Login.gov is committed to your privacy and security
This describes how we ask for, use, retain, and protect your personal information. Protecting your information is our priority at Login.gov.
The information that you submit is used to create or update your Login.gov account and give you access to Login.gov’s partner agencies. When you provide your email address or other proof of identity like a state ID, we can be sure it’s really you and grant you access to the account — and keep the bad actors away. This proof, called an electronic identity assurance credential, is like putting a key into a lock to securely open the door to the government agency’s application or service.
How we work with our partner agencies:
- Login.gov partners with government agencies to provide secure access to their website, application, or service. The partner agency (for example, the United States Office of Personnel Management) selects the type of information we request from you.
- We ask for information to authenticate your account, prove your identity, and protect against fraud.
- When you create a Login.gov account and verify your identity, you consent to Login.gov collecting, using, keeping, and sharing your personal information as described here and in our Privacy Act Statement and Rules of Use — including to verify your identity and to help detect and prevent fraud. What you need to share depends on what the partner agency requires.
- For authentication to establish a secure account, we need your name, email address, and an authentication method. Your authentication method could be a phone number where we share an SMS code, USB Security Key, or other options.
- Identity proofing requires more sensitive information such as a social security number, address, phone number, and a U.S. based federal or state ID. A self-photograph is needed in cases where partners require verification through biometric comparison as further proof of your identity. Biometric comparison involves comparing your self-photograph to the portrait on your government-issued ID card.
- When completing identity proofing in person at the United States Postal Service (USPS) Office, we share your validated name and address with USPS so that clerks can confirm your identity in person.
- Identity fraud happens when someone tries to use your information to pretend to be you. To prevent it, we look at the device you’re using, how you interact with the page, and the information you provide during identity verification.
- We keep a secure, encrypted copy of the identity documents you submit, along with information about your verification attempts. We keep attempt information decryptable by Login for up to one year, and the encrypted documents for partner agencies longer because identity theft is often discovered later, when a victim or an agency reports it. Keeping this record allows us to investigate and provide redress.
- If you started at a partner agency that receives information about verification attempts from Login.gov to help prevent fraud, information about your verification attempts — including attempts you don’t finish — is shared with that agency to help it detect fraud. That agency may also request the identity documents you submitted to investigate suspected fraud. When you visit Login.gov, we anonymously aggregate some data, which means that no individually identifying information is attached to it. We aggregate the pages visited, web browser type and version, and the length of the session to help us improve the Login.gov experience. For example, if you experience an error and we know your web browser type and version, we can better identify how to fix your issue.
- Your stored account information is encrypted at two levels. Most of your account information can only be decrypted with your password; you are the only one who can view and change it.However, to detect and prevent identity fraud, authorized Login.gov fraud operations personnel can access information about identity verification attempts, including the personal information you provided. This information is hidden by default and viewed only when needed for a fraud investigation, and all access is logged and monitored. For the first year, authorized personnel can also access the identity documents you submitted; after one year, Login.gov can no longer access them.
- Our contact help center cannot view or change your account information.
- The Login.gov operators (that is, our contact help center) cannot view your information or make any changes.
Protecting your information is our priority. You can read more detailed explanations about how Login.gov works, and our privacy act statement.
Retour en haut de la page