What is Claude Duet? How Anthropic’s new AI agent works, and how to use it more securely

What is Claude Duet?

Claude Duet is Anthropic’s proactive AI agent, launched on October 21, 2026. It’s a tool that you message the way you’d message a person, by typing or talking, rather than opening a chat and writing a prompt each time. Claude Duet checks the apps you’ve connected, decides what needs your attention, and keeps working on a task after you’ve closed the app.

Currently in research preview, it runs on Claude Opus 5.5 and works as a standalone app on iOS and Android, as well as on claude.ai. Anthropic built it with busy professionals and small business owners in mind — people juggling more decisions than they can realistically track at once.

Duet changes the relationship most people have with AI today. Unlike regular Claude or other more familiar agents, which generally wait for you to ask questions or assign tasks, Duet can take initiative, work independently, and contact you when a task needs your attention.

How is Claude Duet different from the regular Claude app?

While both tools come from Anthropic, Claude Duet isn’t an upgraded version of Claude — it’s a different way of working with an AI agent. The main Claude app waits for you to start a conversation. Claude Duet works proactively: It checks your connected accounts on a schedule, decides what’s worth flagging, and starts on a task, like drafting a reply or pulling together a report, before you’ve written a prompt.

A few other differences matter in practice. Claude Duet has its own separate app for now, instead of being accessible from the main Claude app, though you can also reach it through claude.ai once you have access. And unlike regular Claude, where you can pick a model, Claude Duet runs on Opus 5.5 and decides for itself how much effort a given job needs.

The differences are easiest to see side by side:

How does Claude Duet work?

Claude Duet is a proactive AI agent that helps you manage priorities and complete tasks through conversation. It uses your connected apps and can continue running without interaction, while keeping you involved in important decisions. A typical day with Claude Duet breaks down into six steps:

1. 1. Start with a morning brief. Claude Duet looks across your email and calendar, picks out what most needs your attention, and can start the first steps — drafting a reply for you to review, for instance — before you’ve opened the app.
2. 2. Give it a task. From there, you talk to it in one main thread, whether you type or send a voice message, and it picks up where the conversation left off. You can also open separate channels for different topics or projects — they all draw on the same shared memory, so you’re not re-explaining context each time.
3. 3. Let it work without you. The work itself happens on Claude Duet’s own cloud computer, not your phone or laptop, so a task keeps running after you close the app or your device goes to sleep. Rather than monitoring your accounts nonstop, Duet checks in every few hours — a deliberate tradeoff, since continuous checking would burn through your plan’s usage limits much faster.
4. 4. Follow its progress. Two tabs help you track what’s happening. The “Tasks” tab shows what Claude Duet is working on and flags the tasks that need a decision from you. The “Make” tab is where finished outputs — a research brief, a slide deck, a financial model, or a dashboard — end up.
5. 5. Review its browser work. For websites without a dedicated connector, Claude Duet uses its own browser in the cloud, though you can’t watch that browser work in real time or take control of it yourself.
6. 6. Approve significant actions. Whatever the task, one rule holds throughout — Claude Duet shows you what it’s about to do and waits for your approval before sending a message, making a payment, signing a document, or taking other consequential actions.

What can Claude Duet do?

Claude Duet can help manage everyday tasks across your connected apps, like organizing your inbox and scheduling meetings, preparing invoices, or making purchases. Instead of switching between tools, you can describe what you need in plain language and let Duet handle the steps.

A few examples of what you might actually say to it:

• “Flag urgent emails in my inbox.”
• “Reschedule my Thursday calls around my flight.”
• “Draft invoices for last week’s orders.”
• “Find the best price for office supplies and prepare an order.”

Early testers have reported Claude Duet catching issues they hadn’t asked about directly — in one case, flagging a property viewing that was listed on the wrong calendar day, and in another noticing that a client call was scheduled right before a flight and offering to move it.

To handle these tasks, Duet connects with popular apps and services, including Gmail, Google Calendar, Google Drive, Slack, QuickBooks, HubSpot, DocuSign, Calendly, Stripe, Gusto, Canva, Shopify, and LinkedIn. Altogether, it can draw on more than 6,000 connectors and plugins through the Claude Marketplace.

For purchases, Claude Duet uses Stripe’s Link wallet or Shopify’s Shop Pay. It confirms the item with you first, then pays using a one-time virtual card generated just for that purchase, so your real card number never reaches the merchant.

However, Duet has some limitations. It doesn’t support Microsoft 365 yet, can’t make phone calls or send text messages, and may sometimes misjudge which tasks need urgent attention. It’s also better suited to work-related tasks than personal errands. For important decisions, it’s worth reviewing its suggestions and actions before approving them.

Who can use Claude Duet?

Claude Duet is currently available as a research preview for Claude Pro and Max subscribers in the United States. Eligible users can join the waitlist. Team and Enterprise plans aren’t supported yet, though Anthropic has said it plans to bring Duet to those plans later, without giving a firm date.

