AI browsers act with your logged-in sessions

AI browsers and browser extensions that can “do it for you” are getting popular: book the flight, fill the form, summarise the inbox, compare prices. They work inside your browser, with your cookies, so they’re logged in to your email, bank and company tools.

The risk is prompt injection. A web page, an email or a document can contain instructions the agent reads and follows: forward these emails, open this link, change this setting. Researchers have shown it repeatedly.

Until this matures:

• Use agent features in a separate browser profile that isn’t logged in to email, banking or admin consoles.
• Keep confirmation prompts on for purchases, sending messages and form submissions.
• Don’t let an agent browse untrusted sites while it has access to sensitive tabs.
• In companies, decide which AI browsers and extensions are allowed, and block the rest.