Originally Posted by
sdsearch
Huh???
When I got the Hilton HHonors website I see it ask for:
Username or HHonors #
Password or PIN
In other words, if all you change is your username and password, but someone has your account number and PIN, they can still sign in with that!
So it seems to me the most someone can do (without changing their account number) is to change their 4-digit PIN (
as well as their username and password, if they have those).
But that 4-digit PIN is the
only thing stopping someone who knows your account number from logging into your account, as far as I can see.
(Delta is dropping the ability to log on with a PIN at the end of the year. But BA still has PIN sign-in too, as does IHG.)
Excuse me, been so long since I used a pin to log into Hilton I forgot you could.