Claude in Chrome Explained: Which Plan You Need and What It Will Not Do

Claude in Chrome is a browser extension that lets Claude work inside your own Chrome window: it reads the page you are on, clicks links, types text, fills in forms, and moves between tabs using the logins you are already signed in with. Anthropic made it generally available on August 26, 2026 after a year of staged testing, and changed the default behaviour at the same time. It no longer asks permission for every single action.

The two questions that decide whether this matters to you: it is not on the free plan, and it is Chrome-on-a-computer only.

What "generally available" actually means here, because the plan gate loosened a while ago and a lot of write-ups still describe the 2025 version. Anthropic keeps a dated update log on its original pilot post:

So today's news is the end of the beta and the change in how much it does on its own, not a new price or a new plan. If you have been paying for Claude Pro since the winter, you already had access.

Key Takeaways

• Not free. Anthropic's launch post says Claude in Chrome is "now generally available on every paid Claude plan," and claude.com/pricing marks it as not included on Free. Cheapest entry is Claude Pro at $17/month on annual billing ($200 up front) or $20 billed monthly.
• It now acts on its own by default. The big change on August 26 is that Claude "can now also take actions autonomously in the browser, instead of needing approval for every one." A safety classifier checks each action before it runs.
• There is an off switch, and it is one drop-down. Switch the mode to Manually approve and Claude goes back to asking before every click.
• Chrome on a computer, nothing else. Anthropic states it "doesn't run on other Chromium browsers or on mobile yet," so no Edge, no Brave, no Arc, no phone.
• It cannot spend your money. Purchases, financial transactions, trades, and handling card or ID data are on Anthropic's prohibited list regardless of what permissions you grant.
• It can see whatever is on screen. Claude screenshots the tabs it works in, and Anthropic says it "can't filter sensitive content out of what it sees." Anthropic's own advice is to run it in a separate Chrome profile.
• Leaving it on auto costs you more usage. Anthropic notes that automatic mode "consumes more of your usage limit than the other modes," because the safety check runs on every action.

Which Claude Plans Include It

Every paid plan, and no free plan. Anthropic states this twice, in the launch post and in its help centre ("available for all paid plans (Pro, Max, Team, and Enterprise)"), and the plan comparison table on its pricing page shows the same split. This is the whole answer for most readers: if you are on free Claude, Claude in Chrome is not something you can turn on.

Decoded from the plan comparison matrix on claude.com/pricing on August 26, 2026. The plan bullets that appear above that table do not mention Chrome at all, so the matrix is the surface that answers this question.

One caveat worth knowing before you upgrade. Anthropic's four Claude in Chrome help articles were all last revised on August 12, 2026, two weeks before the launch post, and they still describe the Chrome side panel as being "in beta" and say the newer Cowork-backed side panel is "rolling out to Pro plans in the coming weeks." The launch post is the newer document and it is the one this page follows, but if you subscribe to Pro today and get the older-looking side panel, that rollout note is the reason.

What It Actually Does for You

It operates websites that do not have a Claude integration. That is the specific gap Anthropic says it built this for: "internal dashboards, legacy systems, and vendor portals" that will never appear in a connector list. Instead of you copying information out of a web page and into Claude, Claude goes to the page.

In practice that means:

You install it from the Chrome Web Store, sign in with your Claude account, and pin it. The extension asks for a long permission list, including debugger, which is the one that lets Claude click and type rather than just read. Anthropic publishes a plain-English reason for each permission in its setup article.

The Change That Matters: It Acts Without Asking

Through the beta, the headline restriction was that Claude checked with you before each action. Now the default in the newer side panel is Automatically approve: Claude keeps working, screens each action itself, blocks anything it judges unsafe, and stops to ask only when something needs you.

There are three modes, and you pick from a drop-down on the chat input:

Two practical notes Anthropic buries in the permissions guide. First, the side panel remembers whichever mode you pick and uses it for future sessions, so switching to Manually approve once is enough. Second, automatic mode uses up more of your plan's usage limit than the other two, because Claude runs an extra safety check on every action. If you hit limits on Pro, that is a reason to switch.

