Episode 011 min 32 sec

ChatGPT website approvals: what to check before an agent acts

Keep cloud browser website access on “Always ask,” and read every payment confirmation before you say yes.

Try it yourself

Updated since the video

The video shows Settings › Integrations › Cloud computer. OpenAI’s help center now lists these controls under Settings › Cloud browser.
Cloud browser is part of ChatGPT Work on paid plans in supported regions, excluding Free and Go. Availability can vary during rollout and may depend on workspace permissions.

Before your AI goes shopping

In Settings › Cloud browser, website access is on “Always ask.”
You know what that setting covers: which websites ChatGPT can open. Allowing a site doesn’t approve anything you buy there.
Your Custom Instructions include the approval line below — as extra guidance, not a lock.
When ChatGPT asks you to confirm a booking or payment, you read the item, merchant, total price and link before answering.
Anything wrong? Say no, or stop the task. You make the final call.

Custom Instructions — copy & paste

Extra guidance, not a lock.

Never purchase anything, place an order, or authorize a payment without my explicit approval. First show me the item, merchant, total price, and link. Wait for my confirmation before proceeding.

Bix shows you how

Step 1: Open Settings › Cloud browser and check website access is on “Always ask.”
“Always ask” means you review every website access request. “Auto approve” lets ChatGPT review the URL and only ask you if it seems unsafe. “Always allow” allows every website and is not recommended. Site-specific allow or block choices override this default.
Step 2: On your phone, go to Settings › Customize ChatGPT, turn on customization, and paste the approval line into Custom Instructions.
This adds guidance the model tries to follow. It isn’t an enforced permission setting.
Step 3: When ChatGPT asks you to confirm a consequential action — like a booking or a payment — read it before you answer.
This confirmation is a separate safeguard from website access. Check the item, merchant, total price and link, then say yes, say no, or tell it what’s wrong.

What you should see

With “Always ask,” ChatGPT asks before it opens each new website. Separately, when it reaches a booking or payment, it’s designed to pause and ask you to confirm in chat — so you can check the details and decide.

Published: October 11, 2026
Instructions: Last checked: October 11, 2026
Tools: ChatGPT, Cloud browser
Sources: OpenAI Help Center: Using cloud browser in ChatGPT (opens in a new tab)

Transcript

Narration: Here's how to stop your AI agent from doing this. You asked for a bike tire. It picked four car tires and headed to checkout with your saved card. Your agent fills every gap with a confident guess, and it moves fast. So you add a stop before money moves. Three steps.

Narration: Step 1. In ChatGPT, go to Settings, then Integrations, then Cloud Computer. Check Website Approvals is still on Always Ask. Always Allow is about which sites it opens. Paying is separate, and it's designed to ask you first.

Narration: Step 2. On your phone, go to Settings, then Customize ChatGPT and turn on Customization. In Custom Instructions, paste the line on screen. Never buy anything without my approval. Show me the item, merchant, total and link first.

Narration: Step 3. When it pauses to confirm a payment, actually read it. Check the item, the price and the link. Then you say yes or tell it what's wrong.

Narration: Same list, second try. The agent finds a tire, then stops and asks, Item price, link, car tire. You say no, bike, tire, and it fixes the order. Treat your agent like a fast intern, not the boss. Save this before your AI goes shopping. Your AI can do the shopping. You make the final call.

Duration: 17 sec
Episode 11
What does locking a ChatGPT chat actually hide?
Locking a ChatGPT chat hides it from your regular history and search. OpenAI still stores it, and your training setting doesn't change.
Watch & try: What does locking a ChatGPT chat actually hide? →
Duration: 21 sec
Episode 10
Pip's AI found the deals. One's a fake.
An AI can find the deals, and one of them can be a fake shop. Before you pay: search the shop on another site, read reviews away from its own page, and never send gift-card codes to pay a seller.
Watch & try: Pip's AI found the deals. One's a fake. →
Duration: 21 sec
Episode 08
Your AI found a deal. Check this first.
AI shopping helpers can find fake shops too. Before you pay a shop you don’t know, search its name plus “scam” on another site, and set any AI that shops for you to ask before it pays.
Watch & try: Your AI found a deal. Check this first. →