Anthropic integrates built-in browser into Claude desktop app

Anthropic has integrated a dedicated Chromium-based browser into Claude's desktop application, bringing web browsing capabilities directly into the AI assistant without the need for external tools. The feature, rolling out to Pro, Max, and Team plan subscribers on Mac, Windows, and Linux, positions Claude's functionality closer to competing offerings like OpenAI's ChatGPT.

Moving beyond browser extensions#

The upgrade represents a significant shift from the previous approach, which required users to install a separate Chrome extension to enable web access. While that workaround functioned adequately, embedding a native browser within the application streamlines workflows and eliminates friction points. Users can now screenshot web content and discuss it with Claude in a single interface.

The company emphasizes that this built-in browser—known as Cowork—serves a distinct purpose from its Chrome extension. According to Anthropic, the extension remains valuable when you need Claude to interact with pages you're already viewing in your personal browser, such as updating CRM systems, managing email, or editing documents with your existing login credentials. By contrast, the embedded browser is useful for standalone web tasks that don't require your personal accounts.

Handling credentials safely#

Since the built-in browser operates separately from your regular browsing environment, it doesn't automatically have access to your saved logins. Anthropic has addressed this by allowing users to import credentials from Chrome, Edge, and Firefox on macOS, and from Firefox on Windows and Linux. However, the company deliberately excludes banking sites, email providers, and single sign-on services from automatic import, unless users explicitly grant permission.

The platform variation—notably the absence of Chrome and Edge credential support on Windows and Linux—stems from technical security measures. Windows versions of Chrome and Edge prevent third-party applications from accessing local cookies as an anti-theft safeguard, while Firefox stores credentials in a plain SQLite format. On macOS, Chrome's stored keys live in Keychain and can be accessed with user consent.

Weighing security trade-offs#

Anthropic acknowledges that prompt injection attacks remain a genuine risk when deploying AI agents on the open web. The company has incorporated protective measures into both the extension and the built-in browser, yet it refrains from claiming complete safety. Since the embedded browser typically lacks access to high-security accounts, potential damage from a compromise would likely be limited compared to exposing your primary browser with all your logged-in services.