bookmarks, or passwords. Users can bring over logins site by site from Chrome, Edge, or Firefox on macOS and from Firefox on Windows and Linux. Banking, email, and single-sign-on sites are excluded from that transfer unless the user chooses to include them. This separation can reduce unnecessary browser exposure, but a user still needs to review which accounts are connected.
Sources: Anthropic
Claude in Chrome uses the current browser session
Claude in Chrome can view the page in front of the user and act with the existing Chrome logins. Anthropic lists reading and typing text, clicking links, navigating across pages, and completing forms among its actions. This is useful for a task that depends on an already-open dashboard, inbox, CRM, or document, but it also means the agent is working closer to sensitive browsing context.
Sources: Anthropic
Availability and device requirements differ
Anthropic says the built-in browser is rolling out to Pro, Max, and Team plans in the Claude desktop app on macOS, Windows, and Linux, while Enterprise administrators can enable it for their organizations. A web or mobile session can steer the built-in browser only while the desktop app remains open and online. Claude in Chrome is generally available on paid plans and remains the browser option when using Claude on the web without the desktop app.
Autonomous browser actions still carry prompt-injection risk
A browser agent can encounter hidden instructions inside webpages, emails, documents, or form fields that try to redirect it away from the user's request. Anthropic says both browser options use safeguards that inspect content and proposed actions, but it also says those measures cannot remove the risk. Start with trusted sites, give the agent the minimum access needed, review consequential actions, and avoid delegating sensitive financial, identity, or security changes without direct supervision.
Frequently asked questions
What readers usually ask
Does Claude Cowork now include a browser?
Yes. Anthropic added a separate browser inside the Claude desktop app for Cowork tasks that need to navigate websites, read pages, click, type, or fill forms.
What is the difference between Claude Cowork's browser and Claude in Chrome?
Cowork's built-in browser is separate from the user's everyday browser and is designed for delegated tasks. Claude in Chrome works with an existing Chrome session, open pages, and signed-in accounts.
Can the Cowork browser see personal Chrome tabs and passwords?
Not automatically. Anthropic says it cannot see personal tabs, bookmarks, or passwords. Users may transfer selected site logins into the separate browser.
Which Claude plans get the built-in browser?
Anthropic says it is rolling out to Pro, Max, and Team plans in the desktop app, while Enterprise administrators can enable it for their organizations.
Is an autonomous browser agent safe from prompt injection?
No safeguard removes the risk completely. Anthropic describes classifiers and action checks for both browser options but still recommends beginning with trusted sites and supervising sensitive work.
Evidence