If you’ve joined the waitlist but haven’t gotten in, the most common reason is simply timing — invitations go out in waves, so being on the list doesn’t guarantee a specific date. The other common snag is an email address mismatch. Access is tied to the exact email address you used to join the waitlist, so if it doesn’t match your Claude account, or the Apple or Google account on your phone, setup will stall.

If the app won’t load at all, rather than just blocking you on eligibility, check whether Claude is having a service outage before troubleshooting further. But if you’re outside the US, a more fundamental limit applies.

Is Claude Duet available outside the US?

Claude Duet works only with US-based Claude accounts, which rules out Australia, Canada, and Europe, along with every other region outside the US. Anthropic hasn’t announced an international rollout date.

Eligibility hinges on the account’s location, not on where you are when you open the app, though Anthropic hasn’t published the technical details of how that check works. A US-based subscriber traveling abroad faces a different problem than someone who lives outside the US entirely — the travel section below covers what to expect in that case.

If you live outside the US, no legitimate workaround exists for the availability. Your best options are to watch for Anthropic’s own announcements of a wider rollout.

Claude Duet’s price and usage limits

Claude Duet is included in the Claude Pro (which costs $20 billed monthly) and Max ($100 billed monthly) plans at no extra cost during the research preview — no separate fee applies on top of an eligible plan.

That doesn’t mean usage is unlimited. Claude Duet draws on the same five-hour session and weekly usage limits as regular Claude chat, and background work — the morning brief and periodic check-ins — counts toward those limits too. Heavy use of Duet, especially on larger jobs that need more back-and-forth, can make you reach your limits sooner than chatting with Claude alone. The periodic check-in schedule, rather than continuous monitoring, was designed partly to keep that background work from eating up your limits too quickly.

One cushion exists, though. When you’re admitted to the research preview, you get a one-time full reset of both your five-hour and weekly limits. That reset remains available until November 30, 2026.

How to get started with Claude Duet

Setting up Claude Duet is quick once you’re in — waiting for the invitation is usually the longest part:

1. 1. Go to Anthropic’s Claude Duet product page and select “Join the waitlist.”
2. 2. Enter your name and email address — if you already use Claude, use the email address on your Claude account.
3. 3. Choose your Claude plan and phone type (an iPhone or an Android device), and optionally note what you’d hand off to Duet first.
4. 4. Submit the form. Anthropic adds people gradually, and you’ll get an email when it’s your turn.
5. 5. When your invitation arrives, open it on your phone and follow the setup steps for your device. Use the Apple or Google account linked to the email address you gave Anthropic — access is tied to that address.
6. 6. Open Claude Duet and sign in with your Claude account. Once you have access, you can also use Claude Duet directly on claude.ai, not just through the standalone app.
7. 7. Connect only the apps you actually need — the app may take a few minutes to become available after you accept the invitation. 
8. 8. Test it on low-stakes tasks first, like a calendar check, before letting it act on anything consequential.

Is Claude Duet safe?

Anthropic has built several safety measures into Claude Duet. However, like any tool with access to your accounts, Duet still requires careful setup on your end.

Claude Duet’s built-in safety features

According to Anthropic, Claude Duet includes several safeguards to help protect your accounts, personal information, and connected apps:

• Hidden credentials. The form passes your credentials straight to Duet’s cloud browser, so they never enter your conversation with the model.
• Approval before action. Duet shows you what it plans to do and asks for your approval before taking important actions, such as sending messages, making payments, signing documents, or deleting files.
• Action classifier. Duet uses the same automatic safety classifier as Claude and Claude Code to check whether an action requires your approval before proceeding.
• Sensitive-data classifier. A dedicated classifier checks requests involving sensitive information. Duet blocks requests to share highly sensitive data, such as credit card numbers and government IDs, and only allows certain other information, such as health or financial details, when you explicitly authorize it.
• Hard limits. Some actions remain prohibited even with your approval. These include trading securities, transferring money between accounts, and accessing accounts that belong to someone else.
• Virtual cards. For purchases through Link or Shop Pay, Duet uses a one-time virtual card for each transaction, so merchants don’t receive your actual card number.
• Security testing. Anthropic tests Duet against prompt injection attacks, conducts internal and external penetration testing, and includes the tool in its public bug bounty program.

Keep in mind that these safeguards are based on Anthropic’s own claims. Independent test results aren’t available yet, but more assessments may follow as Claude Duet becomes more widely used.

