Long

2024

Secure

Google has begun a broad rollout of a new Chrome security feature that ties login sessions to a device's hardware, a change that matters for anyone holding crypto wallets.
<blockquote>
 <h2 id="key-points">Key Points:</h2>
 <ul>
 <li>Google released Device Bound Session Credentials, which lock browser session cookies to a computer's security chip.</li>
 <li>The protection blocks a common attack that lets thieves bypass two-factor (2FA) logins by stealing cookies.</li>
 <li>Crypto users face added risk, since infostealer malware routinely targets wallets and exchange sessions.</li>
 </ul>
</blockquote>
<h2 id="how-chrome-now-shields-login-cookies">How Chrome Now Shields Login Cookies</h2>
Reports this week <a href="https://lifehacker.com/tech/google-chrome-just-rolled-out-a-major-new-security-feature" rel="noopener noreferrer nofollow">detailed</a> the wide release of Device Bound Session Credentials, known as DBSC, after months of testing across Chromium browsers.
The tool now reaches most users, from Workspace and Enterprise accounts to personal ones. It binds each login to a cryptographic key that never leaves the device.
A session cookie works like a wristband at a ticketed venue, letting a site remember a login without asking for a password or a two-factor code on every visit.
Thieves prize these files because a stolen cookie can <a href="https://thehackernews.com/2026/04/google-rolls-out-dbsc-in-chrome-146-to.html" rel="noopener noreferrer nofollow">bypass</a> that second layer entirely, and the tokens often sell on dark-web markets. DBSC stores the key inside a Windows Trusted Platform Module or a Mac Secure Enclave, then forces the browser to prove possession before any cookie refreshes.
The result is a cookie that turns useless on another machine.
Also Read:<a href="https://yellow.com/news/cftc-clears-kalshi-first-bitcoin-perpetual" rel="noopener noreferrer nofollow">Kalshi Wins CFTC Approval For First U.S. Bitcoin Perpetual Futures</a>
<h2 id="why-crypto-traders-should-care">Why Crypto Traders Should Care</h2>
For crypto users, a hijacked session can mean drained funds rather than a hacked inbox. Information-stealing malware now harvests browser cookies, saved passwords and wallet files in a single sweep before sending them to a remote server.
One analysis <a href="https://cybelangel.com/blog/infostealers-the-malware-that-breaks-in-without-breaking-anything/" rel="noopener noreferrer nofollow">found</a> that credential theft figured in roughly a third of intrusions tracked last year, a sign of how routine the tactic has become.
The trade has also turned industrial, with researchers <a href="https://www.bleepingcomputer.com/news/security/the-silent-storm-new-infostealer-hijacks-sessions-decrypts-server-side/" rel="noopener noreferrer nofollow">flagging</a> a subscription stealer called Storm that rents for under $1,000 a month and targets wallets through browser extensions and desktop apps.
Other strains <a href="https://www.microsoft.com/en-us/security/blog/2026/02/02/infostealers-without-borders-macos-python-stealers-and-platform-abuse/" rel="noopener noreferrer nofollow">watch</a> for sessions tied to Binance, Coinbase, MetaMask and Trust Wallet, then lift the cookie to enter an account without a password.
<h2 id="dbsc-s-long-road-to-users">DBSC's Long Road To Users</h2>
Google first <a href="https://security.googleblog.com/2026/04/protecting-cookies-with-device-bound.html" rel="noopener noreferrer nofollow">unveiled</a> DBSC in 2024 before moving it through a public beta and into general release on Chrome 146 and later for Windows, with version 148 and later covering Mac.
The company <a href="https://workspaceupdates.googleblog.com/2026/05/prevent-account-takeovers-with-DBSC-now-generally-available-in-the-Chrome-browser-for-Windows.html" rel="noopener noreferrer nofollow">enabled</a> it by default for Workspace accounts, where administrators cannot switch it off. For traders who leave exchange tabs and wallet extensions open all day, the update quietly closes one of the simplest routes into their money.
Read Next:<a href="https://yellow.com/news/dogecoin-reserves-edge-28b-whale-support" rel="noopener noreferrer nofollow">Dogecoin Reserves Edge Up To 28B As Whale Support Stays Weak</a>

Google Chrome Update Shields Crypto Traders From Sneaky 2FA Cookie Theft

Table of Contents

Yellow News

Other articles published on May 29, 2026

Join our free newsletter for daily crypto updates!