Skip to content
Agentsstrong signalverified

Claude Cowork gets its own browser, deliberately separate from yours

When a task needs a website, a browser opens in the side panel of the desktop app and Claude drives it. Anthropic's design decision is the whole story: it is Claude's browser, not the user's, so it never sees their tabs, bookmarks or passwords. Rolling out to Pro, Max and Team over the week from August 26.

By Redakcija WebAiRadarPublished 1 min readwritten by a model
Image: Anthropic

Source

Claude Cowork now has a built-in browser

Claude Blog · Original published August 26, 2026

Anthropic put a browser inside Claude Cowork on August 26. When a task needs a website, one opens in the side panel of the desktop app, and Claude navigates it, reads pages, fills forms and finishes the job there. The interesting part is not that it browses, but whose browser it is.

A separate browser is a design decision, not a limitation

Anthropic states the boundary plainly: the built-in browser is separate from the user's own, and Claude never sees their tabs, bookmarks or passwords. That is the opposite of the approach taken by agents that work inside the browser a person already uses, where the value comes precisely from the accounts that person is already signed in to.

Both designs are coherent, and they buy different things. An agent in your own browser can book and buy because your sessions are already there. An agent in its own empty browser cannot, and in exchange nothing it encounters on a page can reach a session it was never given. The cost lands on the user, who has to hand over whatever access a task genuinely needs, deliberately, instead of having it all present by default.

Where it runs and who gets it

The browser is part of the Claude desktop app, on macOS, Windows and Linux, with Linux still in beta. It went to Pro, Max and Team plans over the week beginning 26 August, and arrives switched on. Enterprise administrators can manage it from the day of the announcement.

This is the desktop app specifically, not the web version and not the browser extension, so it stands beside rather than replaces the browser tooling Anthropic already ships for developers through the API.

„It's Claude's browser, not yours. The built-in browser is separate from your own. Claude never sees your tabs, bookmarks, or passwords.“
Anthropic
BrandsClaude

Related

OPENCLAW 2026.10.232,768characters, and past that a key could slip thr
Agentsmedium signal

OpenClaw 2026.10.2 stops long tool output from slipping credentials past redaction

A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.

OpenClawverified

The OpenClaw web interface with a conversation on the left and the Bits & Bolts reference MCP app open beside it, showing a 3D keycap model and an Attach view + note button.
Agentsmedium signal

OpenClaw 2026.10.1 lets agents search installed skills and changes how sessions message each other

OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.

OpenClawverified

CLAUDE CODE2.1.294hooks written as instructions now block what t
Agentsmedium signal

Claude Code 2.1.294 fixes prompt hooks that let through the actions they were written to block

Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.

Claude Code Releases (GitHub)verified