AIToday
Large Language ModelsAI Business & IndustryTHE DECODERPublished: Aug 15, 2026, 04:01 JST5 min read

OpenAI's Computer History turns clicks into searchable ChatGPT memories

OpenAI's Computer History turns clicks into searchable ChatGPT memories

Key takeaway

  • OpenAI has released Computer History, a macOS feature that records user interactions—clicks, keystrokes, app switches—and converts them into searchable text summaries that ChatGPT can use as memory context.

  • The system can detect recurring workflows and suggest automations built by Codex, useful for tasks like finding recent documents or generating meeting summaries.

  • However, memory files are stored unencrypted on disk and accessible to any program under the same user account, and OpenAI warns of prompt injection risks if malicious web instructions are captured.

3 Key Points

  1. What happened

    OpenAI launched Computer History, a macOS feature that records user clicks, keystrokes, keyboard shortcuts, and app switches through the system's accessibility layer, converts them into text summaries stored as local Markdown files, and lets ChatGPT and Codex access them as context. The feature replaces an earlier research preview called "Chronicle" that used screenshots instead.

  2. Why it matters

    The system can spot recurring workflows and suggest automations (called "Skills") that Codex can build into reusable templates — so users can ask ChatGPT to find recently edited documents or generate standup summaries by pulling from their recorded activity. However, memory files are stored unencrypted as plaintext on the local file system, meaning any program under the same macOS user account could read them, and OpenAI's own documentation warns of heightened prompt injection risks if malicious instructions on a webpage trick ChatGPT into following them.

  3. What to watch

    The feature requires explicit opt-in from both workspace admins and individual users in Business and Enterprise workspaces, and users can control which apps contribute data via include and exclude lists; recording can be paused or resumed from the macOS menu bar. Computer History is not yet available in the European Economic Area, Switzerland, or the United Kingdom.

In Depth

Read the full story

OpenAI has introduced Computer History, a macOS feature that transforms how users interact with ChatGPT by creating a searchable timeline of their digital activities. Unlike the earlier "Chronicle" research preview, which captured screenshots, Computer History records interaction events: clicks, keystrokes, keyboard shortcuts, and app switches, all read through macOS's accessibility system. Screenshots, screen recordings, microphone input, and system audio are explicitly not captured, and activity in private browsing mode is never included, according to OpenAI.

The system converts these captured events into text summaries at regular intervals, storing them locally as Markdown memory files. The timeline view groups these summaries by day and time and identifies which applications were involved. This design enables Computer History to detect recurring workflows—when ChatGPT identifies repeatable patterns in a user's activity, the timeline suggests a "Skill" or automation template that users can ask Codex to build. Typical use cases cited by OpenAI include finding recently edited documents or generating standup summaries from recorded activity.

Access to Computer History is gated by a multi-layered permission system. In Business and Enterprise workspaces, an admin must explicitly enable the feature first; individual users must then consent separately to have it activated. Users retain granular control over which apps and websites contribute data through include and exclude lists, and they can pause or resume recording at any time from the macOS menu bar. However, Computer History is not yet available in the European Economic Area, Switzerland, or the United Kingdom.

Data storage presents a notable security consideration. Temporary event files sit on the Mac within the ChatGPT app group and are deleted after 48 hours. The memory files generated from them, however, remain as plaintext Markdown on the local file system until the user manually deletes them—and critically, these files are not encrypted. This means any program running under the same macOS user account could potentially read them. OpenAI processes temporary event files on its servers during memory generation but states it does not retain them after processing unless legally required. The files are not used for AI training, OpenAI says, though chat contents that include memories as context may become training data depending on the user's data control settings. OpenAI's own documentation flags a heightened prompt injection risk: because Computer History captures content from apps and websites, malicious instructions embedded on a webpage could trick ChatGPT or Codex into following them. The company recommends pausing recording or excluding apps entirely when handling sensitive health, financial, or personal data, and advises against using the feature with communication apps unless all participants have explicitly consented.

Context & Analysis

Computer History represents a shift in how OpenAI approaches activity tracking for AI context. Rather than capturing visual screenshots as the earlier "Chronicle" research preview did, the new system records interaction events—a design choice that reduces the volume of data while focusing on what the user actually did (keystrokes, clicks, app transitions). This event-based approach enables a key differentiator: the ability to detect recurring workflows and suggest automations, turning repetitive user patterns into reusable "Skills" that Codex can build into templates.

However, the feature introduces a security tradeoff that OpenAI acknowledges but does not fully resolve. Memory files are stored unencrypted as plaintext Markdown on the local file system, meaning any program or process running under the same macOS user account could access them. This is a meaningful departure from typical encryption practices for sensitive user data, and users who enable the feature would need to trust not only OpenAI's servers but also the security of their entire local machine. OpenAI has also flagged prompt injection as a heightened risk: because Computer History captures content from websites and apps, malicious instructions embedded in a webpage could potentially be passed to ChatGPT or Codex as if they were legitimate user intent.

The multi-layered opt-in system—requiring both admin and user consent in Business and Enterprise workspaces—suggests OpenAI is attempting to address these risks through access controls rather than encryption. Notably, the feature is unavailable in the European Economic Area, Switzerland, and the United Kingdom, likely due to data protection regulations in those regions.

FAQ

What data does Computer History capture?
Computer History records clicks, keystrokes, keyboard shortcuts, and app switches read through macOS's accessibility system. It does not capture screenshots, screen recordings, microphone input, system audio, or activity in private browsing mode.
Who needs to approve Computer History before it starts working?
In Business and Enterprise workspaces, an admin must explicitly enable the feature first, and then each individual user must consent separately. Users can also turn the Memories feature on or off and control which apps contribute data through include and exclude lists.
How long is Computer History data stored and is it encrypted?
Temporary event files are deleted after 48 hours, but the memory files generated from them remain as plaintext Markdown on the local file system until the user manually deletes them. These files are not encrypted.
Where is Computer History available?
The feature is not yet available in the European Economic Area, Switzerland, or the United Kingdom.

Get the latest Large Language Models news every morning

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · takes 30 seconds · unsubscribe anytime

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articleMan hid AI prompts in court filing to sway case, judge warns of 'dangerous' trend

The AI news that matters, in one minute each morning.

Sign up free