To prevent loss, it is important that you do all you can to maintain control of your ShieldPay account. You lose control over your account if you disclose your login credentials, particularly your password and PIN. There are no circumstances in which disclosure of your password or PIN is justified. ShieldPay accounts are meant to belong to one person only. We do not support joint accounts or multiple account holders, so the money in your account is yours alone as far as we are concerned. You are currently not able to create multiple users for your account, so the other person will have to sign up too in order to use the ShieldPay Service. Never disclose your password to another person, and if you do, change your password immediately (log in, then under "My Account", change your password). Never disclose your PIN either, and change it immediately if you do. See "What makes a password good?" for advice on password selection and the "What makes a PIN good?" on PIN selection.
Besides your password, ShieldPay also confirms your identity by means such as the following:
- 3D Secure: Card issuers operate their own login facilities called 3D Secure to confirm that the person using a card is indeed the card holder known to the card issuer. ShieldPay uses 3D Secure logins to double‑check that it is you taking an action, when you have a card included among the funding sources for your ShieldPay account. Because re-using passwords reduces their security, it is best to use a different password for 3D Secure, not the same password that you use for ShieldPay. For a Visa card, 3D Secure is also known as Verified by Visa, and for a MasterCard, as MasterCard SecureCode. If you forget or lose the password that you use for 3D Secure, please contact your card issuer immediately. ShieldPay uses but does not manage 3D Secure, so your card issuer can help with a 3D Secure password problem but ShieldPay cannot.
- Your devices. We can readily identify a particular smartphone (an Apple, Android, Windows or similar mobile phone). Because a mobile phone generally has only one main user, we use your phone as a way of confirming that you are the person taking a certain action. When you are using ShieldPay from one of our mobile phone apps, we can confirm in the background that you are using your phone to access your account.
- We also identify the computer from which you are logging in, but because people often share computers, we do not view a computer that you frequently use as a specific identifier for you but rather a corroborating one.Which computer you are using, your location, where you spend, and other behavioural characteristics of your ShieldPay usage help us identify you, but none of these additional identifying characteristics is conclusive in itself.
As part of our drive to support innovation and the technology ecosystem, we will continue innovating and strengthening our ability to recognise you when you use our Service.