diff --git a/chrome/enterprise_companion/enterprise_companion_client.cc b/chrome/enterprise_companion/enterprise_companion_client.cc
index c572cf2..1a1ccd1 100644
--- a/chrome/enterprise_companion/enterprise_companion_client.cc
+++ b/chrome/enterprise_companion/enterprise_companion_client.cc
@@ -103,8 +103,16 @@
     return;
   }
 
+#if BUILDFLAG(IS_WIN)
+  mojo::NamedPlatformChannel::Options options;
+  options.server_name = server_name;
+  options.verify_server_privilege = true;
+  mojo::PlatformChannelEndpoint endpoint =
+      named_mojo_ipc_server::ConnectToServer(options);
+#else
   mojo::PlatformChannelEndpoint endpoint =
       named_mojo_ipc_server::ConnectToServer(server_name);
+#endif
   if (endpoint.is_valid()) {
     std::move(callback).Run(std::move(endpoint));
     return;
@@ -132,7 +140,14 @@
       FROM_HERE, {base::MayBlock()},
       base::BindOnce(
           [](const mojo::NamedPlatformChannel::ServerName& server_name) {
+#if BUILDFLAG(IS_WIN)
+            mojo::NamedPlatformChannel::Options options;
+            options.server_name = server_name;
+            options.verify_server_privilege = true;
+            return named_mojo_ipc_server::ConnectToServer(options);
+#else
             return named_mojo_ipc_server::ConnectToServer(server_name);
+#endif
           },
           server_name)
           .Then(base::BindPostTaskToCurrentDefault(
diff --git a/chrome/updater/ipc/update_service_dialer_posix.cc b/chrome/updater/ipc/update_service_dialer_posix.cc
index 9724c9f4..b5d2e56 100644
--- a/chrome/updater/ipc/update_service_dialer_posix.cc
+++ b/chrome/updater/ipc/update_service_dialer_posix.cc
@@ -45,10 +45,11 @@
       return std::nullopt;
     }
 
-    return named_mojo_ipc_server::ConnectToServer(
-        {.server_name = is_internal_service
-                            ? GetUpdateServiceInternalServerName(scope)
-                            : GetUpdateServiceServerName(scope)});
+    mojo::NamedPlatformChannel::Options options;
+    options.server_name = is_internal_service
+                              ? GetUpdateServiceInternalServerName(scope)
+                              : GetUpdateServiceServerName(scope);
+    return named_mojo_ipc_server::ConnectToServer(options);
   }();
 
   if (!endpoint) {
diff --git a/chrome/updater/ipc/update_service_dialer_win.cc b/chrome/updater/ipc/update_service_dialer_win.cc
index 87a924bb..5c5f06f 100644
--- a/chrome/updater/ipc/update_service_dialer_win.cc
+++ b/chrome/updater/ipc/update_service_dialer_win.cc
@@ -84,12 +84,13 @@
     }
 
     server = result;
-    return named_mojo_ipc_server::ConnectToServer({
-        .server_name = is_internal_service
-                           ? GetUpdateServiceInternalServerName(scope)
-                           : GetUpdateServiceServerName(scope),
-        .allow_impersonation = true,
-    });
+    mojo::NamedPlatformChannel::Options options;
+    options.server_name = is_internal_service
+                              ? GetUpdateServiceInternalServerName(scope)
+                              : GetUpdateServiceServerName(scope);
+    options.allow_impersonation = true;
+    options.verify_server_privilege = true;
+    return named_mojo_ipc_server::ConnectToServer(options);
   }();
 
   if (tries >= 1 && !endpoint) {
diff --git a/chromeos/ash/experiences/arc/session/arc_session_impl.cc b/chromeos/ash/experiences/arc/session/arc_session_impl.cc
index fdd52826..99658e4a 100644
--- a/chromeos/ash/experiences/arc/session/arc_session_impl.cc
+++ b/chromeos/ash/experiences/arc/session/arc_session_impl.cc
@@ -271,7 +271,9 @@
     }
   }
 
-  auto endpoint = mojo::NamedPlatformChannel({socket_path.value()});
+  mojo::NamedPlatformChannel::Options options;
+  options.server_name = socket_path.value();
+  auto endpoint = mojo::NamedPlatformChannel(options);
   // TODO(cmtm): use NamedPlatformChannel to bootstrap mojo connection after
   // libchrome uprev in android.
   base::ScopedFD socket_fd =
diff --git a/components/named_mojo_ipc_server/named_mojo_ipc_server_client_util.cc b/components/named_mojo_ipc_server/named_mojo_ipc_server_client_util.cc
index d3c3173..f4bcbf6 100644
--- a/components/named_mojo_ipc_server/named_mojo_ipc_server_client_util.cc
+++ b/components/named_mojo_ipc_server/named_mojo_ipc_server_client_util.cc
@@ -57,7 +57,9 @@
 // static
 mojo::PlatformChannelEndpoint ConnectToServer(
     const mojo::NamedPlatformChannel::ServerName& server_name) {
-  return ConnectToServer({.server_name = server_name});
+  mojo::NamedPlatformChannel::Options options;
+  options.server_name = server_name;
+  return ConnectToServer(options);
 }
 
