Key Takeaways
- ChatGPT Atlas is a full web browser built by OpenAI on Chromium, with ChatGPT integrated natively into the browsing interface via a persistent sidebar.
- It launched on macOS on October 21, 2025, and is available to Free, Plus, Pro, Go, and Business users worldwide at chatgpt.com/atlas.
- Agent Mode, the autonomous web automation feature, is restricted to Plus, Pro, and Business subscribers and is currently in preview.
- Agent Mode can fill forms, click through multi-step workflows, research across multiple sites, and add items to shopping carts, but it pauses before taking sensitive actions.
- Browser Memories is an opt-in feature that summarizes visited pages to personalize ChatGPT responses; it does not store full page copies and summaries are deleted within 7 days.
- Privacy researchers found Atlas scored poorly on tracker blocking and state partitioning tests, raising concerns for privacy-focused users.
- Prompt injection attacks remain an open security problem across all agentic AI browsers, including Atlas.
- Windows, iOS, and Android versions were announced at launch but had not shipped as of early 2026.
- The browser imports bookmarks, saved passwords, and browsing history from existing browsers, making switching friction-free.
OpenAI has spent years building language models that talk about the web. With ChatGPT Atlas, released in October 2025, the company took the next logical step: building a browser where the AI actually lives inside the tab bar. The result is something genuinely different from slapping a chatbot widget onto Chrome. Atlas is a Chromium-based browser where ChatGPT can see what you are reading, answer questions about any page, and in Agent Mode, take over your mouse and keyboard to complete tasks on your behalf.
This review covers what Atlas does well, where it falls short, who it is built for, and whether the privacy trade-offs make sense for most users. All testing context draws from hands-on reports published through early 2026 and official OpenAI documentation.
What Is ChatGPT Atlas?
ChatGPT Atlas is a desktop web browser with ChatGPT woven into its core rather than bolted on as an extension. Every tab you open, every page you read, and every form you fill out can be handed off to or analyzed by ChatGPT without any copy-pasting between windows.
The browser sits on top of the Chromium open-source project, the same foundation as Google Chrome, Microsoft Edge, and Brave. That means it renders pages the same way Chrome does and is compatible with most websites and web apps. What makes it distinct is the persistent sidebar on the right side of the screen that surfaces a ChatGPT conversation tied directly to whatever page is loaded.
According to OpenAI’s launch announcement, Atlas ships with three primary layers: the Ask ChatGPT sidebar for in-context Q&A, Browser Memories for personalization over time, and Agent Mode for autonomous task completion. Each layer can be used independently, and users control how much access ChatGPT has to their browsing data.
Launch and Availability
Atlas launched on October 21, 2025, as a macOS-only release. OpenAI made it available globally to Free, Plus, Pro, and Go users on day one, with Business users entering beta shortly after. Regional availability includes North America, Europe, Japan, India, Singapore, and South America.
Windows, iOS, and Android versions were confirmed as “coming soon” at launch. As of early 2026, none had shipped to the public, though analysts tracked the Windows beta as an anticipated near-term milestone. The macOS-first rollout reflects OpenAI’s strategy of shipping to a tech-forward audience before expanding to broader platforms.
You can download Atlas at chatgpt.com/atlas. The browser accepts imported bookmarks, saved passwords, and history from Chrome or Safari, so switching does not require starting from scratch.
Core Features: Ask ChatGPT Sidebar
The sidebar is the first thing you notice. It opens on the right side of the browser window and holds a live ChatGPT conversation anchored to whatever page you have in the foreground. You can ask it to summarize an article, explain a technical term, compare two products from separate tabs, or rewrite a paragraph you have selected.
According to OpenAI’s help documentation, ChatGPT in the sidebar has “page visibility,” meaning it can read the full content of the current tab unless you toggle that off in settings. You can also restrict which pages ChatGPT can see by adjusting per-site visibility controls.
The sidebar competes for screen real estate with the page itself. Reviewers at Tom’s Guide noted the compressed layout made some sites, particularly those with fixed-width designs, appear unusually narrow. OpenAI addressed this by making the sidebar collapsible, and a November 2025 update added an optional vertical tab bar on the left to reclaim more horizontal space.
