Millions of Americans use Login.gov to access federal services. Veterans checking benefits. Students managing financial aid. People accessing Social Security or IRS accounts. For most of them, it is not optional. It is the front door.
What the fine print reveals is a different picture.
When you verify your identity through that front door, your information goes further than the government agency you are trying to reach. A March 2026 Privacy Impact Assessment confirms the platform shares identity verification data with LexisNexis and Socure, two commercial data companies, for fraud detection purposes. Google also receives behavioral data during authentication, including device fingerprints and biometric information like keystrokes and mouse movements, through reCAPTCHA. What Google retains from sessions where users were simultaneously submitting Social Security numbers and ID images is not addressed in the PIA.
The LexisNexis piece deserves attention on its own. Earlier this year, LexisNexis confirmed a breach of its Legal and Professional division, with attackers claiming access to millions of records including profiles tied to federal judges and Department of Justice personnel. While that division is separate from LexisNexis Risk Solutions, which is the entity Login.gov uses, they share the same parent company. And whether Login.gov data was in any way implicated has not been publicly addressed, raising a reasonable question about what it means to route federal identity verification through a commercial vendor operating at that scale with that kind of recent security record.
The PIA says Login.gov transaction data is not used to further train vendor models. What happens to it beyond that is not spelled out. Device and behavioral data is held by third parties until, in the document’s own language, “business use ceases.” That is not a deletion policy.
For users who do not consent, the PIA points them toward their partner agency for alternative access methods. What those look like in practice, for a veteran or a senior with no other path to their benefits, goes unanswered.
;
