Square Reader Security
Privacy shielding
The Square Reader is not a PIN-entry device and, in accordance with PCI POS PED Security
Requirements and EPP Security Requirements technical FAQs version 2.0, does not require a
privacy screen.
Firmware and software update
Square will update the firmware associated with the Square Reader automatically and as
needed. This will occur in the background without user interaction required. In the event of a
critical update, the Square Register software will notify the user of the critical nature of the
update and advise a course of action for applying the update. Based on the criticality of the
update, Square may disable transaction processing until a firmware update is successfully
applied.
Infrequent or seasonal use
The Square Reader has a primary battery and backup battery. The primary battery is used for
operation of the Square Reader. The backup battery is used to maintain the tamper-detection
features of the Square Reader. If the primary battery is entirely discharged the backup battery
will maintain tamper-detection of the device for one year. If the Square Reader is not fully
charged annually it will enter into a tampered state and become inoperable.
Common use and recharging of the primary battery will prevent the Square Reader from
entering a tampered state. For infrequent or seasonal users of the Square Reader we
recommend charging the Square Reader fully at least once each year.
Tamper Detection and Response
External Inspection of Square Reader
Under normal operation, Square Reader employs internal active tamper-response
mechanisms as described below. These mechanisms are enforced automatically and do not
require any initial configuration by the user.
Prior to accepting payments with Square Reader, the user must inspect the Reader for
evidence of external tampering. Procedures should include, at minimum, examination to
identify:
•
Evidence of inserts, wires, overlays or any unknown component connected to the Reader
or inside the card slot
•
Evidence of modification or disassembly of the Reader
© 2016 Square Inc. All Rights Reserved.
Version 1.00
7