ChatGPT memory carries over from your existing account. Conversations in Atlas can draw on facts ChatGPT already knows about you, such as your writing preferences or project context, without you having to re-explain them from scratch.
Browser Memories: Personalization With Trade-offs
Browser Memories is an opt-in feature that goes a step further than standard ChatGPT memory. When enabled, Atlas generates short summaries of pages you visit and the topics you research, storing them so ChatGPT can give more relevant answers over time. According to OpenAI’s data controls documentation, these summaries are not full copies of page content, personal or sensitive data is filtered out before saving, and summaries are deleted within 7 days.
In practice, this means if you spent a week researching standing desks, ChatGPT can reference that context without you mentioning it again. You can view all stored memories in settings, archive individual ones, and delete your entire browsing history to wipe associated memories.
The model training toggle is a separate control. By default, your browsing content is not used to train OpenAI models. You have to opt in explicitly, and the opt-in is only available if you also have “Improve the model for everyone” enabled in your account settings.
Incognito mode works as expected: no history, no cookies, and no browser memories are saved after the session closes.
Agent Mode: Autonomous Web Automation
Agent Mode is the feature that separates Atlas from a browser with a chatbot sidebar. When you activate it, ChatGPT stops being a passive advisor and starts acting on your behalf inside the browser. It can open pages, click links, fill out forms, scroll through results, and carry out multi-step workflows, all while narrating what it is doing and pausing before sensitive actions.
According to OpenAI’s documentation, Agent Mode includes built-in restrictions. It cannot run code in the browser, download files, install extensions, or access other apps or the file system. On financial sites, it pauses automatically and requires your confirmation before proceeding.
Practical Use Cases
OpenAI described several scenarios in its launch post. In a grocery example, you give ChatGPT a recipe, it finds a delivery service, adds all ingredients to the cart, and brings you to checkout. In a work scenario, you ask it to read past team documents, run competitive research, and compile a brief. At DataCamp, testers found Atlas could visit multiple sites, extract pricing data, cross-reference details, and organize findings into a comparison table without manual effort.
Form filling is one of the most requested use cases. Testers at Second Talent found Atlas could pull basic personal information from a LinkedIn-style source and populate form fields, but it required confirmation at each section and occasionally lost context between pages in multi-step forms. Complex workflows that span many pages still need supervision.
How Agent Mode Differs from Operator
OpenAI’s earlier ChatGPT Agent product (sometimes called Operator) operated in a standalone virtual browser. Agent Mode in Atlas is a more integrated version: it uses your actual browser session, which means it can act on sites where you are already logged in, using your real accounts and saved credentials. That makes it significantly more capable for real tasks, and also more consequential if something goes wrong.
Tabs, UI, and Browser Basics
Aside from AI features, Atlas is a functional browser. A November 2025 update introduced optional vertical tabs in a resizable left-hand sidebar, allowing users to reorder tabs and drag-select multiple at once. A January 2026 update, noted in OpenAI’s release notes, added tab groups for organizing related pages together.
Scrolling Tabs is a design choice that keeps tabs full-sized instead of shrinking them as more are opened. Hover over the tab bar and scroll to navigate tabs you cannot see. For heavy tab users, this is a meaningful improvement over Chrome’s compressed tab behavior.
Extension support is built in through the Chromium base, so most Chrome extensions install and run normally. The browser also supports importing from Chrome or Safari on first launch.
Pricing and Plan Breakdown
Atlas itself is free to download and use. What you pay for is your ChatGPT subscription tier, which controls which features inside the browser you can access.
- Free: Browser access, Ask ChatGPT sidebar, basic page Q&A. No Agent Mode, no extended Browser Memories. Message caps apply during peak hours.
- Plus / Go: $20 per month. Agent Mode access (in preview), priority model access, higher message limits, and Browser Memories.
- Pro: $200 per month. Full Agent Mode capabilities, access to the most powerful models, and the highest rate limits. Designed for power users running complex multi-step automations.
