Tech Apr 11, 2026 7 min How Chrome 146's DBSC uses TPM to neutralize session cookie theft Google officially ships Device Bound Session Credentials (DBSC) to all Windows users in Chrome 146. By locking private keys inside the TPM, stolen cookies become useless on any other device. Chrome Security Authentication TPM Web