What is Device Bound Session Credentials in Chrome?

DBSC binds your login cookies to your device's hardware keys, making stolen ones expire uselessly on other machines.

Does Google's DBSC protect against all malware?

No—it stops cookie reuse after theft, but doesn't block initial infection or other attacks like keyloggers.

Windows has it now in Chrome 146; macOS soon, with plans for mobile and software fallbacks.

🛡️ Security Tools

マルウェアがログインCookieを盗んだら——Googleの新Chrome機能で、他デバイスでは使い物にならない。日常ユーザーを苦しめるセッション乗っ取りへの本格防衛がついに登場だ。

Threat Digest Apr 11, 2026 1 min read

Read in: Deutsch English Español Français Italiano 日本語 한국어 Português (BR) Русский Türkçe

Published by

Threat intelligence. Zero noise.

#Chrome DBSC #Google Chrome update #browser security #cookie theft #cookie theft protection #malware defense #session credentials #session security

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by SecurityWeek