Chrome adds Device‑Bound Session Credentials to block cookie theft for all users
Google released Device Bound Session Credentials (DBSC) as a default feature in Chrome 146, binding authentication cookies to a device’s hardware TPM or Secure Enclave. This proactive protection prevents stolen session cookies from being reused, cutting a major vector for account takeovers.