Claude Chrome Side Panel Gains Cowork Sessions
On August 12, 2026, Anthropic updated Claude in Chrome so its side panel opens directly into a Cowork session, with conversations and files available across Claude surfaces. Claude's support documentation says Cowork is available in the Chrome side panel for Max and Team plans, with Pro access rolling out and Enterprise access subject to administrator enablement.
Anthropic has updated Claude in Chrome so that opening its side panel starts a Cowork session directly, rather than a separate browser-only conversation. According to 9to5Mac, sessions begun in the side panel are now saved in Claude history and can be resumed in Claude's desktop, web, and mobile applications.
Claude's support documentation states that Cowork sessions and files live with a user's Claude account across supported devices. The company describes Cowork in the cloud as running on Anthropic's servers rather than the user's computer, allowing work to continue in the background and scheduled tasks to run without a device online.
Browser context and cross-device workflows
According to 9to5Mac, the Chrome extension can access the current page and act through a user's existing browser logins. Reported capabilities include clicking links, navigating between pages, entering text, and filling forms. The publication described an Anthropic example in which Claude collects invoice details from vendor portals, creates a spreadsheet, and then continues the same session on desktop with local files or prior budget material.
The support documentation distinguishes the Chrome experience from other Claude surfaces: web, mobile, and desktop provide a selector between chat and Cowork, while the Chrome side panel opens Cowork directly. Anthropic's help center describes the desktop application as the full Cowork experience, including access to local files and the browser.
For teams using browser agents, persistent session state can reduce handoffs between browser-based data collection and desktop-based analysis. In comparable agent workflows, however, carrying task context across surfaces also makes access controls, authentication boundaries, and action review important operational considerations.
Availability and security controls
Claude's support documentation lists Cowork in Chrome as available to Max and Team subscribers, rolling out to Pro subscribers, and available to Enterprise customers where an administrator has enabled it. 9to5Mac reports that Enterprise administrators can restrict access to approved domains, and that Claude in Chrome does not currently support other Chromium browsers or mobile devices.
9to5Mac also reports that Anthropic warns browser agents remain vulnerable to prompt injection. The publication says Claude requests confirmation for actions including purchases and sharing personal data, while a separate review handles consequential actions when automatic approval is enabled. Anthropic's reported position is that these safeguards reduce risk but cannot eliminate it.
Browser automation that operates in already authenticated sessions has a different risk profile from isolated browsing environments. Practitioners evaluating such tools typically need to test prompt-injection handling, domain allowlists, approval paths, and the scope of data exposed to an agent before deploying them for operational workflows.
Key Points
- 1Claude's Chrome side panel now opens directly into Cowork, preserving sessions and files across supported Claude surfaces.
- 2According to 9to5Mac, existing browser logins enable page interaction, while prompt injection remains a documented agent-security limitation.
- 3For browser-agent deployments broadly, cross-device persistence increases workflow continuity but raises the importance of approval controls and access boundaries.
Scoring Rationale
The update expands Claude's browser-agent workflow by making browser sessions persistent across desktop, web, and mobile surfaces. It is notable for practitioners evaluating agentic automation, particularly because it combines authenticated browser access with explicit prompt-injection and approval-control considerations.
Sources
Primary source and supporting public references used for this report.
Practice interview problems based on real data
1,625 SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems
