Guide
Mitigating the risk of prompt injections in browser use
Claude works in your browser
Now Claude can navigate, click buttons, and fill forms in your browser. Works with Claude Code and Claude Desktop. Available in beta to all paid subscribers.
A helping hand across all your tabs
Let your browser work for you. Claude can navigate, click buttons, and fill forms on Chrome.
Works with Claude Code
Connect development workflows to Chrome for a partner that tests and iterates with you.
Uses your everyday tools
Bring Claude into your workflow to make apps work better, without leaving the browser.
Runs tasks in the background
Start a workflow and move on. Claude completes tasks while you focus elsewhere.
Completes scheduled workflows
Set reports, updates, and check-ins to run daily or weekly without manual triggers.
Speed up everyday tasks with Claude in Chrome
Pull metrics from analytics dashboards
Claude can navigate your analytics dashboard, extract the numbers you need, and compile them into a summary. No exports, no tab-switching, no manual copying.
Organize files in Google Drive
Claude can sort through your Drive, create a folder structure, move files where they belong, and flag duplicates and old files for you to review. You approve the changes instead of doing the sorting yourself.
Prepare and plan from your calendar
Claude can read your calendar, pull context from email threads, flag which meetings you need to prepare for, and book rooms if they’re missing. Run it every evening and start each day knowing what's coming.
Compare products across sites
Claude can read the specs from multiple product pages you have open, normalize the data, and create a comparison table in Google Sheets. You stop tab-switching and start deciding.
Log sales calls to your CRM
Claude can read your calendar, match attendees to Salesforce contacts, and draft activity logs for each call. You add notes and approve before anything gets created.
Clean up promotional emails
Claude can scan through your inbox, identify marketing emails, newsletters, and automated notifications, then present them as a list for you to review before deleting in bulk.
Browse safely with Claude
Claude brings AI directly to your browser. While powerful, this creates risks that bad actors may try to exploit.
Start with trusted sites
Only grant permissions to familiar websites while learning how Claude works.
Review sensitive actions
Always confirm before Claude handles financial, personal, or work-critical tasks.
Watch for unusual behavior
Some sites may hide instructions that override yours. If Claude acts unexpectedly, pause and review.
Report issues immediately
Help improve safety by flagging concerning behavior through feedback options.
Guide
Using Claude for Chrome Safely
Guide
Claude for Chrome Permissions Guide
FAQ
Developers can use Claude Code to build and test directly in Chrome. This integration enables faster iteration on browser-based projects.
Desktop app users can start a task in Claude Desktop and let it handle work in the browser without switching windows by enabling Claude in Chrome as a connector.
Avoid financial transactions, password management, or anything involving sensitive personal data. Start with trusted sites and familiar workflows where you're comfortable having Claude take actions. Never use it for high-stakes decisions without careful supervision. And, of course, make sure your use complies with our acceptable use policy. Learn more.
Pre-approve actions that Claude can take on websites before you start working. You can review Claude's approach upfront, then let it run. Claude will still ask before taking certain irreversible or potentially harmful actions, like making a purchase. For trusted workflows, you can choose to skip all permissions, but you should supervise Claude closely. While some safeguards exist for sensitive actions, malicious actors could still trick Claude into unintended actions. Learn more.
Browser AI faces unique security risks, like prompt injection attacks, where malicious actors might try to trick Claude into unintended actions, such as sharing your bank information or deleting important files. While we’ve implemented protections, they aren’t foolproof. Attack vectors are constantly evolving and Claude may hallucinate, leading to actions that you did not intend. We’ve shared our testing results, including possible attack scenarios, so you can make informed decisions, and strongly encourage you to read about the risks before using this product. Read blog post.
Claude in Chrome Troubleshooting
This article helps you resolve common issues with Claude in Chrome and explains how to provide feedback.
Explore what’s next
Using this feature and giving feedback directly improves what Claude can do.
This is a Google extension. The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.