On July 16, 2026, Nstchrome kernel build 149 (202607161200) was released, followed the next day by client version 1.22.1. The 149 branch itself appeared back in June (build 202606101200), while the July update added five restrictions for team-managed profiles.
According to the kernel changelog, you can now block access to saved website passwords, Developer Tools, extension management, browser connections via CDP, and website notifications. The interface notes that blocked passwords will not be shown in the password manager, in website prompts, or after entering the system password. DevTools cannot be opened from the menu or with keyboard shortcuts. The extension restriction blocks access to the Chrome Web Store and the extensions management page.
On July 22, the company published a blog guide on turning these settings into a policy for shared accounts. Security settings are applied to a group of profiles. The policy also includes allowlists and blocklists for websites; when the rules overlap, the blocklist takes precedence.
There are some limitations. The restriction on viewing passwords cannot be enabled together with Vault password storage; the interface requires you to choose one or the other. Puppeteer and Playwright control the browser through CDP, so before enabling this restriction for profiles that run scripts, make sure automation continues to work. According to the interface hint, the restrictions work on kernel 149 build 202607161200 and later. Profiles running older kernels must be updated.
