Let Claude use your computer in Cowork (original) (raw)

Claude can now use your computer to complete tasks in Cowork and Claude Code (refer to our Claude Code Docs for more information about this). When Claude doesn't have a connector or tool for what you need, it navigates your screen directly—clicking, typing, and opening apps just like you would. It can work in your browser, open files, and run your dev tools automatically, with no setup required.

How computer use works with Cowork

In Cowork, Claude uses the most precise tool first. When you assign a task, Claude follows this order:

Claude prioritizes the fastest method. For example, pulling messages through your Slack connection takes seconds, but navigating Slack through your screen takes much longer and is more error-prone.

What you can do

Computer use lets Claude work with the apps and files on your machine. For example:

If your work involves a physical machine, Claude keeps working while you step away. Your computer just needs to be on.

Permissions and access

Claude asks for your permission before accessing each application. You’ll see a prompt and must approve before Claude can interact with that app. Some apps are off-limits by default.

Claude is trained to avoid risky operations—like transferring funds, modifying or deleting files, or handling sensitive data—and to flag signs of prompt injection. However, these safeguards aren't perfect, and Claude may occasionally act outside these boundaries.

Safeguarding personal data

When Claude uses computer use, Claude takes screenshots of your computer to understand how to navigate the screen and the apps to which you’ve given permission. This means Claude can see any information visible on your screen or those apps, including personal data, sensitive documents, or private information belonging to you or others.

Be mindful of what's visible when using Claude, especially on apps containing confidential information. Close files or apps with sensitive information before using computer use.

Claude is trained to avoid

These guardrails are part of how Claude is trained and instructed, but they aren't absolute. Don't rely on them as a substitute for blocking access to sensitive apps.

Recommendations

What to avoid

We strongly advise against using computer use to manage or take actions on sensitive information including but not limited to:

Memory

Cowork has memory, which means Claude can learn how you work and retain context across sessions. Sensitive data—like passwords, financial details, or health information—is excluded from memory. You can view, edit, and delete what Claude remembers at any time.

Safety

Computer use has no sandbox between Claude and your applications. Claude interacts directly with your desktop, apps, and browser—clicking, typing, and navigating your screen. We've built safeguards for this:

That said, computer use is a new capability, and the threats it guards against are constantly evolving. Claude makes mistakes, and no safeguards are perfect. Start with apps you trust and monitor Claude’s work—especially early on. Note that actions taken in one app can impact other apps. For example, clicking a link in your email app might open it in Chrome, even if you haven’t explicitly granted Claude permission to use Chrome (we can prevent Claude from seeing the Chrome window but can’t stop the link from opening). We don't recommend for use on apps with sensitive data relating to your healthcare, finances, or other personal records.

Current limitations

This is a research preview. Keep the following in mind:

Get started with computer use

To start using computer use:

We’re sharing this early because it’s the kind of capability that gets better with real usage. If something doesn’t work as expected, use the in-app feedback button or reach out to [email protected].

Get started with Claude Cowork Use Claude Cowork safely Schedule recurring tasks in Claude Cowork Assign tasks from anywhere in Claude Cowork Use live artifacts in Claude Cowork