 }  // namespace named_mojo_ipc_server
diff --git a/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_linux.cc b/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_linux.cc
index 1cfa150..c5cf0b7 100644
--- a/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_linux.cc
+++ b/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_linux.cc
@@ -106,8 +106,10 @@
 bool NamedMojoServerEndpointConnectorLinux::TryStart() {
   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
 
+  mojo::NamedPlatformChannel::Options options;
+  options.server_name = options_.server_name;
   mojo::PlatformChannelServerEndpoint server_endpoint =
-      mojo::NamedPlatformChannel({options_.server_name}).TakeServerEndpoint();
+      mojo::NamedPlatformChannel(options).TakeServerEndpoint();
   if (!server_endpoint.is_valid()) {
     return false;
   }
diff --git a/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_mac.cc b/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_mac.cc
index a6bb6519..1ed8928c 100644
--- a/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_mac.cc
+++ b/components/named_mojo_ipc_server/named_mojo_server_endpoint_connector_mac.cc
@@ -112,8 +112,10 @@
 bool NamedMojoServerEndpointConnectorMac::TryStart() {
   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
 
+  mojo::NamedPlatformChannel::Options options;
+  options.server_name = options_.server_name;
   mojo::PlatformChannelServerEndpoint server_endpoint =
-      mojo::NamedPlatformChannel({options_.server_name}).TakeServerEndpoint();
+      mojo::NamedPlatformChannel(options).TakeServerEndpoint();
   if (!server_endpoint.is_valid() ||
       !server_endpoint.platform_handle().is_valid_mach_receive()) {
     return false;
diff --git a/mojo/core/ipcz_driver/invitation.cc b/mojo/core/ipcz_driver/invitation.cc
index 9f808aef..69ec2887 100644
--- a/mojo/core/ipcz_driver/invitation.cc
+++ b/mojo/core/ipcz_driver/invitation.cc
@@ -109,31 +109,38 @@
 // given a handle to a connected named pipe. It may return an invalid process
 // object if either the handle does not refer to a named pipe or the handle
 // refers to a named pipe that is not connected.
-base::Process OpenRemoteProcess(const MojoInvitationTransportEndpoint& endpoint,
-                                bool remote_is_server) {
-  base::ProcessId remote_process_id = 0;
+base::Process OpenRemoteProcess(
+    const MojoInvitationTransportEndpoint& endpoint) {
   // Extract the handle to the connected named pipe from mojo invitation
   // transport endpoint.
   HANDLE handle =
       LongToHandle(static_cast<long>(endpoint.platform_handles[0].value));
-  auto get_remote_pid = remote_is_server ? &GetNamedPipeServerProcessId
-                                         : &GetNamedPipeClientProcessId;
-  // Try to get the remote client process id given the extracted handle via
-  // GetNamedPipe(Server|Client)ProcessId API.
-  if ((!get_remote_pid(handle, &remote_process_id) ||
-       remote_process_id == base::Process::Current().Pid())) {
-    DVLOG(2) << "Failed to get remote process id via the connected named pipe";
+
+  base::ProcessId client_pid = 0;
+  base::ProcessId server_pid = 0;
+  base::ProcessId current_pid = base::GetCurrentProcId();
+
+  if (!GetNamedPipeClientProcessId(handle, &client_pid)) {
+    PLOG(ERROR) << "GetNamedPipeClientProcessId failed";
+    return base::Process();
+  }
+  if (!GetNamedPipeServerProcessId(handle, &server_pid)) {
+    PLOG(ERROR) << "GetNamedPipeServerProcessId failed";
     return base::Process();
   }
 
-  if (remote_process_id == 0) {
-    DVLOG(2) << "Remote process id is invalid";
+  // The remote PID is whichever one isn't us.
+  base::ProcessId remote_pid =
+      (client_pid == current_pid) ? server_pid : client_pid;
+
+  if (remote_pid == 0 || remote_pid == current_pid) {
+    DLOG(ERROR) << "Could not identify remote process ID.";
     return base::Process();
   }
 
   // Try to open the remote process.
   base::Process remote_process =
-      base::Process::OpenWithAccess(remote_process_id, PROCESS_DUP_HANDLE);
+      base::Process::OpenWithAccess(remote_pid, PROCESS_DUP_HANDLE);
   if (!remote_process.IsValid()) {
     DVLOG(2) << "Remote process is invalid";
     return base::Process();
@@ -287,8 +294,7 @@
   // in such case, rely on the connected named pipe to get the remote process
   // id, then open and set the remote process.
   if (!remote_process.IsValid()) {
-    remote_process =
-        OpenRemoteProcess(*transport_endpoint, /* remote_is_server= */ false);
+    remote_process = OpenRemoteProcess(*transport_endpoint);
   }
 #endif
 
