Skip to content

Instantly share code, notes, and snippets.

@nelsonjchen
Created September 8, 2018 15:20
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nelsonjchen/e9e28a58165f1a6db9acb1a756045003 to your computer and use it in GitHub Desktop.
Save nelsonjchen/e9e28a58165f1a6db9acb1a756045003 to your computer and use it in GitHub Desktop.
Security key terms & conditions
These Terms and Conditions set forth what you can expect from your use of a Key to access your Vanguard accounts, as well as your and Vanguard's related rights and obligations. As used in these Terms and Conditions, "Key" means a security key that supports FIDO U2F specifications and appears on Vanguard's compatibility list, which currently includes the following keys:
* Yubikey FIDO U2F Security Key
* Yubikey NEO
* Yubikey 4 NANO
* Yubikey 4
This list may be modified from time to time (including to remove a security key previously listed as compatible and/or to add a new security key) in Vanguard's sole discretion. A security key that does not support FIDO U2F specifications and appear on the compatibility list may not be used to access your Vanguard accounts. Please note that, including a security key on the compatibility list does not constitute any representation or warranty that the security key will work as intended in every circumstance or in your particular IT environment, that the security key you purchase will not have defects, or that the security key will be more secure than a security key that does not appear on the list.
PLEASE READ CAREFULLY THE FOLLOWING SECURITY KEY SERVICE TERMS AND CONDITIONS ("TERMS") BEFORE SIGNING UP FOR THIS SECURITY KEY SERVICE AS OFFERED BY THE VANGUARD GROUP, INC., VANGUARD MARKETING CORPORATION, AND/OR THEIR AFFILIATES (COLLECTIVELY, "VANGUARD," "WE," OR "US") (THE "SERVICE"). THESE TERMS GOVERN THE SERVICE, INCLUDING ANY UPDATES OR CHANGES THAT WE MIGHT MAKE TO THE SERVICE FROM TIME TO TIME. NOTHING CONTAINED IN THESE TERMS OF USE IS INTENDED TO MODIFY OR AMEND ANY OTHER WRITTEN AGREEMENT, IF ANY, THAT MAY CURRENTLY BE IN EFFECT BETWEEN YOU AND VANGUARD WITH REGARD TO MATTERS OTHER THAN YOUR USE OF THE SERVICE. YOUR REGISTRATION FOR AND USE OF THE SERVICE CONSTITUTES YOUR AGREEMENT TO THESE TERMS. IF YOU DO NOT AGREE TO ANY ASPECT OF THESE TERMS, YOU MAY NOT USE THE SERVICE.
Vanguard is pleased to offer the ability to use a Key to verify your identity when accessing your accounts online. Please note that use of the Key is intended to provide an additional layer of authentication that makes it more difficult for a third party to gain unauthorized access to your accounts, but use of the Key does not guarantee that such unauthorized access will not occur. Neither the Key nor any other security technology, policy, procedure or practice (or any combination thereof) is 100% effective. You agree that nothing in these Terms nor any written or oral statement by Vanguard (or any employee, representative or agent of Vanguard) shall be construed to be a representation, warranty or promise that your account, data or information will be secure.
Vanguard may make modifications, deletions and/or additions to these Terms ("Changes") at any time. Changes will be effective: (i) thirty (30) days after Vanguard provides notice of the Changes, whether such notice is provided through the Vanguard website user interface, is sent to the e-mail address associated with your account or otherwise; or (ii) when you opt-in or otherwise expressly agree to the Changes or a new version of these Terms incorporating the Changes, whichever comes first. Without limiting the foregoing, Vanguard reserves the right to condition the availability of new features or functionality on agreement to additional terms applicable to such new features or functionality.
How do Keys work?
In order to access your Vanguard account, you must insert your registered Key into your computer's USB port and enter your user name and password. This is intended to provide an additional level of protection because you must physically have the Key in your possession and your Key uses encryption that will only work with a website that it is supposed to work with.
How do I sign up?
In order to use the Service, you are required to first sign up for our Security Code service. Your Security Code acts as a back-up method to accessing your accounts in the event you lose your Key or do not have it with you. After you sign up for the Security Code service, you may register your Key. You must have your Security Key available. Select "Continue" to begin a brief step-by-step process to register your Key. Please note that you may need to first verify your identity using a security code.
We may add additional ways for you to sign up for the Service or Service features in the future. Please check back for updates.
What charges apply?
Vanguard does not have a separate charge for this Service. However, if you choose to use the Service, then you must purchase a key that supports FIDO U2F specifications and appears on Vanguard's compatibility list.
