Guest access
Each invitation is scoped to one browser. Guests need host approval after connecting and start in Watch mode.
- Invitation lifetime
- 30 minutes
- Control
- Requires permission and an explicit Take control action
- Reconnecting
- Requires host approval again
- Host takeover
- Holds guest input and resets guests to Watch
- Revocation
- Closes access and invalidates the invitation
Guest names are assigned by the host. They are not verified identities.
Session files
Each browser has a persistent session folder. People sharing that browser share its files. Other browser environments have separate folders.
The file manager accepts filenames within that folder. Website uploads use the session picker. Downloads save there without opening an OS application.
- Outside paths and links
- Rejected
- Executable and script types
- Rejected
- File execution and terminal access
- No operation exposed by BrowserSeat
- File limit
- 20 MB per file; 100 MB and 200 files per browser
- New text documents
- Up to 1 MB; existing files cannot be overwritten
Files remain after a guest disconnects. Only invite people you trust with the browser’s existing files and signed-in accounts.
Device access
Camera, microphone, location, system clipboard sharing and device permissions are disabled in this alpha.
Connection data
Normal direct sessions carry video and control over encrypted WebRTC connections between the host and guest. The connection service exchanges pairing details, including SDP and ICE metadata.
Connection setup exposes network metadata. Direct connections can fail on restrictive networks; relay fallback has not been verified for this alpha.
Transport reference: WebRTC Security Architecture.
Current limits
BrowserSeat enforces file restrictions in its application code and uses Chromium renderer sandboxing. The Electron main process retains the owner’s OS permissions. Full OS containment is not implemented.
- Verified platform
- Windows development build
- Independent security audit
- Not completed
- Signed public installers
- Not published
- macOS and Chrome extension
- Public releases are in development
Browser sharing permits actions inside signed-in websites. Use appropriate website account roles and trusted guests.
Process reference: Electron’s sandbox model.