KrisFlyer Introduces Two-Factor Authentication

Singapore Airlines has upgraded the security of KrisFlyer frequent flyer accounts with the introduction of two-factor authentication (2FA). Singapore Airlines KrisFlyer members are also being forced to change their passwords.

Previously, a 6-digit PIN number was all that was needed to access your KrisFlyer membership account. Now, Singapore Airlines is requiring members to create a new password which contains 8-16 characters, including at least one uppercase letter, one lowercase letter, one number and one special character. This should make it much more difficult for hackers.

If you haven’t logged in to your KrisFlyer account since last Tuesday, you’ll be prompted to change your password when you next do so.

To change your password – and going forward, to access your KrisFlyer account online – you’ll need to enter a one-time PIN that is sent either to your mobile phone as an SMS or by email.

Your existing 6-digit PIN will become your “Phone PIN”, and you’ll still need to enter it when calling Singapore Airlines to verify your identity.

Combating loyalty program fraud

Singapore Airlines KrisFlyer becomes the latest in a series of loyalty programs to enhance account security with two-factor authentication. It’s designed to combat loyalty program fraud, making it harder for hackers to steal members’ miles. It could also make life a little bit harder for mileage brokers who, as The Mile Lion discovered in this fascinating exposé, cost airlines like Singapore Airlines a lot of money.

Qantas Frequent Flyer implemented two-factor authentication on all accounts in July, following a two-year trial. In Australia, the Woolworths Rewards program has also now installed the added layer of security.

Air Canada’s Aeroplan loyalty program has also recently implemented similar new security measures.

Two-factor authentication, while improving account security, can be frustrating if you don’t have access to your phone (e.g. because you’re overseas), but at least KrisFlyer gives you the option of receiving a one-time PIN via email instead. The system also makes it harder for legitimate third-party programs like Award Wallet to automatically track your mileage balance.

Join the discussion on the Australian Frequent Flyer forum: Important Login Changes to Your KrisFlyer Membership Account

Matt Graham

The editor of Australian Frequent Flyer, Matt's passion for travel has taken him to over 70 countries… with the help of frequent flyer points, of course!
Matt's favourite destinations (so far) are Germany, Brazil & Kazakhstan. His interests include economics, aviation & foreign languages, and he has a soft spot for good food and red wine.

You can connect with Matt by posting on the Australian Frequent Flyer community forum and tagging @AFF Editor.