What if I have questions or need help?
Please contact Vanguard directly. For personal investors, call 800-962-5209. For employer-sponsored plan participants, call 800-523-1188.
What if I want to disconnect my Key from my Vanguard account(s)?
You may disconnect your Key from your Vanguard account(s) by contacting Vanguard directly. For personal investors, call 800-962-5209. For employer-sponsored plan participants, call 800-523-1188. Using your security code, you may also disconnect your Key by visiting the security key maintenance area at vanguard.com and selecting "Delete key."
What if my Key is lost or stolen?
If your Key is lost or stolen, then please promptly contact Vanguard, so that we can disconnect that Key from your Vanguard account(s). For personal investors, call 877-662-7447. For employer-sponsored plan participants, call 800-523-1188. Using your security code for authentication, you may also disconnect your Key by visiting the security key maintenance area at vanguard.com and selecting "Delete key."
Additional Terms and Conditions
You acknowledge, represent, and agree to the following:
Your Vanguard account(s)
You are authorized to access the account(s) and financial information that may be accessed or disseminated via the Service.
You will check your account(s) frequently and promptly review all information that Vanguard sends you regarding your account(s), and you will contact Vanguard immediately if you become aware of any suspicious or unauthorized conduct concerning the Service or your account(s).
Your Information
All information you provide to us in connection with the Service is accurate, current, and complete, and you have the right to provide such information to us for the purpose of using the Service.
You understand that use of the Service may involve the transmission of information to you that may be considered personal financial information. You consent to the transmission of such personal financial information by electronic means.
Your Key
You are responsible for purchasing a Key that is compatible with the Service. You acknowledge that Vanguard does not design, manufacture or sell Keys and shall not be liable for any defect or deficiency of any kind with respect thereto, including without limitation any security defect. Any problems with the functioning or security of your Key should be addressed to the manufacturer. You assume all risk for the use of, or any inability to use, your Key. You understand that you are solely responsible for minimizing security risks, for example, by keeping your Key under your physical control. By way of further example, you should not share your credentials (user name and password) with anyone.
Use of the Key requires you to have compatible hardware and software, including use of a compatible web browser to access your accounts. However, even if your system meets these requirements, aspects of your particular computing environment (such as, without limitation, installation and configuration of firewall and other security software) may adversely impact your ability to use your Key to access your Vanguard accounts. You acknowledge that Vanguard has no obligation or liability with respect to any such adverse impact, including without limitation any obligation to provide technical support.
Applicable Laws, Venue and Personal Jurisdiction
Your Key is subject to all applicable import and export laws. You are solely responsible for complying with all applicable laws in connection with your Key, including export control laws which may restrict you from taking your Key with you into certain countries.
The laws of the Commonwealth of Pennsylvania, United States of America, without regard to principles of conflict of laws, govern these Terms and any dispute that might arise between you and Vanguard related to the Service. If you take legal action relating to these Terms or the Service, you agree to file such action either in the Court of Common Pleas of Chester County, Pennsylvania, or the United States District Court for the Eastern District of Pennsylvania and in no other venue, and you consent and submit to the personal jurisdiction of those courts for the purposes of litigating any such action.
Termination
Vanguard reserves the right to terminate this Service, in whole or in part, at any time for any reason without notice.
Intellectual Property
Content published through the Service may contain references to marks, products, services, processes, technology, patented or copyrighted materials, or other forms of intellectual property to which either Vanguard or a third-party owns the rights. However, no section of the present Terms may be interpreted as authorizing a license or any other right with respect to any content which constitutes intellectual property belonging to any third-party. In addition, no section of the present Terms may be interpreted as authorizing a license or any other right with respect to any content which constitutes intellectual property belonging to Vanguard.
