Quick Answer
Decide whether to use Claude in Chrome for browser work, and set it up with the right approval and domain boundaries.
Primary-source note: Anthropic announced general availability on the Claude blog, including the prompt-injection evaluation results that it says justified the wider release.
Key facts
What to know first
What it is for
Most of the tools Claude already reaches — Gmail, Calendar, Drive, and other connectors — have an integration. Many tools do not: internal dashboards, legacy systems, and vendor portals with no API. Claude in Chrome is the answer to that gap. It works through the browser you are already signed into, so Claude sees the same page you see and acts with your existing session.
The conversation is not trapped in the tab. Anthropic says you can hand Claude a task in the browser, work across tabs, and continue the same conversation in the desktop, mobile, and web apps.
Source check: Claude in Chrome is generally available from Claude by Anthropic.
Is it generally available?
Yes. Claude in Chrome is generally available on every paid Claude plan. It began as a limited pilot announced in 2025 while Anthropic built prompt-injection defenses; general availability followed once those defenses cleared its evaluations.
You install it from the Chrome Web Store. On Enterprise plans, admins manage it in Organization Settings and can limit it to approved domains through the admin setup guide.
- Confirm you are on a paid Claude plan.
- Install the extension from the Chrome Web Store.
- On Enterprise, ask your admin which domains are allowlisted.
- Decide whether to keep automatic approval on or require manual approval per action.
Source check: Claude in Chrome is generally available from Claude by Anthropic.
What it cannot do
Claude in Chrome does not run on other Chromium browsers, and it does not run on mobile. If your work lives in Edge, Brave, Arc, or a phone, this is not the surface for it.
It also does not reach your local filesystem or your other desktop applications. Anthropic says you still need the Claude desktop app to work with files on your computer or with other apps. Uploading a file into a normal chat remains the simpler path for document and spreadsheet work.
Source check: Claude in Chrome is generally available from Claude by Anthropic.
How autonomy and the safety classifier work
The change that came with general availability is that Claude no longer needs approval for every action. It automatically approves actions it determines are safe, using the same mechanism as auto mode in Claude Code. A classifier reviews each action Claude is about to take — navigating to a new site, entering text into a page — and checks it against what you originally asked for. If the action does not match the request, it is blocked. You can switch automatic approval off in settings and keep approving manually.
Underneath that, Anthropic trains probes that scan web content arriving through tool results, so that a page or email carrying hidden instructions is flagged before Claude acts on it. When a probe flags content, Claude is told to treat it with suspicion and check with you if needed.
Source check: Claude in Chrome is generally available from Claude by Anthropic.
Prompt injection is the risk you manage
Prompt injection means hidden instructions planted in a page, email, or form field that redirect the agent. Anthropic’s own example: you ask Claude to draft email replies, and a hidden instruction in one message tells Claude to forward your other mail to an attacker. This is the reason the pilot lasted as long as it did.
Anthropic reports that on its current red-teamed evaluation, attacks that reached the model succeeded against Opus 4.5 17.6% of the time and against Opus 5 3.8% of the time before extra safeguards; with probes and the safety classifier running, no attacks succeeded against Sonnet 5, Opus 5, or Mythos 5, and 0.3% succeeded against Fable 5. Those are Anthropic’s published numbers from the announcement, not independent measurements, and Anthropic itself calls prompt injection a moving target.
The practical reading: this is good enough for routine browsing work and not a reason to walk away from a session that is about to spend money, email people, or touch personal records. Give Claude one page-scoped task at a time, watch the first few runs of anything new, and keep it off tabs holding banking, health, or HR data.
- Scope the task to named pages, not "handle my inbox."
- Sign out of, or close, tabs Claude has no business reading.
- Keep manual approval on for anything that submits, pays, or sends.
- On Enterprise, use domain allowlists rather than trusting per-user discipline.
Source check: Claude in Chrome is generally available from Claude by Anthropic.
Prompts to Copy
On this page only, extract every row of the table into CSV with the column headers exactly as shown. Do not navigate away and do not submit anything.
Walk through this vendor portal and tell me what you would click to [goal], step by step, before doing any of it. Wait for my confirmation.
Fill this form using the values I paste below. Stop before the submit button and show me a summary of every field you set.
Cite this page
Claude Helps, "What Is Claude in Chrome?", https://claudehelps.com/claude-in-chrome (updated 2026-09-19).
Primary Sources
- Claude in Chrome is generally availableClaude by Anthropic
- Use connectors to extend Claude's capabilitiesClaude Help Center
- How do usage and length limits work?Claude Help Center
FAQ
Is Claude in Chrome generally available?
Yes. Anthropic says Claude in Chrome is generally available on every paid Claude plan, after an earlier invite-limited pilot.
Do I have to approve every action?
No. Claude automatically approves actions a safety classifier judges safe and consistent with your request. You can turn automatic approval off in settings.
Does Claude in Chrome work in Edge, Brave, Arc, or on my phone?
No. Anthropic says it does not run on other Chromium browsers or on mobile yet.
Can it open files on my computer?
No. Anthropic says you still need the Claude desktop app to work with files on your computer or with other applications.
How do admins control it?
On Enterprise plans, admins manage Claude in Chrome in Organization Settings and can restrict it to approved domains.