Gemini Spark now integrates with Chrome

Source: Google Date: 2026-07-30 URL: https://blog.google/innovation-and-ai/products/gemini-app/gemini-spark-updates-july-2026/

Summary

Gemini Spark — Google’s AI assistant for automating web errands — now integrates directly with Chrome, using a user’s logged-in accounts and saved passwords to handle tasks like scheduling apartment viewings or researching flights. Google says the integration ships with built-in prompt-injection protections and keeps sensitive actions (payments) under explicit user control. Initial rollout is U.S.-first; the update also expands Google AI Pro access to 160+ additional countries.

Implications

Agentic-browsing/computer-use lane: granting an assistant standing access to saved credentials is a meaningfully higher-trust surface than prior Spark scope, and Google is explicit that prompt-injection defense shipped with the credential access rather than after. Adjacent to but distinct from the tooling-layer “distrust descends the stack” thread tracked elsewhere (untrusted repo config, branch names, CLI sandboxing) — same defensive posture, different attack surface: here it’s an agent with real account access being hardened against the pages it visits, not a dev tool being hardened against the repo it runs in. Worth watching for the first reported prompt-injection incident against a credentialed browser agent, from Spark or a competitor.