app-bound encryption

Google Chrome has introduced app-bound encryption in version 127 for Windows to enhance cookie protection and defend against information-stealing malware. This feature improves the Data Protection API (DPAPI) by tying encrypted data to the application's identity, preventing unauthorized access by other applications. The new mechanism operates through a Windows service that verifies an application's identity, making it harder for attackers to decrypt data without gaining system privileges. App-bound encryption will protect not only cookies but also passwords, payment data, and other authentication tokens. This initiative is part of broader security measures by Google, which include download protection and account-based threat detection.