Keep the agent's browser separate from yours
Because each task gets its own Space (a separate workspace inside one browser), Codex can run bounded tasks without sharing the active tabs you are using. Spaces still have their own limits and site permissions, so review the Space before granting access to a sensitive account.
The Codex Chrome extension works differently: it acts inside the Chrome profile you have chosen to connect. OpenAI describes per-website approval and domain controls for that integration, so a workflow can pause for permission when it reaches a new site.

