Red Flag? OpenAI's Agentic ChatGPT Work Signs Into Your Accounts Without You

In brief

• ChatGPT Work's browser on web and mobile can now complete tasks on sites that require you to sign in.
• You enter credentials once; the agent can keep working and the session may stay signed in for later tasks.
• OpenAI says the model can't see your username or password, and they aren't stored or used for training.

OpenAI added an agentic browser capability in its August 25 release notes, letting ChatGPT Work take over a task on a login-gated site and keep working while you step away.

You ask it to do something on a site that needs a login. If that site allows authentication, ChatGPT surfaces the login screen so you can type your credentials or a security code. Once you're in, the agent keeps going and the session may stay signed in for future tasks, so you don't have to log in again.

OpenAI says the browser supports password managers for that step, and that the model can't see your username or password; they aren't stored and aren't used for training.

Where the consent questions start

Authenticating once hands the agent a persistent foothold on an account you'd normally have to be present to open. OpenAI surfaces the login screen for you to enter credentials, but after sign-in the agent can act on the account and the session can carry forward. "You can hand off a task and step away while it keeps working," the release says. The design assumes you're not watching.