Manage session security with Device Bound Session Credentials

Device Bound Session Credentials (DBSC) is a browser-based browser security standard that binds a sign-in session to a specific device, so a stolen or leaked session cookie can't be reused on another device. 

How it works 

  • Workspaces and Enterprise organizations created after October 19, 2026 will have DBSC automatically enabled with no manual setup required.
  • Owners or admins on paid workspaces or Enterprise orgs can contact our Support team to turn DBSC on or off.
  • DBSC is currently supported when you use Slack in Google Chrome and Microsoft Edge on desktop.

Note: Enabling DBSC on an existing workspace may sign out active sessions and disrupt custom app integrations that rely on long-lived cookies.