Vercel rolls out device-bound protection for developer logins
Image: Primary Vercel is gradually rolling out a login defense that binds sessions to a user's device, BleepingComputer reported. Device Bound Session Credentials use a private key stored in the device's security hardware to prevent a stolen session cookie from being reused on another device.
The protection covers vercel.com, where developers manage projects and deployments. It complements Chrome's App-Bound Encryption, which makes cookies harder for information-stealing malware to extract.
The feature currently works in Chrome on macOS and Windows. Vercel is phasing in access to address edge cases involving OAuth apps and is separately rolling out a similar protection for its command-line tool.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
