Application Bound Encryption is a Chrome security control that ties certain locally stored secrets more tightly to the browser application. Instead of treating data as broadly recoverable by any process with access to the profile, the browser encrypts or protects some values in a way that depends on Chrome-specific context. This makes offline theft of cookies, tokens, or other secrets harder after disk access, profile copying, or simple file exfiltration.
In cyber security, this matters because many browser-stealer families rely on grabbing credentials from the local profile and reusing them elsewhere. Application Bound Encryption raises the cost of that tactic and can force attackers toward live session abuse, browser automation, or in-memory extraction. For defenders, it is a useful hardening layer, but not a complete shield: if malware runs in the user context or controls an active browser session, it may still abuse authenticated access. Detecting unusual browser control, profile tampering, and credential access attempts remains important.