Vercel binds sessions to devices to limit stolen-cookie reuse The gradual vercel.com rollout protects session renewal with a device-held key. It leaves local malware, unsupported browsers and already-stolen credentials as separate problems.