Chrome adopts app-bound encryption to stymie cookie-stealing malware

Google introduced app-bound encryption in Chrome 127 for Windows to protect cookies and other sensitive data from infostealer malware by binding decryption to Chrome’s identity and the device, complementing device-bound session cookies, enhanced download warnings, and event logs to raise attacker effort and detection likelihood; Google plans to extend this protection to tokens, passwords, and payment data, with guidance and policy options for users who require device roaming.