Google has rolled out new protections in Chrome 146 for Windows to combat session cookie theft, a common method used by cybercriminals to hijack user accounts without passwords. The feature, called Device Bound Session Credentials, uses hardware-backed security to cryptographically bind authentication sessions to a user's device, making stolen cookies expire quickly and become useless to attackers. The technology was developed as an open standard with Microsoft's help, and macOS support is coming in a future release.