Anthropic announced on August 26, 2026 that Claude Cowork is gaining a built-in browser in the desktop app. When a task needs the web, Cowork can open a separate browser in its side panel and navigate pages, click, type, and fill forms. The user can hand off the web portion of a task while continuing work in the rest of the desktop workspace.
The feature addresses a practical integration gap. Many internal dashboards, vendor portals, and legacy systems do not have a formal connector, even though a person can use them through a browser. Anthropic gives examples such as gathering research for a report and collecting invoices from a vendor portal. Cowork's browser is separate from the user's current browser, so it does not automatically see existing tabs, bookmarks, or passwords. Logins can be brought over site by site; banking, email, and single sign-on sites are excluded unless the user chooses to include them.
This update should be distinguished from Anthropic's separate August 26 announcement that Claude in Chrome is generally available. Claude in Chrome is for the page a user already has open and is signed into, such as updating a CRM or working through an inbox. Cowork's built-in browser is for handing off an independent web task without installing an extension or sharing the user's whole browser environment. Both move Claude toward tool execution, but their trust boundaries and login flows differ.
Anthropic says the built-in browser uses the same family of safeguards as Claude in Chrome, including scanning page content for prompt injection and checking actions against the original request before they run. Those measures reduce risk but cannot eliminate malicious pages, mistaken decisions, or account-permission problems. Enterprises should start with low-risk, reversible sites and clearly bounded data rather than immediately handing an agent email or payment workflows.
The feature is rolling out to Pro, Max, and Team plans in the Claude desktop app, while Enterprise administrators can enable it in organization settings. Anthropic labels the rollout beta, so operating-system support, account eligibility, and login support may change. Even when an agent cannot see the full browser context, it can still process data returned by pages; website content, forms, and third-party connectors should therefore be treated as untrusted input.
The significance is not that having a browser makes every website automatable. It is that web tasks become a tool layer that Cowork can orchestrate. A responsible rollout needs an allowlist of sites, action limits, approval points, recovery procedures, and logs. Without those controls, the agent may turn manual copying between websites into automation that is harder to trace.
