ChatGPT can log into your web accounts without you now - but should you let it? (www.zdnet.com)

ChatGPT has introduced a new feature allowing it to log into your web accounts automatically without user input via its agentic ChatGPT Work, now available for Pro and Plus accounts. This functionality utilizes a built-in browser to store login credentials in cookies, making it convenient for users to manage online tasks like booking appointments or checking insurance costs. Users initially enter their credentials, and subsequent logins are automatic, although it has shown some limitations, such as errors with certain websites. While this innovation presents a significant convenience for users, it raises important privacy and security concerns. Experts warn that although ChatGPT does not directly access credentials, the cookies it uses can be vulnerable to session hijacking and other cyber risks. For cautious implementation, it's recommended that users apply this feature only to low-stakes sites initially, reserving sensitive accounts for later use until more robust security measures are outlined. Regular monitoring of account settings for unauthorized access is also advised to mitigate potential risks associated with this new capability.