The Information Machine
Following·since 26 Aug 2026·Day 4·7 sources·updated 27 Aug 2026

ChatGPT Work's remote-browser authentication

The gist

ChatGPT Work logs into sites without seeing user passwords

The approach lets AI agents act inside login-gated services without requiring users to hand credentials to the model, addressing a practical barrier to autonomous web task completion. The scope of tasks that become viable, from booking appointments to submitting business paperwork, depends on how well the authentication boundary holds in practice.

The full picture

ChatGPT Work can now authenticate with login-gated websites on a user's behalf while keeping credentials entirely with the user. When the agent reaches a login prompt, it pauses and hands control to the user, who enters credentials directly into a secure remote-browser form; the agent then resumes the task. Session cookies persist across sessions, so users need to sign in only once per site. OpenAI states the agent never types the user's password, stores credentials, or invokes a password manager, and inputs entered during the manual takeover step are not collected or seen by the model. Screenshots are disabled during the takeover step. The feature covers web and mobile and extends the agent's reach beyond the public web to authenticated dashboards, SaaS tools, internal portals, paywalled content, and multi-step dealings with landlords, insurance companies, and government agencies. Website policies, authentication checks, and human review remain limits on what the agent can accomplish.

How it developed
27 August 2026

OpenAI launched ChatGPT Work on August 26, an autonomous agent that operates inside login-gated sites by pausing so the user signs in through an isolated remote browser; session cookies then persist for repeat tasks and the model never handles credentials, with screenshots disabled during sign-in.

Targeted tasks include booking appointments, managing insurance, and submitting business paperwork; usage is metered on the same structure as Codex, and Enterprise and Edu admins receive workspace spend controls in the Admin Console.

26 August 2026

OpenAI announces ChatGPT Work can sign into websites on behalf of users without seeing credentials

25 August 2026

OpenAI introduced Admin plugin for ChatGPT Work and Codex

20 August 2026

Stampli case study published showing 3.16x speed improvement on Deep Finance product launch using Codex and ChatGPT Work

Sources
Sam Altman Twitter (OpenAI)
2 more sources
The daily email

Want this in your inbox?

I send a short email each morning with the stories that moved. If you would rather just read here, that works too.

Subscribe free