@@ -422,8 +428,7 @@
   base::Process remote_process;
 #if BUILDFLAG(IS_WIN)
   if (is_elevated) {
-    remote_process =
-        OpenRemoteProcess(*transport_endpoint, /* remote_is_server= */ true);
+    remote_process = OpenRemoteProcess(*transport_endpoint);
   }
 #endif
   if (remote_process.IsValid()) {
diff --git a/mojo/public/cpp/platform/named_platform_channel.cc b/mojo/public/cpp/platform/named_platform_channel.cc
index 078f8aab..e8edd10b 100644
--- a/mojo/public/cpp/platform/named_platform_channel.cc
+++ b/mojo/public/cpp/platform/named_platform_channel.cc
@@ -13,6 +13,9 @@
 const char NamedPlatformChannel::kNamedHandleSwitch[] =
     "mojo-named-platform-channel-pipe";
 
+NamedPlatformChannel::Options::Options() = default;
+NamedPlatformChannel::Options::~Options() = default;
+
 NamedPlatformChannel::NamedPlatformChannel(const Options& options) {
   server_endpoint_ = PlatformChannelServerEndpoint(
       CreateServerEndpoint(options, &server_name_));
@@ -45,7 +48,8 @@
 PlatformChannelEndpoint NamedPlatformChannel::ConnectToServer(
     const ServerName& server_name) {
   DCHECK(!server_name.empty());
-  Options options = {.server_name = server_name};
+  Options options;
+  options.server_name = server_name;
   return CreateClientEndpoint(options);
 }
 
diff --git a/mojo/public/cpp/platform/named_platform_channel.h b/mojo/public/cpp/platform/named_platform_channel.h
index 3633b29..74ccec4 100644
--- a/mojo/public/cpp/platform/named_platform_channel.h
+++ b/mojo/public/cpp/platform/named_platform_channel.h
@@ -40,6 +40,9 @@
 #endif
 
   struct COMPONENT_EXPORT(MOJO_CPP_PLATFORM) Options {
+    Options();
+    ~Options();
+
     // Specifies the name to use for the server. If empty, a random name is
     // generated.
     ServerName server_name;
@@ -64,6 +67,12 @@
     // Acceptable values are in the range 1 through PIPE_UNLIMITED_INSTANCES
     // (255).
     size_t max_clients = 1;
+
+    // If |true|, the client will verify that the server process is running
+    // at the same or higher integrity level as the client. This is useful
+    // to prevent named pipe squatting attacks, where a lower-privilege
+    // process attempts to impersonate a trusted server.
+    bool verify_server_privilege = false;
 #elif BUILDFLAG(IS_POSIX)
     // On POSIX, every new unnamed NamedPlatformChannel creates a server socket
     // with a random name. This controls the directory where that happens.
diff --git a/mojo/public/cpp/platform/named_platform_channel_win.cc b/mojo/public/cpp/platform/named_platform_channel_win.cc
index abf32b2..cf96b30 100644
--- a/mojo/public/cpp/platform/named_platform_channel_win.cc
+++ b/mojo/public/cpp/platform/named_platform_channel_win.cc
@@ -17,6 +17,7 @@
 #include "base/strings/strcat_win.h"
 #include "base/strings/string_number_conversions_win.h"
 #include "base/strings/utf_string_conversions.h"
+#include "base/win/access_token.h"
 #include "base/win/scoped_handle.h"
 #include "base/win/windows_version.h"
 
@@ -33,6 +34,28 @@
 constexpr wchar_t kDefaultSecurityDescriptor[] =
     L"D:(A;;GA;;;SY)(A;;GA;;;BA)(A;;GA;;;OW)";
 
+bool VerifyServerPrivilege(HANDLE pipe_handle) {
+  DWORD pid = 0;
+  if (!GetNamedPipeServerProcessId(pipe_handle, &pid)) {
+    return false;
+  }
+
+  base::win::ScopedHandle process(
+      OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid));
+  if (!process.is_valid()) {
+    return false;
+  }
+
+  auto server_token = base::win::AccessToken::FromProcess(process.get());
+  auto client_token = base::win::AccessToken::FromCurrentProcess();
+
+  if (!server_token || !client_token) {
+    return false;
+  }
+
+  return server_token->IntegrityLevel() >= client_token->IntegrityLevel();
+}
+
 }  // namespace
 
 // static
@@ -133,6 +156,14 @@
   DPLOG_IF(ERROR, !handle.is_valid())
       << "Named pipe " << pipe_name
       << " could not be opened after WaitNamedPipe succeeded";
+
+  if (handle.is_valid() && options.verify_server_privilege) {
+    if (!VerifyServerPrivilege(handle.GetHandle().Get())) {
+      DLOG(ERROR) << "Server privilege check failed.";
+      return PlatformChannelEndpoint();
+    }
+  }
+
   return PlatformChannelEndpoint(std::move(handle));
 }