Markdown edition

# Claude Duet preview works in the background, with approval gates

> Anthropic's Claude Duet preview can work through connected accounts after users close the app. US Pro and Max access is by waitlist; background use and approvals set limits.

By BIGCHANGE.AI Editorial

Published: 2026-10-23T16:56:38.808Z
Updated: 2026-10-23T16:56:38.808Z
Canonical: https://bigchange.ai/blog/claude-duet-background-agent-preview-approval

![Conceptual charcoal illustration of one seated adult considering a blank-screen phone while a closed laptop rests on a side table.](https://bigchange.ai/api/media/file/claude-duet-phone-approval-pause-hero-v1.png)
AI-generated conceptual illustration by BIG CHANGE. No actual Claude Duet interface, account, task, approval or safety result is depicted.

Anthropic opened a waitlist on October 21 for Claude Duet, a research preview of an agent that can check connected accounts, prepare work and continue a task after its user closes the app. The immediate access is narrow: US Claude Pro and Max subscribers need an invitation, and Duet uses the same usage limits as their regular Claude plan. Team and Enterprise accounts are excluded for now.

Anthropic says Duet can send a morning brief, revisit connected accounts at intervals and surface a task when it needs a decision. It runs on its own cloud computer and browser, so the user's phone or laptop need not stay on. That background activity counts against the plan's five-hour and weekly usage limits. Anthropic has not published an independent measure of how reliably Duet chooses what deserves attention.

## The big change

- **What changed:** Claude Duet moves an agent's work from an open chat session to a continuing cloud task with periodic account checks.
- **Why it matters:** For people admitted to the US Pro and Max preview, work can be prepared while they are away. Background activity spends a shared usage budget, and consequential actions return to the user for approval.
- **What to watch:** Users cannot observe or take over Duet's browser. Anthropic warns it may misread a thread or misjudge urgency; broader availability and real-world reliability remain unresolved.

## What the agent can reach

According to [Anthropic's announcement](https://claude.com/resources/articles/claude-duet) and [support documentation](https://support.claude.com/en/articles/17631495-get-started-with-claude-duet), Duet carries over the memory, skills and connectors attached to a user's Claude account. It can work through connected services such as Gmail, Google Calendar, Slack and QuickBooks, and use its cloud browser for sites without a connector. The user starts each app connection and can disconnect it. Anthropic says disconnecting stops future access to that app, while memory of earlier conversations remains.

The browser belongs to Duet's cloud environment. During the preview, users cannot watch it work or take over that browser. Duet also cannot see every Claude project or files on the user's computer, and cannot change the work it can read in Claude. Those boundaries matter for anyone deciding which work to delegate: access to a connected account is different from access to a local machine.

The preview is included in Pro and Max at no extra charge. It still shares their usage budget. Background briefs and periodic checks spend that budget even when the user has not asked a fresh question, while larger jobs may require more work. Anthropic says it checks accounts at intervals to limit that consumption; an urgent message can therefore arrive between checks.

## Where approval begins

Anthropic says Duet may read, draft and prepare work on its own, but is designed to show an action and wait before sending a message, making a payment, signing a document or deleting anything. It says securities trading and transfers between accounts remain off-limits even with approval. The Tasks view shows work in progress and requests for input; only the user can mark a task complete.

For purchases, Anthropic describes Duet selecting an item for confirmation, then Link or Shop Pay handling the approved checkout. Its help article says each approved purchase uses a one-time card. The company says Duet's safeguards are meant to resist instructions hidden in emails and websites, while acknowledging that no such defense is perfect. These are the provider's descriptions of the preview's design; approval prompts and safety checks have not been independently verified in this report.

## Sources & further reading

- [Anthropic's October 21 announcement of Claude Duet](https://claude.com/resources/articles/claude-duet) establishes the preview, stated workflow, cloud browser, approval categories and waitlist. It is the company's account of its own product and does not independently establish effectiveness or safety.
- [Anthropic's Claude Duet help article](https://support.claude.com/en/articles/17631495-get-started-with-claude-duet) details eligibility, account access, usage limits and current restrictions. It documents intended behavior and may change during the research preview; it is not a record of a BIG CHANGE hands-on test.

## Sources

- [Anthropic: Introducing Claude Duet](https://claude.com/resources/articles/claude-duet) — Official announcement of the waitlist, described background workflow, cloud browser, usage and approval boundaries. It is a provider account and does not independently establish reliable or safe performance.
- [Anthropic Help Center: Get started with Claude Duet](https://support.claude.com/en/articles/17631495-get-started-with-claude-duet) — Mutable support article for eligibility, connectors, local/browser restrictions, five-hour and weekly limits, tasks, payments and prompt-injection caveat; not a BIG CHANGE product test.