Claude Code Sets Auto Mode as Default for Pro, Max, and Team Plans

Anthropic has announced that auto mode will become the default permission mode for Claude Code users on Pro, Max, and Team plans starting August 14, 2026. This change aims to enable longer-running autonomous work while improving security. According to Anthropic, manual review is often ineffective, with users approving 97% of permission prompts reflexively. In a controlled study with 1,053 paid testers, auto mode blocked 89% of dangerous commands, whereas human reviewers caught only 13.6%. Additionally, in a third-party evaluation by Trajectory Labs, Claude models in auto mode had zero successful prompt injection attacks, compared to a 19.03% attack rate for GPT-5.6 Sol in Codex Full Access mode. Auto mode remains opt-in for Enterprise and API users for now, with a planned transition in the coming month. The classifier blocks irreversible, destructive, or external actions, falling back to manual approvals after repeated blocks.