Google Brings New 2FA Theft Protection To Chrome For Windows Users

Google made Device Bound Session Credentials publicly available in Chrome 146 on Windows.

The feature binds authentication sessions to the device to help prevent session cookie theft.

On Windows, the protection uses the Trusted Platform Module for hardware-backed security.

Microsoft says a widespread 2FA bypass attack is ongoing; infostealers and attacker-in-the-middle tactics are involved.

Google says the protection will expand to macOS in an upcoming Chrome release.