What is Device Registration?
GlobalWebIndex utilises 3rd party software to collect device identifiers (including but not limited to browser and hardware) which generates a unique ID for each device used to login with. As part of the terms of usage for your GlobalWebIndex account you have the ability to access the platform from two unique devices concurrently.
Will I be forced to register every device from the first time I log in?
No, in fact most users will not be aware of device registration at all. When signing in from an already registered device users will NOT be prompted to register this device.
You can sign up for an account, and log in on up to 2 different devices without any additional steps. It is only when attempting to login from a third device that the user will become aware of the device registration steps described below.
Why have GlobalWebIndex implemented Device Registration?
In line with our moral and legal obligations to our clients (for example GDPR) we have taken steps to protect user personal data stored within the platform and accessible on login, and via Intercom discussion with our support team that is available to logged in users.
We know that login details can be shared both deliberately and by accident, and we feel that a limit of 2 concurrent devices strikes the right balance between allowing legitimate account holders to access our platform on multiple devices (more than 2 if required) and alerting account holders when unauthorised users are accessing their account.
How will I know if somebody else is using my logins (and what should I do about it)?
The standard device registration flow is described below. A user attempting to login with a third device will see the screen shown in step 1, and will then receive the email shown in step 2.
If you receive the email shown in step 2 without first seeing the screen shown in step 1, then this means that somebody else is attempting to login to your account (via an unregistered device).
If this happens, please reset your password via the ‘forgot password’ link on the login homepage, or click here
Registering a Device:
Please note, to successfully register a device using the following steps you will need to complete registration from the device you are seeking to register.
- As soon as an attempt to login on a third device is made you will see the following:
- The account holder will then be sent the following email:
- By clicking the link in the email the account holder will be taken back to the platform to choose a previously registered device to disable:
- Once a device is selected to deactivate, the device you are currently using will take its place, and the account holder will proceed straight to the platform thereafter
If after clicking on the link in the email (step 3) you are taken straight to the platform then that means the device you are using is already registered.
If you keep getting these email requests (without having tried to log-in) it means other people are attempting to use your account from an alternate device - we strongly recommend you reset your password to protect your account.
If you haven't received an expected email within 1 hour or are having other issues with the process above please contact firstname.lastname@example.org
Our device registration technology is provided by a 3rd party vendor. As per their best practice we strongly recommend using only one browser per device. Use of multiple browsers via a single device might cause the creation of separate device IDs potentially exhausting the entitled limit of devices.
Terms and Conditions:
Under the GDPR, GWI as the data controller is required to show conformance with Article 5(1)(f), stating that personal data must be:
(f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’)
It must also comply with Article 5(1)(d), stating that personal data must be:
(d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)
If someone other than the named account holder accesses the account, they could have access to any Intercom messages sent from the named account holder to GWI, as well as our subsequent replies. The named account holder could also have access to certain custom projects, which could include special categories of personal data. And depending on the plan, they could also gain visibility over the credit card being used to pay for the plan. To prevent this, the only alternative would be for the named account holder to notify us that they have given permission for certain named individual(s) to access their account, but this would be a violation of our T&Cs which limit access to the named individuals in question.
Moreover, if we cannot verify that the person who is logging in to an account is the named individual, then we are incorrectly attributing someone else’s usage of the account to the named individual whose account has been used.