- Business / Enterprise: Per-seat pricing. Includes admin controls, SSO, compliance options, and workspace collaboration. Agent Mode is off by default for Enterprise and must be enabled by an admin.
More detail on current plan pricing is available on OpenAI’s pricing page.
Privacy and Security: The Real Concerns
Privacy is where Atlas draws the sharpest criticism. A study cited by Digital Journal found Atlas failed nearly every privacy test evaluated, scoring 1 point in anti-fingerprinting protection and 0 in tracker blocking. It also failed 100% of state partitioning tests, meaning websites can track users across different browsing sessions.
For context, Chrome scored a privacy risk score of 76 in the same study, which is itself considered poor by privacy advocates. Atlas ranked below Chrome. Brave with its built-in Leo AI scored highest among AI-integrated browsers for privacy, using anonymous proxy servers and storing no conversation data locally.
The deeper structural concern, flagged by security researchers, is prompt injection. A malicious actor can embed hidden instructions in a webpage. When Agent Mode visits that page, it might read those hidden instructions and act on them as if they came from the user. OpenAI’s CISO acknowledged to Axios that prompt injection remains “an unsolved security problem” across all AI platforms. Adversaries are expected to invest significant resources trying to exploit this vector.
Tuta, the encrypted email provider, published a pointed piece recommending against installing Atlas, citing the volume of data it sends to OpenAI servers compared to any other browser. Proton similarly warned that even with opt-in controls, the architecture of Atlas means OpenAI has visibility into browsing behavior that no other browser company currently has.
For users who are comfortable with the ChatGPT privacy policy for chat, Atlas adds a new category of data on top of that: a behavioral log of how you navigate the web.
What Works Well
- Research tasks: Atlas handles “find me the best X under $Y and compare three options” better than any single-tab ChatGPT session. It visits multiple sites, pulls structured data, and synthesizes a table without you switching contexts.
- Page Q&A: Asking the sidebar to explain a dense article or legal document is fast and contextually accurate because ChatGPT is reading the same page you are.
- Tab management: Scrolling tabs and tab groups solve a real problem for users who routinely work with 20 or more open tabs.
- Memory continuity: Returning users find Atlas remembers ongoing projects, which reduces repetitive context-setting in new chats.
- Familiar base: Because it runs on Chromium, existing Chrome extensions and workflows transfer without friction.
What Falls Short
- Sidebar layout compression: Fixed-width sites break visually when the sidebar is open. Some publication homepages reportedly become unusable.
- Agent Mode reliability: Multi-page form workflows frequently require user intervention. The agent loses context between form sections and sometimes fails to handle CAPTCHAs or login walls.
- macOS only for now: Windows users have no native option. The rollout timeline for Windows and mobile has not been confirmed as of early 2026.
- Prompt injection risk: Users running Agent Mode on unfamiliar or untrusted sites face a real, unresolved security exposure.
- Privacy posture: Users who rely on tracker blocking or fingerprinting protection will find Atlas substantially weaker than Chrome alternatives like Brave.
How It Compares to Competitors
Atlas entered a market that already had AI browser experiments. WebFX’s 2026 browser comparison placed Atlas alongside Perplexity’s Comet, The Browser Company’s Dia, and Arc as the main AI-integrated browser contenders.
The key distinction is depth of integration. Most competitors add an AI assistant as a sidebar or extension. Atlas positions ChatGPT as a first-class operating layer that can see every page and act on any of them. That integration is both its strongest feature and its biggest liability from a privacy standpoint.
For users already paying for ChatGPT Plus or Pro, Atlas adds substantial functionality at no incremental cost. For users not already in the OpenAI ecosystem, switching requires trusting OpenAI with a new class of behavioral data.
Who Should Use ChatGPT Atlas
Atlas makes the most sense for:
- Existing ChatGPT Plus or Pro subscribers who run research-heavy workflows
- Knowledge workers who regularly need to summarize long documents or compare information across multiple sources
- macOS users comfortable with OpenAI’s data practices
- Teams whose admins have approved Agent Mode and established clear use guidelines
It is a harder case for:
- Privacy-first users who rely on tracker blocking
- Windows or mobile users who cannot access it yet
- Anyone whose workflow requires unattended Agent Mode runs without supervision
- Developers or security professionals working on sensitive codebases or client data
Frequently Asked Questions
Is ChatGPT Atlas free to use?