Potential risks to keep in mind

Claude Duet’s safety features reduce risk, but they can’t remove it entirely. Before giving an AI assistant access to your accounts, it’s worth understanding a few potential issues:

• Prompt injection attacks. Malicious emails or websites may contain hidden instructions that try to trick Duet into taking actions you didn’t request. Phishing emails, including clone phishing messages that copy legitimate emails, are a common way to deliver these attacks.
• Access to personal information. The more apps you connect, the more personal information Duet can access. If someone gains unauthorized access to your Claude account, they could access information in your connected services.
• Mistaken actions. Duet may misunderstand your instructions or misjudge which tasks are urgent. That’s why it’s important to review its proposed actions rather than approve them automatically.
• Fraudulent payment requests. A fake invoice or an email that impersonates a company executive could trick Duet into preparing a payment. If you approve the request without checking its legitimacy, you could end up sending money to a scammer.
• Cloud data storage. Anthropic hasn’t yet published complete details about how long Duet’s cloud computer retains data or what happens to stored information after you disconnect an app.
• Research preview limitations. Duet is still in its research preview stage, so its features, performance, and behavior may change as Anthropic continues to develop it.

Most of these risks are manageable with a few sensible precautions. The next section covers practical steps you can take to use Claude Duet more safely.

How to use Claude Duet more securely

Claude Duet can save you time on everyday tasks, but giving an AI assistant access to your accounts also calls for taking a few extra precautions. Follow these tips to keep your information and connected apps more secure:

• Secure your Claude account. Use a strong, unique password and enable two-factor authentication (2FA) to make it harder for someone else to access your account.
• Limit connected apps. Only connect the services Duet needs to complete your tasks. Disconnect apps you no longer use to limit how much information Duet can access.
• Review approval requests. Read what Duet plans to do before giving it permission, especially when it comes to payments, signing contracts, or sending emails to people outside your organization.
• Use virtual cards for purchases. Stick to Link or Shop Pay’s one-time virtual cards instead of adding other payment methods. Virtual cards help keep your actual card details private.
• Check suspicious links. Don’t let Duet act on unfamiliar links in emails or tasks without checking them first. You can use a link checker to help identify potentially dangerous websites.
• Get approval before connecting work accounts. Check with your employer or IT team before giving Duet access to company tools or data. Unauthorized AI tools can contribute to shadow IT and create security risks for the entire organization.
• Keep your software updated. Install the latest updates for your device’s operating system and the Duet app to get security fixes and improvements.
• Be careful on public Wi-Fi. Avoid approving payments, contracts, or other sensitive actions over unsecured public networks. If you use Duet while traveling, secure your internet connection, too. The next section explains how.

How to access Claude Duet while traveling abroad

Claude Duet is currently available only to eligible US-based subscribers, so existing Pro and Max users with Duet access may have trouble accessing their accounts while traveling abroad. If you’re on a business trip or vacation, you may also need to use hotel, airport, or café Wi-Fi, which can introduce additional privacy risks when handling emails, invoices, or payments.

A virtual private network (VPN) can help protect your internet connection while traveling. It encrypts your internet traffic and routes it through a secure tunnel, which helps shield your traffic from others on the same public Wi-Fi network. A VPN also changes your visible IP address, which may help eligible US-based subscribers maintain a consistent connection experience when temporarily abroad. Keep in mind that Claude Duet’s eligibility is tied to your Claude account’s region rather than your IP, so account access ultimately depends on Anthropic’s rules.

NordVPN is one option worth considering. It’s an all-in-one* digital security app that combines a VPN with additional privacy and security features. It offers thousands of servers across many countries, including multiple US locations, and its real-time protection helps block known malicious websites — useful when reviewing links Duet surfaces from your emails or other connected apps.

* “All-in-one” refers to the VPN, scam protection, phishing protection, tracker and ad blocking, and other features available within the NordVPN app, depending on your device and the plan you choose.

Claude Duet alternatives

If Claude Duet isn’t available in your region or you want to explore other options, several AI assistants offer similar capabilities. OpenAI Dots and Meta Muse are two alternatives worth comparing, although their features, availability, and pricing may differ.

The table below compares the key features, availability, and pricing of these three AI agents as of October 2026.

You can also consider standard AI chat assistants, such as Claude or ChatGPT, if you mainly need help with writing, research, or answering questions rather than an agent that can manage tasks across connected apps. If you’re unsure which assistant to choose, check out our Claude vs. ChatGPT comparison article to see how they differ.

Should you try Claude Duet?

Claude Duet may be worth trying if you’re a busy professional or small business owner who wants to spend less time managing emails, schedules, and other routine tasks. It’s particularly useful if you already rely on supported apps and feel comfortable reviewing and approving their actions.

However, you will need to wait if you primarily use Microsoft 365, need access through a Team or Enterprise plan, or live outside the US. Duet is still in research preview, so its availability and capabilities may expand over time.

If you decide to try Duet, pay attention to app permissions, review important actions, and keep your internet connection secure, especially when traveling or using public Wi-Fi. For more privacy and security on any network, download NordVPN to encrypt your internet traffic. You can also try it with a 30-day money-back guarantee.