Google has announced that Device Bound Session Credentials (DBSC) are now generally available in Chrome for Windows, following a beta period.
The rollout began on May 25 and is being gradually completed within 60 days. The feature will be enabled by default and applies to Workspace customers and users with personal Google accounts.
DBSC binds a session cookie to the device from which the user authenticated, ensuring that only the originating device can access the active session. This is intended to make it harder for malicious actors to exploit stolen cookies, even if malware is present on the device.