Built-in browser

Use workspace browser tabs and configure site data, permissions, downloads, and the encrypted password vault.

Cordy's built-in browser is a manual browser pane inside a workspace. It is separate from terminal agents: current agents cannot control it through a Cordy browser bridge.

Open and navigate

Open a browser tab from the workspace tab controls. A blank tab focuses Search or enter address. Enter a URL or search terms, then use Back, Forward, Reload/Stop, and the address control. Add more browser tabs with New browser tab.

The toolbar also provides:

  • bookmark or unbookmark for the current URL;
  • DevTools;
  • hard reload;
  • copy URL;
  • open in the system browser; and
  • clear browsing data for all built-in browser tabs.

All built-in browser tabs share the dedicated persistent partition named persist:cordy-browser. Clearing all browsing data affects every built-in tab and cannot be undone.

Site permissions

Cordy can ask per origin only for clipboard read, sanitized clipboard write, and fullscreen. The decision is stored and can be revoked under Settings → Site permissions.

Camera, microphone, and geolocation are denied without a prompt. Other unlisted browser permissions are also denied.

Site data

Open Settings → Site data to see cookies grouped by host. Sign out for one site removes its cookies and web storage. Clear all browsing data removes shared cache, cookies, and sign-ins across the browser partition.

Downloads

Under Settings → Downloads, choose a download directory or follow the OS Downloads folder, and enable Ask where to save each file. Download toasts report start, completion, or failure and can reveal a completed file in its folder.

Password vault

Open Settings → Passwords to add, edit, remove, reveal, search, or fill saved credentials. Fill is available only for a built-in browser tab whose exact origin matches the saved scheme, host, and port. Import from CSV accepts Chrome-style password exports and starts in the configured download directory.

The vault file is browser-passwords.json inside Cordy's user-data directory. Passwords are written only as OS-keystore ciphertext through Electron safeStorage (DPAPI on Windows). If encryption is unavailable, Cordy refuses to save the password. Plaintext exists in memory only for an explicit reveal or fill.

Network and privacy

Opening a page makes ordinary requests to that website and its resources. Cordy has no browser telemetry or browsing-sync server. Site cookies, permissions, downloads settings, bookmarks, and encrypted credentials remain in local app storage until you clear them or open/export the relevant data yourself.