General · EdgepediaSeptember 17, 20267 min read

ChatGPT Atlas

ChatGPT Atlas was an AI-integrated web browser developed by OpenAI, built on Chromium and released on October 21, 2025 for macOS, with ChatGPT built into browsing, search, and an agent mode that could operate web pages on a user's behalf.¹^•² OpenAI later retired the browser, which no longer receives updates, and folded its architecture into the ChatGPT desktop app.³

Key fact	Detail
Launch	October 21, 2025, worldwide on macOS for Free, Plus, Pro, and Go users; Windows, iOS, and Android versions were announced as coming²
Foundation	Built on Chromium, the open-source engine behind Chrome, Edge, and Brave⁴
Architecture	OWL (OpenAI's Web Layer) ran Chromium's browser process outside the main Atlas app process, communicating over Chromium's Mojo IPC system⁵
Agent mode	Preview for Plus, Pro, and Business users; the agent viewed pages and took clicks and keystrokes inside the browser²^•⁶
Browser memories	Optional, off by default, separate from ChatGPT Memory; deleting browsing history deleted associated memories²^•³
Main security risk	Prompt injection, in which untrusted web content is interpreted as instructions to the agent⁶
Status	Retired; no longer receives updates, and OpenAI published guidance for exporting bookmarks and passwords³

Launch and positioning

OpenAI announced Atlas on October 21, 2025, putting the company in direct competition with Google, whose Chrome browser had amassed about 3 billion users worldwide.⁷ CEO Sam Altman called the launch a "rare, once-a-decade opportunity to rethink what a browser can be," and said he expected a chatbot interface to replace the traditional URL bar as the center of how people use the internet.⁷^•⁸ OpenAI's stated goal was that ChatGPT could "come with you anywhere across the web," helping in the window where the user already was, without copying and pasting or leaving the page.²

The browser arrived amid a wave of AI browsers, including Perplexity's Comet and The Browser Company's Dia, and as Google and Microsoft added AI features to Chrome and Edge.¹^•⁸ Atlas launched on macOS only, with OpenAI promising Windows, iOS, and Android versions later.¹

Features

Chat-first browsing. The new-tab page mirrored Chrome's simplicity with a field prompting "Ask ChatGPT or type a URL." Typing a short search prompt produced an LLM-written answer with embedded source links by default, alongside tabs of traditional link, image, video, and news results.⁸ A side chat panel let users ask questions about the active page, and ChatGPT could edit text directly in page elements such as a Gmail draft.⁸ In January 2026, OpenAI added an Auto search mode that switched between ChatGPT-generated answers and traditional Google Search results depending on the query.⁴

Browser memories. With the feature enabled, ChatGPT remembered key details from browsed content to improve responses, for example summarizing job postings viewed the previous week. Memories were private to the account, viewable and archivable in settings, and deleted when browsing history was cleared. A per-site toggle in the address bar controlled visibility; when it was off, ChatGPT could not view the page and no memories were created.² Browser memories were distinct from ChatGPT Memory, and changing one did not change the other.⁹

Agent mode. In this preview feature, the browser agent viewed webpages and took actions, clicks, and keystrokes inside the browser, working with the user's browsing context to research, automate tasks, and plan events or book appointments.²^•⁶ Demos showed the agent moving planning tasks from a Google Docs table into the task manager Linear and adding recipe ingredients to Instacart, pausing before checkout for user approval.⁸ The agent could operate only inside web tabs and could not execute code outside the browser, and users could run tabs logged out of web services or use incognito windows for browsing they did not want remembered.⁸

Architecture: OWL

OpenAI's engineering post, written by Ken Rockot, Member of the Technical Staff, and Ben Goodger, Head of Engineering for Atlas, describes the browser's central design decision: separating Atlas from the Chromium runtime.⁵ The team built a layer called OWL, OpenAI's Web Layer, which runs Chromium's browser process outside the main Atlas application process. The Atlas app acts as the OWL Client and the Chromium process as the OWL Host, communicating over Mojo, Chromium's own message-passing system, with custom Swift bindings written for it.⁵

This design had several stated benefits: the app itself was built almost entirely in SwiftUI and AppKit rather than a reskinned Chromium interface; Chromium booted asynchronously in the background for near-instant startup; a hang or crash in Chromium's main thread did not take Atlas down; and because OWL shipped internally as a prebuilt binary, most engineers never built Chromium locally, so Atlas builds took minutes rather than hours.⁵ For agent mode, agent-generated input events were routed directly to the renderer rather than through the privileged browser layer, preserving the sandbox boundary, and logged-out agent sessions ran in isolated in-memory stores whose cookies and site data were discarded when the session ended.⁵

Security and criticism

Prompt injection. OpenAI identified prompt injection, the embedding of malicious instructions in content an agent processes, as one of the most significant risks it defended against in Atlas.⁶ Because the agent can take many of the same actions a user can, a successful attack could in principle forward sensitive email, send money, or edit cloud files.⁶ OpenAI described a rapid response loop in which internal automated red teaming uncovered a new class of prompt-injection attacks, prompting a security update that included a newly adversarially trained model and strengthened safeguards.⁶ OpenAI's chief information security officer Dane Stuckey publicly called prompt injection a frontier, unsolved security problem.¹⁰

Independent research. A week after launch, researchers reported vulnerabilities including a NeuralTrust demonstration that jailbroke Atlas's omnibox by disguising a malicious prompt as a harmless URL, and attacks that injected instructions into ChatGPT's memory.¹¹ In October 2025, LayerX Security disclosed "Tainted Memories," an attack against Atlas targeting ChatGPT's long-term memory store.¹² A University of Washington study of seven agentic browsers, conducted in late January and early February 2026, demonstrated a full proof-of-concept cross-origin data theft attack on ChatGPT Atlas in Agent Mode, in which a malicious page used a prompt injection to trick the agent into reading cross-origin iframe content and submitting it to the attacker; the researchers concluded that in such cases the same-origin policy (browser rule blocking websites from reading other sites' data) is reduced to the strength of the agent's prompt-injection defenses.¹³ OpenAI declined the researchers' report because it did not include a full end-to-end prompt injection attack.¹³

Reception. Reviewers found that Chrome with Gemini won on speed and simplicity for single-page tasks, while Atlas was stronger when research spanned multiple sources.⁴ The Atlantic's review judged the product a fairly ordinary browser whose main effect was removing the friction of navigating to ChatGPT, and found agent mode slow and buggy.¹⁴ Forrester analyst Paddy Harrington framed agent mode as competing with a company holding what he called ridiculous market share.⁷

Retirement

OpenAI has retired ChatGPT Atlas, and the browser no longer receives updates.³ The company's retirement guidance explains that bookmarks, open tabs, and browsing history do not transfer automatically, that users who exported an HTML bookmarks file can import it into another browser such as Chrome, and that ChatGPT conversations remain available in ChatGPT separately from Atlas browser data.³

References

Topic: Encyclopedia › Technology and the built world › Computing and digital systems › Modern AI: foundation models, generative AI, and the AI industry › AI companies, people, and products › AI products and assistants › Chat assistants and AI search

Initially written Sep 17, 2026 · Reviewed: Oct 15, 2026 · Edited: Oct 15, 2026 · Last review: Oct 15, 2026

Notice something wrong?