Claude in Chrome: How to Install and Use the Chrome Extension

Claude in Chrome is Anthropic’s official Chrome extension. It lets Claude read pages, click, type, navigate and fill forms in your browser, using the accounts you are already signed in to. You install it from the Chrome Web Store, but it only works with a paid Claude plan: Pro, Max, Ultra, Team or Enterprise. Because Claude acts on real accounts, hidden instructions on web pages are a real risk, and Anthropic says that risk is not zero and advises against using it for sensitive information.

What the Claude Chrome extension does

People also search for it as Claude for Chrome. Anthropic built it for work that sits behind a login, on sites with no export button or connector, such as internal dashboards, vendor portals and legacy systems. Claude sees the page and takes the steps a person would take.

You can direct that work from three places:

How to install the Claude Chrome extension

1. Open Google Chrome on a desktop computer.
2. Go to the Claude listing in the Chrome Web Store. Check that the developer shown is Anthropic.
3. Click “Add to Chrome”.
4. Sign in with your Claude account when prompted.
5. Click the puzzle piece icon, then the thumbtack next to “Claude”, to pin it to your toolbar.
6. Grant the permissions it asks for.
7. Click the Claude icon to open the side panel. It stays visible while you browse.

On November 1, 2026, the store listing showed version 1.0.104, 20,000,000 users and a rating of 3.7 from 1.9K ratings.

Which plans and browsers it works on

• Plans: Pro, Max, Ultra, Team and Enterprise. The Free plan is not included. See our Claude pricing guide for current prices.
• Enterprise: the side panel runs as a Cowork session only after an owner enables Claude in Chrome and Cowork in the cloud. Until then, users see the classic side panel.
• Browsers: Anthropic’s help center says Google Chrome only, with no support for other Chromium browsers. Claude Code’s docs are broader, as explained below.
• Mobile: not supported. Sessions can still continue on the Claude mobile app.

What the permissions mean

Chrome asks you to approve a long list. Anthropic explains each one, and these matter most:

How to use Claude in Chrome

Click the Claude icon, describe the task and watch Claude work in its own tab group. Anthropic suggests starting with simple tasks such as research or form filling. These first prompts are our own examples:

• “Compare the plans on these three open tabs and list the differences.”
• “Pull the invoice number, date and amount from this page into a note.”
• “Walk me through this settings page step by step and stop before saving anything.”

The side panel now runs as a Claude Cowork session on Max, Ultra and Team plans. It is reaching Pro as the rollout continues, and Enterprise needs an owner to enable it. Your conversations are saved, sessions continue on the web, desktop and mobile apps, and your skills, plugins and connectors work there too.

The main features are these:

• Several tabs: drag tabs into Claude’s tab group so it can work across them.
• Scheduled tasks: click the clock icon to run a saved shortcut daily, weekly, monthly or annually.
• Shortcuts: save a prompt that works and call it up by typing /.
• Background work: Claude keeps going while you switch tabs, as long as Chrome is open. Turn on notifications to hear when it needs you.
• Screenshots and images: show Claude part of the screen, or give it an image to upload to a form.
• Developer tools: Claude can read console output, network requests and the state of the page.
• Models: Anthropic says all public models are available.
• Recording a workflow: this works in the classic side panel only. To switch back, click the three dots in the side panel and select “Switch back to classic”.
• Signing in with 1Password: in beta on macOS, 1Password fills the login so that Claude never sees the password.

Permission modes and approved sites

You choose a mode in the drop-down menu on the chat input:

Per-site approval: on some sites, Claude asks for permission first. “Allow this action” covers a single step and is the safest choice. “Always allow actions on this site” lasts until you revoke it, and Anthropic warns that Claude may then take unintended actions across the site, so keep it for sites you fully trust. To review your list, click the Claude icon, then the three dots, then “Extension settings”.

Needs your approval in every mode, according to the permissions guide: changing permission settings, granting authorizations and entering potentially sensitive information. In Manual mode and on sites you always allow, Claude also asks before it downloads a file.

Prohibited regardless of permissions, according to the permissions guide: making purchases or financial transactions, creating accounts, handling credit card or ID data, downloading from untrusted sources, permanent deletions such as emptying the trash, giving investment advice or making trades, modifying system files, and completing instructions from emails or web content. The safety article adds bypassing CAPTCHAs and gathering facial images. Treat these lists as what Claude is meant to do, not as a guarantee, because Anthropic’s own pages differ on some items.

Is Claude in Chrome safe?

It carries real risk, which Anthropic says plainly. Anthropic strongly advises against using it for financial accounts or investments, legal documents or contracts, medical or health information, work accounts with sensitive company data, and sites holding other people’s personal information.

It also says you remain responsible for everything Claude does on your behalf, including messages sent, purchases, data changed and the terms of the sites you use. Two risks matter most.

Prompt injection: a web page, email or document can contain hidden instructions that try to redirect Claude. Anthropic’s example is invisible text telling Claude to fetch your bank statements and share them. You may never see the instructions yourself.

What Claude sees: Claude takes screenshots of the tabs it works in, and whatever is visible becomes part of the conversation. Anthropic says Claude cannot filter sensitive content out of what it sees. Side panel sessions are also saved to your history and can be reopened on other devices, so avoid opening the panel on pages you do not want stored with the session. In organizations with HIPAA enabled, the extension is off by default and is not covered by the Business Associate Agreement, even after an owner turns it on.

