← Back to Feed

Protecting Cookies with Device Bound Session Credentials

April 9, 2026 · Google Security Blog · Severity: LOW

Following our April 2024 announcement, Device Bound Session Credentials (DBSC) is now entering public availability for Windows users.

Key Takeaways

  • Google introduces Device Bound Session Credentials to protect cookies from theft by binding sessions to specific devices.
  • Device Bound Session Credentials prevent attackers from using stolen cookies to impersonate users in post-compromise scenarios.
  • Organizations should review the full article for complete details and implement relevant security measures.
☕ Buy a Coffee