OpenAI launches ChatGPT Atlas, a browser with AI at its core

OpenAI has released ChatGPT Atlas, a new web browser with ChatGPT built in, available worldwide on macOS starting today for Free, Plus, Pro, and Go users. Business customers get a beta version, and Enterprise and Edu users can access it if their plan administrator enables it. Windows, iOS, and Android versions are coming soon.

The launch pushes OpenAI directly into territory dominated by Google Chrome, Apple Safari, and Microsoft Edge, and it signals the company's bet that AI assistants will eventually mediate most web activity. OpenAI frames the browser as the place where work, tools, and context converge. "A browser built with ChatGPT takes us closer to a true super-assistant that understands your world and helps you achieve your goals," the company said in its announcement.

The release follows ChatGPT's built-in search feature, introduced last year, which OpenAI says became one of its most-used capabilities. Atlas extends that logic: instead of copying and pasting into a chat window, ChatGPT operates inside the browser, sees what the user sees, and can act on the page directly.

Yogya Kalra, a college student and early tester, described the shift in practical terms: "During lectures, I like using practice questions and real-world examples to really understand the material. I used to switch between my slides and ChatGPT, taking screenshots just to ask a question. Now ChatGPT instantly understands what I'm looking at, helping me improve my knowledge checks as I go."

Browser memories, with controls

A core feature is browser memories. ChatGPT can remember context from visited sites and recall it later. OpenAI gives the example of asking: "Find all the job postings I was looking at last week and create a summary of industry trends so I can prepare for interviews."

The feature is optional. Users can view or archive memories in settings, and deleting browsing history deletes any associated browser memories. A per-site toggle in the address bar controls page visibility; when switched off, ChatGPT cannot view page content and creates no memories from it. An incognito window temporarily logs the user out of ChatGPT entirely.

Training policy follows a similar opt-in structure. By default, OpenAI does not use browsed content to train its models. Users who opt in via "include web browsing" in data controls should note that webpages opting out of GPTBot still won't be used, and that enabling training for chats extends to Atlas chats, including website content attached via the Ask ChatGPT sidebar and browser memories that inform conversations.

Parental controls carry over from ChatGPT to Atlas, and OpenAI is adding new ones: parents can now disable browser memories and agent mode.

Agent mode arrives in preview

Atlas ships with an upgraded version of ChatGPT agent, introduced earlier this year, now running natively in the browser. In a dinner-party scenario OpenAI describes, a user can hand ChatGPT a recipe and ask it to find a grocery store, add ingredients to a cart, and complete the order. At work, it can read team documents, run competitive research, and compile a brief.

Agent mode is available today in preview for Plus, Pro, and Business users. OpenAI acknowledges it is an early experience that "may make mistakes on complex workflows" and says it is "rapidly improving reliability, latency and complex task success."

OpenAI discloses prompt-injection risks

The announcement is unusually direct about security tradeoffs. The agent cannot run code in the browser, download files, install extensions, or access other apps or the file system. It pauses on sensitive sites such as financial institutions to confirm the user is watching, and it can run in logged-out mode to limit access to sensitive data.

Still, OpenAI warns that agents are susceptible to hidden malicious instructions embedded in webpages or emails, which could lead to data theft from logged-in sites or unintended actions. The company says it has run thousands of hours of red-teaming, as outlined in the ChatGPT agent system card, and designed safeguards that can be quickly adapted to novel attacks — but its safeguards "will not stop every attack that emerges as AI agents grow in popularity." Users are advised to weigh what information they give the agent, use logged-out mode, and monitor its activity.

Interface and roadmap

The new tab page serves as the starting point, combining chat answers with tabs for search links, images, videos, and news where available. Atlas suggests next actions based on browsing history, such as returning to past pages or automating routine tasks. New users can import bookmarks, saved passwords, and browsing history from an existing browser, and download Atlas from chatgpt.com/atlas.

OpenAI's roadmap includes multi-profile support, improved developer tools, and discoverability options for Apps SDK developers. Website owners can add ARIA tags to improve how the agent works on their pages.

The company positions the launch as a step toward a web where most usage happens through agentic systems. The gaps OpenAI itself identifies — imperfect reliability, unresolved attack surface, and a single-platform launch — will determine how quickly that vision, and Atlas itself, gains traction.