GoKawiilOpenAI's ChatGPT Work now stores login cookies to auto-sign into websites
OpenAI has rolled out a feature within its agentic ChatGPT Work tool that lets the AI log into password-protected websites on a user's behalf. After an initial manual login, ChatGPT stores the session's cookies and reuses them for future visits, meaning it no longer needs to ask for credentials each time. The feature is limited to ChatGPT Pro and Plus subscribers and is meant to help the AI complete multi-step tasks like renewing a passport or comparing insurance costs.
GoKawiil's interpretation of the reporting above, not reported fact.
Persistent, automatic authentication is a major shift in how much autonomy people grant AI agents over sensitive accounts, since stored cookies effectively give ChatGPT standing access rather than one-time permission. This raises real questions about security if those cookies are compromised, and about how much oversight users retain once login is no longer a manual checkpoint. It also signals OpenAI's push toward fully autonomous 'agentic' browsing, where convenience is being traded for reduced user control.
- ChatGPT Work can now log into web accounts using stored cookies instead of asking for credentials each time.
- The feature works through ChatGPT's built-in browser and is available only to Pro and Plus subscribers.
- Users should be cautious about which sites they let ChatGPT access, given the security implications of persistent login.
YubiKey 5 NFC Security Key — If you're letting AI agents like ChatGPT sit on your logged-in sessions, hardware-backed authentication is a smart safeguard for the accounts you don't want automated. The YubiKey 5 NFC plugs into USB-A or taps via NFC on your phone, adding a physical step that no browser cookie can fake. It's a simple way to keep your most sensitive accounts firmly under human control.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: zdnet.com — Lance Whitney, 2026-08-27
Published there as: “ChatGPT can log into your web accounts without you now - but should you let it?”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.