OpenAI launches the ChatGPT Atlas browser

Background

For AI companies the browser is a contested surface: it is where people read, search and move between tasks, so putting an assistant inside it changes what that assistant can see and do. Atlas arrived shortly after Perplexity's Comet browser and was seen as a challenge to Google Chrome^[2].

What launched

On 21 October 2025 OpenAI launched ChatGPT Atlas, a web browser built around ChatGPT, for macOS^[1][2]. The release was worldwide and covered Free, Plus, Pro and Go users; agent mode shipped in preview for Plus, Pro and Business subscribers^[3]. The framing matters: rather than bolting a chat panel onto an existing browser, the assistant is part of the browsing surface itself, present while the user moves between pages instead of waiting in a separate tab.

Agent mode and memory

Two features defined the product. Agent mode could browse and act on websites, and was available to paid subscribers^[2]. Browser memories let ChatGPT recall context from sites the user had visited; OpenAI said they were optional, could be archived, and were deleted along with browsing history^[3]. ChatGPT's memory was also built into the browser, so conversations could draw on past chats while the user was browsing^[3]. OpenAI said its roadmap included multi-profile support and better tools for developers of Apps SDK apps^[3].

Memory is what turns a browser from a search box into a place with a past. An ordinary chat assistant does not know which page you read yesterday; a browser that remembers can carry that context into a later conversation without the user restating it. Making the memories optional, archivable and removable together with browsing history is the control that keeps this from being purely automatic^[3].

Criticism

Critics raised concerns about prompt injection and about memories collected from browsing^[2]. Prompt injection is a class of attack in which text the model reads — on a page, in a document, in a message — is written to look like an instruction, so the model follows the attacker's wording rather than the user's intent. The risk grows when the same software both reads pages and can act on them. Browsing memories raised a second question: what a browser records about visited sites becomes material the assistant can reuse, so the record has to be visible and deletable, which is what the optional, archivable, delete-with-history design was meant to provide^[3].

Shutdown and significance

Atlas did not remain a standalone product. It was later folded into a combined desktop app and shut down on 9 August 2026^[2]. Its life was short, but it put several questions on the table at once: how much an assistant should remember, how to stop the text of a web page from behaving like an instruction, and whether the browser is the right home for an assistant. Those questions did not close when the product did.