Warranty Disclaimer
YOUR USE OF THIS SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. TO THE FULL EXTENT PERMITTED UNDER APPLICABLE LAW, VANGUARD AND ITS AFFILIATES, SUBSIDIARIES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, LICENSORS, AND ANY THIRD-PARTY INFORMATION PROVIDERS AND VENDORS EXPRESSLY DISCLAIM ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF TITLE, MERCHANTABILITY, NONINFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE, AND ALL WARRANTIES REGARDING SECURITY, CURRENCY, CORRECTNESS, QUALITY, ACCURACY, COMPLETENESS, RELIABILITY, PERFORMANCE, TIMELINESS, OR CONTINUED AVAILABILITY, WITH RESPECT TO (I) THE SERVICE; (II) USE OF THE SERVICE; (III) ANY MATERIALS, PRODUCTS, OR SERVICES AVAILABLE ON OR THROUGH THE SERVICE; AND (IV) THE RESULTS OF THE USE OF THE SERVICE. FURTHER, VANGUARD AND ITS AFFILIATES, SUBSIDIARIES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, LICENSORS, AND ANY THIRD-PARTY INFORMATION PROVIDERS AND VENDORS EXPRESSLY DISCLAIM ALL WARRANTIES WITH RESPECT TO ANY DELAYS OR ERRORS IN THE TRANSMISSION OR DELIVERY OF ANY MATERIALS, PRODUCTS, OR SERVICES AVAILABLE THROUGH THIS SITE OR THE SERVICE. EXCEPT AS PROVIDED BY LAW, NEITHER VANGUARD NOR ITS THIRD-PARTY INFORMATION PROVIDERS AND VENDORS HAS ANY RESPONSIBILITY TO MAINTAIN THE MATERIALS, PRODUCTS, OR SERVICES OFFERED ON THE SITE OR THROUGH THE SERVICE OR TO SUPPLY CORRECTIONS, UPDATES, OR RELEASES FOR THE SAME. TO THE EXTENT YOUR JURISDICTION DOES NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES, SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU AND YOU MAY HAVE OTHER RIGHTS, WHICH VARY FROM JURISDICTION TO JURISDICTION.
Liability and Indemnity
YOU ARE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR COMPUTER SYSTEM, KEY OR OTHER EQUIPMENT, LOSS OF DATA OR UNAUTHORIZED ACCESS TO DATA THAT RESULTS FROM USE OF YOUR KEY, AS WELL AS FOR LOSS OR DAMAGE OF ANY KIND RESULTING FROM YOUR KEY BEING LOST OR STOLEN. NEITHER VANGUARD NOR ITS AFFILIATES, SUBSIDIARIES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, LICENSORS, OR ANY THIRD-PARTY INFORMATION PROVIDERS AND VENDORS WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS, REVENUE, INCOME, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES, OR DAMAGES CAUSED BY THEFT, UNAUTHORIZED ACCESS, SYSTEMS FAILURE, OR COMMUNICATIONS LINE FAILURE, OR THE COST OF PROCURING SUBSTITUTE GOODS OR SERVICES, CAUSED BY THE USE OF OR INABILITY TO USE MATERIALS OR ANY PRODUCTS OR SERVICES PROVIDED VIA THE SERVICE, OR ANY OTHER MATTER RELATING TO THIS SERVICE, EVEN IF VANGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. UNDER NO CIRCUMSTANCES SHALL VANGUARD OR ITS AFFILIATES, SUBSIDIARIES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, LICENSORS, OR ANY THIRD-PARTY INFORMATION PROVIDERS OR VENDORS BE LIABLE TO YOU IN CONNECTION WITH USE OF OR INABILITY TO USE MATERIALS OR ANY PRODUCTS OR SERVICES PROVIDED VIA THE SERVICE, OR ANY OTHER MATTER RELATING TO THIS SERVICE, IN EXCESS OF FIFTY U.S. DOLLARS IN THE AGGREGATE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE EXCLUSIONS OR LIMITATIONS MAY NOT APPLY TO YOU. TO THE EXTENT THAT A JURISDICTION DOES NOT PERMIT THE EXCLUSION OR LIMITATION OF LIABILITY AS SET FORTH HEREIN, THE LIABILITY OF VANGUARD AND ITS AFFILIATES, SUBSIDIARIES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, LICENSORS, AND ANY THIRD-PARTY INFORMATION PROVIDERS AND VENDORS IS LIMITED TO THE EXTENT PERMITTED BY LAW IN SUCH JURISDICTIONS.
You hereby agree to indemnify and hold harmless Vanguard and its affiliates, subsidiaries, directors, officers, employees, agents, licensors, and any third-party information providers and vendors upon demand from and against any and all claims, losses, expenses, demands or liabilities, including attorneys' fees and costs, demanded of or incurred by such Vanguard parties in connection with any claim by a third-party (including any intellectual property claim) arising out of (i) your improper use of the Service, (ii) your violation of these Terms or of any applicable law, or (iii) the infringement, misappropriation, or violation by you, or other individual using your Key, password, computer, or other access device, of any intellectual property, privacy or other right of any person. You further agree that you will cooperate fully in the defense of any such claims. Vanguard reserves the right to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, and you shall not in any event settle any such claim or matter without the written consent of Vanguard.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment