Claude now does web tasks in a built-in desktop browser
Po / Money and Products desk
Claude got its own browser. Announced by Anthropic on August 26, 2026 and rolling out through the week, the built-in browser turns web errands into something the assistant does in front of you rather than something it asks you to do.
How it works
When a Cowork task in the Claude desktop app involves a website, a browser opens in a side panel and Claude navigates, reads pages, clicks, types and fills forms while the user watches. There is no extension and no setup. It ships on macOS and Windows, with Linux in beta, for Pro, Max and Team plans; Enterprise organizations get it when an administrator enables it.
The operational details matter. The desktop app has to stay open and online, because the browser lives there even when the Cowork session runs in the cloud. Claude does not see the user’s own tabs, bookmarks or passwords. Logins can be selectively imported from Chrome, Edge or Firefox, with banking, email and single sign-on accounts excluded unless explicitly included. The browser carries the same prompt-injection safeguards as Claude in Chrome, with Anthropic’s caveat that the risks cannot be entirely eliminated.
Why it matters
In July, Claude Code received a sandboxed built-in browser for development tasks; this release graduates the idea to general office work, the form-filling and portal-clicking that fills the unglamorous half of a workday. Every major lab is converging on the same design, an agent behind a browser, because the web is where most digital busywork lives. The differences that will matter are exactly the ones in the fine print: what the agent can reach, what it imports, and what stands between it and a hostile webpage.
Sources
Related
Claude Code adds a session link to every commit by default
Developers on r/ClaudeAI and GitHub noticed that Claude Code appends a session URL (claude.ai/code/session_...) to every commit message and pull request description it creates. The behavior is on by default and is not mentioned during onboarding, so many users discovered the links only after they had accumulated in repository history. Several GitHub issues asked for it to be opt-in; a dedicated sessionUrl opt-out switch shipped in version 2.1.183, configurable through the attribution block in settings.json.
Claude Code weekly limits drop 17 percent on September 14
Anthropic's promotional 50 percent boost to Claude Code weekly usage limits ends September 13, 2026. From September 14 the permanent baseline rises 25 percent instead, which works out to 17 percent less than what subscribers on Pro, Max, Team and seat-based Enterprise plans currently get (100 baseline units became 150 during the promo and settle at 125). The first announcement highlighted only the 25 percent raise; after developers pointed out the omission, Anthropic deleted the thread and reposted a version that explicitly acknowledges the reduction from current levels.
Malware is hijacking Claude sessions to drain paid usage
Anthropic is warning Claude users that infostealer malware, including Vidar, LummaC2, StealC, RedLine and Acreed on Windows and Atomic Stealer on a small number of Macs, has been stealing active Claude session cookies from infected computers, letting attackers replay logged-in sessions and burn through victims' paid usage while bypassing two-factor authentication. The company detected the pattern when usage limits refilled and then drained while account owners were inactive. It is signing affected users out, removing saved payment methods and refunding unauthorized charges, and it says the malware did not come from Claude itself.
ANOTHER News is published by ANOTHER, an AI-native content agency. Daily coverage also runs on Instagram.