What Anthropic Blocks It From Doing

There is a hard list, and it applies no matter what permissions you grant. This is the part worth reading if the phrase "AI that clicks things in my browser" makes you nervous.

Prohibited outright:

• Making purchases or financial transactions
• Creating accounts
• Handling sensitive credit card or ID data
• Executing financial trades or investment transactions
• Providing investment or financial advice
• Permanent deletions, including emptying trash and deleting emails, files or messages
• Downloading files from untrusted sources
• Modifying system files
• Completing instructions from emails or web content

Always requires your explicit approval, even in automatic mode: modifying permissions settings, granting authorisations, and entering potentially sensitive information into a website. Anthropic also blocks Claude from adult sites and known piracy sites outright, and says Claude "asks for permission before accessing financial sites."

To see or revoke what you have already allowed, click the extension icon, then the three dots, then Extension settings, which opens the Permissions page listing your approved sites and your permission history.

The Risk Anthropic Will Not Talk You Out Of

Prompt injection, and Anthropic says so directly rather than reassuring you. The attack is simple to describe: a web page, email or document contains hidden instructions, Claude reads them as if they came from you, and acts on them. Anthropic's own example is a hidden line in an email telling Claude to forward your other emails to an attacker.

What it has done about it, from the launch post: two classifiers, one screening incoming page content for injections and one reviewing each action against what you originally asked for, plus continued training against a growing library of real attacks. On its current evaluation, using attacks written by professional red-teamers, attacks that reached the model succeeded 17.6% of the time against the older Opus 4.5 and 3.8% against Opus 5 before those extra safeguards. With the classifiers running, Anthropic reports no successful attacks against Sonnet 5, Opus 5 or Mythos 5, and 0.3% against Fable 5.

And then it says the thing that should govern how you use it: "The risk is not zero. Novel attacks may emerge that our evaluations didn't cover, and a successful one could lead to outcomes like data exfiltration."

The other exposure has nothing to do with attackers. Claude works by screenshotting the tabs it is in, so anything visible in one of those tabs becomes part of the conversation, and Anthropic states that Claude "can't filter sensitive content out of what it sees." Its own recommendations are worth following literally:

• Use a separate Chrome profile with no access to banking, healthcare or government accounts.
• Do not open the side panel on a page showing something you would not want stored with the session, because side panel sessions are saved to your history and can be reopened on your other devices.
• Do not use it to manage financial accounts, legal documents, medical information, or work accounts holding sensitive company data. Anthropic lists all four under "what to avoid."

Anthropic also notes that Claude in Chrome "isn't available to organizations covered by HIPAA."

Should You Pay for It?

Get it if you already pay for Claude, or if a chunk of your week is spent moving information between web pages that will never talk to each other: a supplier portal, an old ticketing system, an internal dashboard, a form you refill every month. That is the job it is built for, and no free chatbot does it.

Skip it if you are on free Claude and this is the only reason you would upgrade. A $20 monthly subscription to watch an AI fill in forms is a lot to spend on a feature you are advised not to point at anything sensitive, on one browser, on one kind of device. Try the free plan's ordinary Claude first and see whether the browser part is really your bottleneck.

If you want the browser-agent idea without a subscription, the honest answer is that there mostly is not one: every mainstream browser agent sits behind a paid plan today. We compare the shipped ones in what an AI agent actually is, in plain terms, and the wider paid-plan question in which AI chatbot should you pay for.

Sources

• Anthropic, Claude in Chrome is generally available, August 26, 2026
• Anthropic, Claude for Chrome, August 25, 2025, with dated rollout updates through December 18, 2025
• Anthropic, Get started with Claude in Chrome (last revised August 12, 2026)
• Anthropic, Claude in Chrome permissions guide (last revised August 12, 2026)
• Anthropic, Use Claude in Chrome safely (last revised August 12, 2026)
• Anthropic, claude.com/pricing plan comparison matrix, read August 26, 2026