can chatgpt see your chrome tabs?
as of october 2026, yes, once you install openai's chatgpt extension and bring chrome into a chat. on october 15, 2026, openai's chatgpt account said that in chat it can look across your open tabs and gather info, and that in work it can control those tabs to send messages, fill out forms or download files.
it does not happen by default. the extension has to be installed and connected, and openai's docs say chatgpt asks before it interacts with each new website unless you change that. chatgpt browser history access needs your approval each time.
our verdict: so can chatgpt see your chrome tabs? yes, after you connect it, inside the chrome profile where it is installed. use it for research and form filling, keep allow once as your default, and keep banking and admin sites on the blocklist.
what did openai ship for chrome this week?
openai's thread described a few upgrades. two matter here, both inside the existing chatgpt chrome extension. the first lets chatgpt use your chrome tabs as context in chat and act in them in work, including organizing and grouping a pile of open tabs. the second is chatgpt side chat, a panel beside the page with your entire chatgpt history right there while you browse.
openai's thread closes with "available for all chatgpt plans," though its docs add that browser availability can depend on rollout and your workspace settings. its pricing docs say chatgpt work and codex are included in free, go, plus, pro, business, edu and enterprise. the individual cards list free at $0, go at $8, plus at $20 and pro from $100, all per month, and usage allowances vary by plan.
the chrome web store listing, offered by openai, showed 7,000,000 users and a 2.2 out of 5 rating from 922 ratings when we checked on october 17, 2026, with an update dated the day of the announcement. the verge put it plainly: "chatgpt can peek at your chrome tabs now."
this lands after openai retired its own browser. the openai help center says chatgpt atlas has been retired and no longer receives updates. our september 3, 2026 piece on ai browsers and what they do with your history covers how that browser handled your trail.
what can chatgpt see in chrome, mode by mode?
what chatgpt can use depends on where you start the request. this table follows openai's browser extension docs.
| where you start | what chatgpt can use | can it act on the page? |
|---|---|---|
| side chat panel | the page you are on, text you highlight, open tabs when a task needs them, youtube transcripts when captions exist | it can continue into a task |
| chat, with a tab mention | the open tabs you bring in, to gather info | no, openai's thread puts tab control in work |
| @chrome in a work or codex chat | sites where you are already signed in, such as gmail or salesforce | yes: messages, forms, downloads, tab groups |
| browser history | entries relevant to the request, after you approve | not applicable, it is context |
| @browser, the built in browser | a separate profile that does not automatically share your tabs or session | yes, inside chatgpt |
openai's docs list five browsers: chrome, edge, brave, opera and vivaldi. opera gets tab mentions and browser control but no side chat, and all of them share the same website permissions.
does chatgpt read all your tabs automatically?
no. it needs setup, and then it asks per site. openai's steps:
- in the chatgpt desktop app, open settings > computer use and select chrome.
- install the extension from its store page and review chrome's permission prompts.
- back in computer use, confirm chrome shows manage.
- start a work or codex chat and pick chrome with an @ mention, in the profile where you installed the extension. side chat opens from the toolbar, or with cmd+shift+. on macos.
after that, website access is a per site decision based on the host, such as example.com. the choices are allow once, allow for this site, allow for all sites, or decline. openai labels allow for all sites as elevated risk, and it labels browser history the same way.
history access is scoped to the request and has no always allow option. your allowlist and blocklist live under settings > computer use > manage.
workspace admins can go further. openai's work local security notes say supported browser use policies can restrict site access, uploads, downloads and history, and a user approval cannot override an administrator's denial.
what does chrome's permission prompt actually grant?
the install prompt is broad, and openai says these permissions are what make it capable of operating browser workflows. its docs say chrome's prompt may include:
- access the page debugger
- read and change all your data on all websites
- read and change your browsing history on all your signed in devices
- display notifications
- read and change your bookmarks
- manage your downloads
- communicate with cooperating native applications
- view and manage your tab groups
openai says chatgpt still applies its own confirmations, settings, allowlists and blocklists before it uses websites or history in a task. the store listing's privacy section says the extension handles categories including web history, website content, personal communications and authentication information, and declares the data is not sold to third parties outside approved use cases.
our read: the chrome prompt is the ceiling. the chatgpt prompts are the floor you actually stand on, so set them on purpose.
what does openai keep from your tabs?
only what lands in the chat, by openai's account. the extension docs say openai doesn't store a separate complete record of your browser actions. it stores browser activity when it becomes part of chatgpt context, such as text read from a page, screenshots, tool calls, summaries and messages. your chatgpt data controls then apply.
openai says computer use follows your memories setting, so with memories on, chatgpt can use relevant saved memories while it works in your browser. and local is not the same as on device. openai's work local security notes, written for workspace admins, say "local execution does not mean offline or device-only model inference," and that browser content, screenshots and tool results may be sent to openai services to complete a task.
for what happens to chats after that, see where do your ai conversations go.
is the chatgpt chrome extension safe?
it is as safe as the sites you let it touch, in our view. openai's own docs set the terms: treat page content as untrusted, and remember that sites may treat approved clicks, form submissions and signed in actions as coming from your account. they also warn that malicious page content can raise the risk of chatgpt copying history somewhere unintended.
that is prompt injection, which we explain in what is prompt injection. our practical rules:
- keep allow once as your default, and never pick allow for all sites on a profile that holds your bank.
- put banking, payroll and admin consoles on the blocklist.
- use @browser for sites you have not vetted, since its profile is separate from your regular browser.
- stay present for payments, account settings and anything involving credentials.
- avoid secrets in browser tasks unless they are required and you are there to review each prompt, which openai also advises.
for screens in general, see is it safe to let ai see your screen.
does chatgpt in chrome work on a mac?
yes. openai offers the chatgpt desktop app for macos and windows, plus a linux guide.
computer use is a separate path. openai's computer use docs say it is available on macos and windows in supported regions, and on a mac it asks for screen recording and accessibility permissions so chatgpt can see and operate other apps. openai's security notes treat the chrome extension and computer use driving a browser as different paths with different policies. we compared the desktop agents in computer use agents on a mac.
should you turn it on?
turn it on if you live in chrome and keep retyping what is already in your tabs. comparing pricing pages, filling a registration form or putting the vendors in your tabs into a comparison sheet are among the tasks openai suggested, and they suit it. skip it, or use a separate chrome profile, if your main one is signed into banking, payroll or production admin.
in our view, the extension is about the tabs in front of you. it is not built to be a searchable record of everything you saw across apps last week. our september 3, 2026 guide, can chatgpt see my screen, found the same split for screen sharing: live help, no archive.
keep a record of what you saw
our take: let chatgpt work in your tabs, and keep the record of what you saw somewhere you control.
remynd is a mac app that captures the focused window, runs ocr locally with apple vision, and keeps the searchable index on your mac. you can exclude apps and sites, so the bank tab you blocked in chatgpt can stay out of your archive too, and recordings are kept for 30 days by default. its agent window runs your own claude code or codex cli against that read only history.
download remynd for mac and keep your memory when you change assistants.