Device Bound Session Credentials (DBSC) is now generally available in Chrome for Windows, enhancing security for Google Workspace users. This feature binds session cookies to the user's device, mitigating the risk of session theft. DBSC inherently makes it harder for attackers to exploit stolen cookies even with malware present. The general availability means Workspace admins don't need to enable DBSC, it's activated automatically. Combining DBSC with context-aware access offers even greater security controls for businesses. Administrators can monitor DBSC activities through audit logs available within the security investigation tool. This feature is enabled automatically, with no option for administrators to disable it. There is also no configuration available to end users regarding this functionality. The rollout began gradually on May 25, 2026, reaching all users within 60 days. DBSC is available to all Google Workspace customers and individual subscribers. More information can be found in the provided Google Workspace Admin Help documentation.