How Login stores your passkeys
Your passkeys are stored on your personal security card, a MIFARE DESFire EV3 NFC card, and protected by your PIN. New passkeys are written to the card when you create them.
When you tap your card and enter your PIN, your passkeys are loaded into the phone's memory, encrypted, for the current session only. Nothing about a passkey is saved to the phone's storage, and nothing is sent to us or to any cloud service.
Your responsibility
You are responsible for:
- Keeping your security card safe and private
- Choosing a PIN that is hard to guess, and never sharing it with anyone
- Ending your session when you have finished on a shared device
- Keeping another way to sign in to each service you use with Login, or a second card with your passkeys, in case your card is lost or damaged
- Keeping your phone's operating system and the Login app up to date
If your card is lost or damaged
Your passkeys exist only on your card. If it is lost or damaged, we cannot recover them. Use your other sign-in method or your second card to get back into your accounts, then remove the old passkeys from those accounts.
A lost card cannot be used without your PIN, but someone holding it can try to guess it. A PIN that is hard to guess is your main protection.
Requirements
- An Android phone with NFC, running Android 9 or later
- A MIFARE DESFire EV3 card
- Services that support passkeys. Login cannot sign you in to services that do not.
Subscription
Login is a paid app. New users get a free 30-day trial, followed by a subscription through Google Play that renews automatically until you cancel it in Google Play. Payments, renewals, cancellations and refunds are handled by Google Play under its terms.
Organisations may license Login for their managed devices instead. On those devices, the organisation's licence applies and no individual subscription is needed.
Limitation of liability
To the extent permitted by applicable law, Phenomenal Aktiebolag is not responsible for:
- Lost, stolen or compromised passkeys, cards or PINs
- Unauthorised access to your accounts
- Loss of passkeys caused by a lost or damaged card, device failure or user error
- Security breaches resulting from shared or weak PINs
- Services that do not work with Login
- Any direct, indirect, incidental or consequential damages resulting from use of the app
Nothing in these terms limits rights you have under mandatory consumer protection law.
No warranty
Login is provided "as is", without warranty of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted and error-free operation.
Reporting a problem
If you suspect that someone has used your card or PIN, or you find a security problem in the app, contact support@phenomenal.se. On a work device, also tell your IT department.
Changes to these terms
When we make material changes, we increase the version number, publish the new terms at phenomenal.se/terms, and ask you to accept them again in the app.
Governing law
These terms are governed by the laws of Sweden. Disputes are resolved in Swedish courts.
Contact
Phenomenal Aktiebolag, support@phenomenal.se, phenomenal.se
Acceptance
By continuing, you confirm that you have read and understood these terms and accept them.