Anthropic’s defenses: model training against known attacks, scans of untrusted content, a check on Claude’s actions, and blocked site categories such as adult and pirated content, although Anthropic says these lists are unlikely to be complete. Claude also asks before it opens financial sites.

Anthropic’s numbers: these are Anthropic’s own results, and they cover different setups. Its help center reports an attack success rate below 0.08% for its current configuration, against internal attacks that combine known techniques. Its August 2026 announcement uses stronger attacks from professional red-teamers. Without additional safeguards, attacks that reached the model succeeded 3.8% of the time against Opus 5. With probes and the safety classifier, none succeeded against Sonnet 5 or Opus 5, and 0.3% succeeded against Fable 5.

These results depend on the safeguards, so they do not carry over to “Skip all approvals”, where nothing checks Claude’s actions automatically. New attacks may not be covered by these evaluations either.

Anthropic’s advice and our own come down to the same habits:

• Use a separate Chrome profile without access to banking, health or government accounts.
• Start on sites you trust, and avoid pages full of content from strangers.
• Close confidential material before you open the side panel.
• Stop the task if Claude turns to unrelated topics, opens unexpected sites or asks for sensitive data.

Claude in Chrome with Claude Code

The extension also gives Claude Code a browser, so it can open your app, read console errors and fix the code that caused them. It also suits form filling, data extraction and recording GIFs of a session. Those recordings capture everything visible, including account details on signed-in pages, so check them before you share them. If you do not have Claude Code yet, start with how to install Claude Code.

claude --chrome

Run /chrome inside a session to check the connection, manage permissions or reconnect. In the VS Code extension, type @browser. You can select “Enabled by default” under /chrome to skip the flag, but this loads the browser tools into every session and uses more context.

The requirements are stricter than for the side panel:

• Extension version 1.0.36 or later, and a direct Anthropic plan.
• Sign-in with /login. An API key keeps the integration off, and Amazon Bedrock, Google Cloud’s Agent Platform and Microsoft Foundry are not supported.
• Windows Subsystem for Linux is not supported.

Claude shares your browser’s login state here too, and it pauses for you at login pages and CAPTCHAs. In Claude Code’s auto mode, when its classifier approves a browser call, the extension skips its own per-site check for that call. For how this fits into a development setup, see Claude Code vs Cursor.

Claude in Chrome with the Claude desktop app

1. Click your initials in the lower left corner and select “Settings”.
2. Go to “Customize”, then “Connectors”.
3. Find Claude in Chrome and click “Configure”.
4. Turn the connector on, and install the extension if you have not done so.

The connector is off by default in each chat, so turn it on in the “Connectors” drop-down for each conversation. Tasks that use your local files or computer need the desktop app open and connected.

Cowork also has a browser built into the desktop app, with nothing to install. Anthropic is rolling it out gradually. You can pick either one under Settings > Cowork > Preferred browser.

Settings for Team and Enterprise owners

Owners manage the extension under Organization settings > Claude in Chrome. Anthropic’s admin article says it is on by default on Team and Enterprise, unless it was already disabled or the organization has HIPAA enabled, so check the toggle rather than assume. Owners can set an allowlist and a blocklist of sites, and Anthropic recommends starting with a restrictive allowlist.

Zero data retention is not supported for Claude in Chrome. The extension also has its own permission and does not inherit a user’s Cowork access, and users are not automatically told when you enable it for an Enterprise organization.

If Claude in Chrome is not working

Where Anthropic’s pages differ

Anthropic’s pages do not fully agree on these points. The last column is our judgement.

Claude in Chrome FAQ

Is the Claude Chrome extension free?

Not in practice. It requires a paid Claude plan, so it does not work on the Free plan. Claude Pro costs $20 per month, or $17 with annual billing.

Does Claude in Chrome work in Edge or Brave?

Anthropic’s help center says the extension is not supported on other Chromium browsers. Claude Code’s docs say its Chrome integration works with Edge and detects the extension in Brave, Arc, Vivaldi and Opera.

Is there a Claude extension for phones?

No. The extension does not support mobile devices. You can continue a side panel session in the Claude mobile app, though.

Can Claude see my passwords?

Claude works inside your signed-in sessions and sees whatever appears in its screenshots, so anything visible is exposed to it. With 1Password for Claude, in beta on macOS, 1Password fills the login without passing the credential to Claude.

Can Claude buy things with my account?

Anthropic’s permissions guide lists purchases and financial transactions as prohibited in every mode. Its August 2026 Cowork post says Claude asks before actions such as a purchase, and its safety article says you remain responsible for any purchases. As a precaution, we would keep saved cards out of the profile you use with the extension.

What is the difference between Claude in Chrome and Cowork?

Claude in Chrome is what lets Claude act in your browser. Cowork is the session it runs in on the new side panel and in the desktop app, so Cowork’s own risks and safeguards also apply. For organizations, the two are still managed separately. The desktop app can also use its own built-in browser.

Sources

• Help center: Get started with Claude in Chrome
• Help center: Permissions guide
• Help center: Use Claude in Chrome safely
• Help center: Admin controls
• Anthropic: Claude in Chrome is generally available, The side panel is now Claude Cowork
• Claude Code docs: Use Claude Code with Chrome
• Chrome Web Store: Claude