Who this is for
- Finance brokers
- Legal firms
- Accounting firms
- Consultants
- Trades
- Clinics
The stories
ChatGPT's Chrome extension can now read your open tabs, and act in them
Announced 15 October 2026
On 15 October OpenAI announced an update to its ChatGPT extension for Google Chrome. In Chat, it "can look across your open tabs and gather info". In Work, OpenAI's mode for longer jobs, it "can control your Chrome tabs to get things, like sending messages, filling out forms". Coverage also lists downloading files and grouping tabs.
OpenAI's own example is a browser task that stops before the final step: "Use the details in this event brief to fill out the registration form, and stop before submitting."
By default, OpenAI's guide says ChatGPT "asks before it interacts with each new website". You can choose Allow once, Allow for this site, Allow for all sites, or Decline. "Allow for all sites" is marked Elevated Risk in the guide.
The guide is plain about accounts you are already logged in to: ChatGPT "can read or act on sites where you're already signed in", and it names LinkedIn, Salesforce, Gmail and internal tools. It tells users to avoid sending secrets or highly sensitive data through browser tasks, and to treat page content as untrusted.
Browser history is a separate request each time, with no always-allow option.
Two things are not clear. OpenAI's announcement says "Available for all ChatGPT plans", but its guide says availability "can depend on rollout and your workspace settings". And the guide does not explain the admin controls for Business or Enterprise workspaces.
Clear takeaways
- The ChatGPT Chrome extension can now act in your tabs, not just read them.
- It asks before each new website by default, but "Allow for all sites" removes that check, and OpenAI itself marks it as elevated risk.
- It works inside accounts you are already signed in to, so the risk sits in your CRM, inbox and portals, not on the open web.
Do this now
- Ask your team who has the ChatGPT Chrome extension installed, and on which Chrome profile (work or personal).
- Write one rule: nobody picks "Allow for all sites", and any task ends with "stop before submitting" so a person presses the final button.
- Pick one repetitive form job, such as entering a client's details into a supplier or lender portal. Try it once on a test record, not a live client.
- Check which sites are open in the browser when it runs. Keep the CRM, bank and client file systems closed during an AI browser task.
- If you use ChatGPT Business or Enterprise, ask whoever manages it what the workspace settings say about browser control before anyone switches it on.
