Claude's Built-In Browser, Checked: Can You Uninstall the Chrome Extension? Who Gets It, and Why It Won't Open Your Bank

On 2026-08-26, Anthropic announced that Cowork in the Claude desktop app now ships with a browser of its own. Hand Claude a task that touches a website and a browser opens in the side panel, where Claude navigates, reads, clicks, and fills in forms until the job is done.

The news here is not that an AI can browse the web. That shipped a long time ago. The news is that it no longer has to borrow your Chrome. That distinction changes the privacy picture, changes whether you should keep the extension installed, and changes which tasks it will refuse to touch. This piece skips the press release and answers three questions: who gets it, how it differs from the extension, and what it deliberately will not do.

The news in three sentences

1. Cowork on desktop now has a built-in browser. No extension, no setup. When a task needs a website, it opens on its own.
2. The official product page is specific: the built-in browser is available in the Cowork desktop app on Pro, Max, and Team plans, with Enterprise admins enabling it for their org. The free tier gets none of it — the free tier does not include Cowork at all.
3. It is a separate browser from yours. It cannot see your tabs, bookmarks, or passwords, and banking, email, and single sign-on sites are excluded by default.

Who gets it: check the plan, then check the OS

Cowork itself is included with every paid plan at no extra charge, but the built-in browser is a desktop-app feature. Stack both conditions and you get this:

Prices come from the verification log on our Claude tool page, not from this announcement. Pricing and feature rollouts are two separate tracks — do not read one as the other.

On operating systems, the official product page lists Cowork desktop support for macOS, Windows, Windows ARM64, Linux, and ChromeOS, with Linux marked beta. The announcement says it is rolling out over the week, which means staged delivery, not a single global switch. If you open the desktop app and see nothing, that is expected for now.

How it differs from the Chrome extension: one word, “borrow”

Anthropic already shipped Claude in Chrome, which also clicks and fills forms. The practical difference fits in a sentence: the extension borrows your browser; the built-in one brings its own.

One point gets misread constantly: the built-in browser shipping does not mean the extension is dead. Coverage and the official line agree that you can switch back to the extension in settings. The real trade-off is convenience (your existing logins, any site) versus isolation (it never touches your passwords).

Why it will not open your bank: that is the design, not a bug

This is the part most likely to be filed as a defect. The built-in browser excludes banking, email, and SSO sites by default. Unless you import credentials for a specific site yourself, it simply does not get in.

The reasoning is not hard to follow. An agent that reads pages and clicks buttons on its own, while holding a live session to your bank, is a different risk category entirely. So the product sits closer to a tool for retrieving and organising public information than a robot that operates your accounts.

Tasks that fit:

• Pull numbers out of a dashboard that has no API and no connector
• Fill in a public online form
• Page through a site and turn it into a list

Tasks that do not:

• Check a bank balance, read your inbox, sign in to a corporate SSO portal

It is not refusing. It was never let in.

Prompt injection: Anthropic says outright it cannot be eliminated

Any AI that acts on what a web page says inherits prompt injection — text hidden in a page that impersonates your instructions and steers the agent somewhere else.

Anthropic is candid about it. The built-in browser runs the same defences as Claude in Chrome, including checks that compare what Claude is doing against what you actually asked for. But those measures only “meaningfully reduce the risk” — they do not remove it. The official advice is equally plain: start with sites you trust.

The practical version: do not point it at unfamiliar sites and let it do irreversible things — submitting, paying, deleting. It is not bulletproof.

What we could not verify, so we did not write it down

House rule: if the official docs and the original reporting do not answer it, it stays marked unverified.

• When it lands for users in Taiwan. The announcement says “this week,” with no regional schedule.
• How usage is metered. Whether the built-in browser draws on a separate Cowork allowance, and how it nets against normal chat limits, is not stated.
• When Linux leaves beta. No timeline given.
• Session limits. How many tabs per session, or any time cap, is not published.
• Whether it will reach the free tier. Not mentioned. Given that Cowork itself is paid-only, do not hold your breath.

What it actually means for you

If you already pay for Pro or above and have the extension installed: try routing everyday web tasks to the built-in browser, and keep the extension as a fallback for anything that needs your existing logins. No rush to uninstall.

If you are on the free tier: this changes nothing for you. No Cowork, no built-in browser. The entry point is Pro at US$20 a month.

If privacy is why you never installed the extension: this is the version you were waiting for. It cannot see your tabs, bookmarks, or passwords, and banking and email are walled off by default. Prompt injection risk still applies, so draw your own trust boundary.

Official sources and further reading

Official sources, read directly on 2026-08-30

• Anthropic announcement: https://claude.com/blog/cowork-built-in-browser
• Claude Cowork product page (plans and platform support): https://claude.com/product/cowork
• Official pricing page: https://claude.com/pricing

Related checks on this site

• Claude tool page: plans and free-tier verification log
• Claude Code weekly limit boost, checked
• Perplexity Portable Computer, checked: the hardware floor for local agents
• Agent Plugins 1.0: the shared spec for the agent ecosystem

This is a news check and impact analysis, not purchase or investment advice. Plan prices reflect whatever the official pricing page shows at the time you read it. Last checked: 2026-08-30.