diff --git a/extension/src/popup/components/settings-security.ts b/extension/src/popup/components/settings-security.ts
new file mode 100644
index 0000000..9bb6da7
--- /dev/null
+++ b/extension/src/popup/components/settings-security.ts
@@ -0,0 +1,17 @@
+// extension/src/popup/components/settings-security.ts
+// Stub — real implementation provided by Stream C (DEV-C).
+
+export async function renderSecuritySection(
+  container: HTMLElement,
+  _sessionHandle: number | null,
+): Promise<void> {
+  container.innerHTML = `
+    <div class="settings-section-placeholder">
+      <span class="muted">Security settings — loading…</span>
+    </div>
+  `;
+}
+
+export function teardownSecuritySection(): void {
+  // no-op in stub
+}