The Atlas browser itself is free to download from chatgpt.com/atlas. Free ChatGPT users can access the sidebar and basic page Q&A. Agent Mode and extended Browser Memories require a Plus, Pro, or Business subscription. Plus starts at $20 per month.
Does ChatGPT Atlas work on Windows?
Not yet. Atlas launched on macOS in October 2025. OpenAI confirmed Windows, iOS, and Android versions are in development, but no public release date was confirmed as of early 2026. Forecasters tracked a Windows beta as an anticipated milestone for mid-2026.
Is ChatGPT Atlas safe for banking and financial sites?
Atlas is trained to pause automatically on financial sites before taking any action, and it asks for your confirmation before proceeding. However, because Agent Mode sends browsing data to OpenAI servers and prompt injection vulnerabilities exist, many security researchers recommend not using Agent Mode on banking, investment, or healthcare sites. You can restrict Agent Mode access to specific sites in settings.
Does OpenAI use my browsing data to train its models?
No, by default. The model training toggle is off by default in Atlas. Browsing content is only used for training if you actively opt in, and only if you also have “Improve the model for everyone” enabled in your account settings. Browser Memory summaries are stored on OpenAI servers for up to 30 days and then deleted, per OpenAI’s data controls page.
What is Agent Mode and how does it differ from Operator?
Agent Mode in Atlas lets ChatGPT click, scroll, and fill forms inside your actual browser session using your logged-in accounts. OpenAI’s earlier Operator product used a separate virtual browser. Agent Mode in Atlas is more capable because it acts within your authenticated sessions, but that also means mistakes have real consequences. It is available to Plus, Pro, and Business subscribers and is currently in preview.
Can ChatGPT Atlas replace Chrome?
For many everyday tasks, yes. Atlas runs the same Chromium engine as Chrome, supports Chrome extensions, and handles standard web browsing without issues. The main reasons to stay on Chrome include better privacy and tracker-blocking tools (especially with extensions like uBlock Origin), a more mature ecosystem, and Windows or mobile compatibility that Atlas has not yet delivered.
What happens if Agent Mode makes a mistake on a website?
Agent Mode is designed to narrate its steps and pause before consequential actions, such as submitting forms, making purchases, or interacting with sensitive accounts. You can interrupt or take over the browser at any time. However, if an action completes before you notice an error, you may need to contact the website directly to reverse it. OpenAI advises treating Agent Mode as a supervised tool, not a fully autonomous one.
Does Atlas support Chrome extensions?
Yes. Because Atlas is built on Chromium, most Chrome extensions install and run normally. There is no separate extension store; you install extensions the same way you would in Chrome. Note that extensions with broad permissions may interact with Browser Memories or Agent Mode in ways that are not fully documented.
Verdict
ChatGPT Atlas is the most ambitious attempt yet to make an AI model a genuine participant in web browsing rather than a tool you consult on the side. When it works, specifically for research tasks, page summarization, and light automation, it is noticeably faster and less friction-filled than switching between a browser and a chat window.
The limitations are real, though. Agent Mode is still in preview and requires close supervision for anything beyond simple tasks. The browser is macOS-only for now. And the privacy posture is, by measurable standards, weaker than Chrome, let alone Brave. The connection between your browsing behavior and OpenAI’s servers is deeper here than in any other browser on the market.
If you are already paying for ChatGPT Plus or Pro and you work on macOS, Atlas is worth testing. The core features are included in your existing subscription, and the productivity gains on research-heavy days can be significant. If privacy is a priority or you are on Windows, the current version is not ready to be your primary browser.
OpenAI has a history of shipping early and iterating fast. Atlas is clearly a version 1 product. The foundation is solid enough that it could become genuinely competitive as Agent Mode matures and the Windows and mobile versions ship.
