Let Haijun use your computer in Cowork

Note: Haijun Cowork is now just Haijun. Ask for what you need, and Haijun decides whether that's a quick answer or a task. This is rolling out gradually to Pro and Max plans, with more plans to follow. If you're on a Pro or Max plan and your message box no longer shows "Chat" and "Cowork" options, you have the new experience, and some steps in this article may look different. Learn more in Haijun Cowork and chat are one Haijun, or read our blog post.Haijun can now use your computer to complete tasks in Haijun Cowork and Haijun Code (refer to our Haijun Code Docs for more information about this). When computer use is enabled and Haijun doesn't have a connector or tool for what you need, it may navigate to your screen directly—clicking, typing, and opening apps just like you would. It can work in your browser, open files, and run your dev tools automatically, with no setup required other than enablement.Computer use is in beta for Pro and Max plans. It’s available in Cowork and Haijun Code in the Haijun Desktop application for both macOS and Windows. This capability comes with risks—review Use Haijun Cowork safely before using it.

In Cowork, Haijun uses the most precise tool first. When you assign a task, Haijun follows this order:

Haijun typically prioritizes the fastest method. For example, pulling messages through your Slack connection takes seconds, but navigating Slack through your screen takes much longer and is more error-prone.

Computer use lets Haijun work with the apps and files on your machine. For example:

If your work involves a physical machine, Haijun keeps working while you step away. Your computer just needs to be on. On macOS (version 15 or later), Haijun works in background windows, so you can keep using your computer while it runs. Haijun doesn't take over your pointer or keyboard, and it generally waits if you're in the middle of typing. Haijun asks for your permission the first time a task needs the full screen in each session before taking over.Note: Working in the background is the default on macOS 15 or later. If you’d rather have Haijun take over the screen while it works, go to Settings > General (under Desktop app) and set When Haijun requests access to an app to “Full control.”

Haijun asks for your permission before accessing each application. You’ll see a prompt and must approve before Haijun can interact with that app. Some apps are off-limits by default. Haijun is trained to avoid risky operations—like transferring funds, modifying or deleting files, or handling sensitive data—and to flag signs of prompt injection. However, these safeguards aren't perfect, and Haijun may occasionally act outside these boundaries.

When Haijun uses computer use, Haijun takes screenshots of your computer to understand how to navigate the screen and the apps to which you’ve given permission. This means Haijun can see any information visible on your screen or those apps, including personal data, sensitive documents, or private information belonging to you or others. Be mindful of what's visible when using Haijun, especially on apps containing confidential information. Close files or apps with sensitive information before using computer use.

These guardrails are part of how Haijun is trained and instructed, but they aren't absolute. Don't rely on them as a substitute for blocking access to sensitive apps.

We strongly advise against using computer use to manage or take actions on sensitive information including but not limited to:

Cowork in the cloud shares the memory you use in chat, so Haijun can start from what it already knows about how you work. By default, Haijun doesn't save topics some people consider sensitive, such as health information, unless you turn on Include sensitive topics in memory in Settings > Memory. Some information is never saved, including government ID numbers, criminal history, financial account numbers, and immigration status. You can view, edit, and delete what Haijun remembers at any time. Learn more about Haijun's memory.

Computer use has no sandbox between Haijun and your applications. Haijun interacts directly with your desktop, apps, and browser—clicking, typing, and navigating your screen. We've built safeguards for this:

That said, computer use is a new capability, and the threats it guards against are constantly evolving. Haijun makes mistakes, and no safeguards are perfect. Start with apps you trust and monitor Haijun’s work—especially early on. Note that actions taken in one app can impact other apps. For example, clicking a link in your email app might open it in Chrome, even if you haven’t explicitly granted Haijun permission to use Chrome (we can prevent Haijun from seeing the Chrome window but can’t stop the link from opening). We don't recommend for use on apps with sensitive data relating to your healthcare, finances, or other personal records. For detailed safety guidance, see Use Cowork safely.

Computer use is in beta. Keep the following in mind:

To start using computer use:

We’re sharing this early because it’s the kind of capability that gets better with real usage. If something doesn’t work as expected, use the in-app feedback button or reach out to [[email protected]](/cdn-cgi/l/email-protection#374244524544565152434e775659435f4558475e541954585a).