OpenAI introduces an agent-style upgrade allowing ChatGPT to sign into websites and perform tasks seamlessly, but security and consistency concerns remain as the feature is tested in limited settings.
ChatGPT’s latest agent-style upgrade turns the chatbot into a browser user that can sign in to websites, carry out tasks and stay logged in between sessions. OpenAI says the Cloud Browser runs on a separate cloud computer and can read pages, click controls and fill out forms on supported public and authenticated sites. The feature is available in ChatGPT Work for paid users in supported regions, on web and mobile, but not on Free or Go plans.
OpenAI also says the model itself does not see or store usernames or passwords. Instead, users can sign in when prompted, clear two-factor checks and then let the session persist for later use. On mobile, ChatGPT can also work with an external password manager, while website operators can allowlist ChatGPT Work’s browser by verifying traffic that originates from OpenAI’s cloud system.
In testing, however, the experience still appears uneven. Sign-in flows can be slow, websites may flag the AI browser as unusual, and verification codes, passkeys and other security steps can force manual intervention anyway. On one eBay task, the browser took time to gain access and moved through several wrong pages before reaching the relevant auction information. An Airbnb search was smoother once access had been granted, but only after the user switched to the live browser view to complete login.
That leaves the feature useful, but not yet fully convincing for sensitive or judgement-heavy admin work. OpenAI says ChatGPT Work will ask for confirmation before consequential actions such as bookings or payments, although the boundary between routine and consequential work is not clearly defined. Security questions also remain, particularly because authenticated sessions can persist on OpenAI’s infrastructure, which means users may want to review active sessions and log out remotely if needed. For now, the practical limit is not ambition but trust: the system can handle simple look-ups and form-filling, but many users will still prefer to keep control of their own accounts.
Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.
