New-device login email: change your password if it was not you
The new-device login email gives you the login details. Surfshark says that if you did not log in from the new device, it is crucial to change your password immediately, and it strongly encourages you to enable two-factor authentication. It says prompt notice of logins from unfamiliar devices lets you act quickly if something looks suspicious.
Supporting quotations
This email will provide you with the login details. If you did not log in from this new device, it is crucial to change your password immediately to secure your account. We also strongly encourage you to enable two-factor authentication for enhanced protection.
Qualifications & exceptions
This relates to the email sent when you log in from a device that differs from your last-used devices.
The advice is guidance to you; the text does not say Surfshark will take any account action itself.
Security & Safeguards · Company commitment
Security measures: encryption in transit, hashed passwords, firewalls and regular audits
Surfshark says it has implemented appropriate organizational, physical and technical security measures, including SSL/TLS encryption for data transfers, hashed passwords, firewalls and regular audits, and that it takes all reasonably necessary steps to ensure your personal data is treated securely. It also says no one can honestly promise 100% anything-proof security.
Supporting quotations
anyone who tells you that 100% anything-proof security is possible either doesn’t know much about it or is trying to mislead you.
We have implemented appropriate organizational, physical and technical security measures, including SSL/TLS encryption for data transfers, hashed passwords, firewalls, and regular audits. We take all the reasonably necessary steps to ensure that your personal data is treated securely.
Qualifications & exceptions
The measures are described as "appropriate" and "including" the listed examples, so the list is not stated as complete.
The commitment is to reasonably necessary steps, not a guarantee.
Not stated here
Who carries out the regular audits and what they cover is not stated here.
Security & Safeguards · Restriction or exception
Surfshark cannot guarantee 100% security; you accept information is provided at your own responsibility
Surfshark says 100% security is not always possible, that giving out information online carries a risk that a third party may intercept and use it, and that it cannot guarantee 100% security of any information you disclose online. By using the services you expressly acknowledge and agree that it cannot guarantee the security of information provided to or received by it through the services, and that information received from you through the website or services is provided under your own responsibility.
Supporting quotations
we cannot guarantee 100% security of any information you disclose online. By using the Services, you expressly acknowledge and agree that we cannot guarantee the security of any information provided to or received by us through the Services and that any general information, other information, or information received from you through the Website or our Services is provided under your own responsibility.
Qualifications & exceptions
The acknowledgment applies to using the services.
The wording covers information provided to or received by Surfshark through the Services.
Not stated here
The text does not say how this acknowledgment affects Surfshark's responsibility for its own security failures; the legal effect is not explained here.