Story perspectives

Google Launches Device Bound Session Credentials to Boost Chrome Security

4/11/2026

Summary

Story summary

Google has launched Device Bound Session Credentials (DBSC) for Windows users on Chrome 146, with plans for macOS.
DBSC binds sessions to devices using hardware-backed security such as Trusted Platform Module (TPM) on Windows, preventing stolen cookies from being reused.
Google reports a measurable reduction in session hijacking attempts by infostealer malware since DBSC's early deployment.
Google plans to expand capabilities for broader device support and enhanced security features.

1 of 1

Story summary

Google has launched Device Bound Session Credentials (DBSC) for Windows users on Chrome 146, with plans for macOS.
DBSC binds sessions to devices using hardware-backed security such as Trusted Platform Module (TPM) on Windows, preventing stolen cookies from being reused.
Google reports a measurable reduction in session hijacking attempts by infostealer malware since DBSC's early deployment.
Google plans to expand capabilities for broader device support and enhanced security features.