Device Bound Session Credentials, a new Chrome feature to protect your cookies and reduce data theft

It will bind authentication sessions to the device

3 min. read

Published onApril 3, 2024

published onApril 3, 2024

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Recently, Google Chrome brought inDevice Bound Session Credentials (DBSC), a feature aimed at reducing cookie theft, a common attack type that employs specialized malware. The malware, once on the PC, gains access to the cookies and sends them to remote servers.

For the unversed, cookies are small pieces of data saved by websites to store your browsing information and preferences. This way, you get a familiar experience when visiting the website the next time.

These cookies can also be used by threat attackers to gain unauthorized access to our accounts. Besides, your antivirus software is usually ineffective against such malware, given the latter has the same set of permissions as the former. This is where DBSC comes into the picture!

About Device Bound Session Credentials (DBSC) in Google Chrome

DBSC, an open-source project by Google Chrome, is available onGitHub. Google wants it to become the new web standard.

Theofficial blog postdescribesDevice Bound Session Credentialsas a feature that will generate a new key for each browsing session and link it locally to the device. For this, DBSC will utilize the built-inTPM(Trusted Platform Module)functionality. The blog post reads,

In a bid to preserve user privacy and reduce instances of cookie theft, DBSC prevents websites from correlating or tracking data. It also allows users to delete created keys from within the browser.

Since it’s currently in the testing stage, you will findDevice Bound Session Credentialslisted underflagson the following URL inGoogle Chrome:chrome://flags/

To enable it on Chrome, search forDevice Bound Session Credentialsin flags and then selectEnabledfrom the dropdown menu.

Such features are often introduced as experimental and then based on feedback and, after subsequent refining, released for all!

Of late, Chrome has been extensively working on improving its security infrastructure, fromhome network protection in Chrometo upgrades likeWindows Hello as an authentication method.

Such measures may help put a stop to theexponential rise in cyberattacks!

What do you think about DBSC in Chrome? Share with us in the comments section.

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low#

Copilot in Outlook will generate personalized themes for you to customize the app#

Microsoft will raise the price of its 365 Suite to include AI capabilities#

Death Stranding Director’s Cut is now Xbox X|S at a huge discount#

Outlook will let users create custom account icons so they can tell their accounts apart easier#

Device Bound Session Credentials, a new Chrome feature to protect your cookies and reduce data theft#

About Device Bound Session Credentials (DBSC) in Google Chrome#

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Device Bound Session Credentials, a new Chrome feature to protect your cookies and reduce data theft

About Device Bound Session Credentials (DBSC) in Google Chrome