Hilton Honors Ambassador

UPDATE AS OF 3/12:

Okay FlyerTalkers, it’s time to update your passwords and, as promised, you’ll get 1,000 Bonus Points for doing it by March 25!

Since we always want to make sure you have a safe and secure experience, we’re asking you to change your password as part of a new way to login to your account.

Your password must be updated by April 1, but the sooner the better – so we’re offering 1,000 Bonus Points if you change your password now! If you change your password starting today or by March 25 you will receive 1,000 Bonus Points.

As part of this update, we created new guidelines to make sure your password is a bit stronger.

Here’s what you need to know to get started…

• Visit the Personal Information section in your account profile by logging in with your current credentials, and then select “Change Password.”
• Your new password must be at least 8 characters, contain at least 1 upper case letter, and contain at least 1 number or 1 special character.
• Remember to choose a unique password and update it at least every three to six months to ensure maximum security.

If you have any questions, please let me know here or via PM.


UPDATE AS OF 2/19:

Just a quick update: this change has not taken effect yet due to a technical issue on our end, so please hold on changing your password for right now. You will not receive Bonus Points by changing your password at this time and you will still be required to change your password at a later date, when we have updates to share. Please stay tuned here as I will post more info as soon as I have it. Thanks for your understanding.

Hi all,

The security of our members’ information is of the utmost importance to us, and we are committed to making your HHonors experience safer and more secure. That’s why, as of tomorrow, we are updating our login process.

As of March 25, 2015, you will be required to create a new password upon login, and we will no longer accept PINs. However, in order to avoid any interruptions to your account access, we are asking our members to proactively create their new password as soon as possible. In fact, as a thank you, if you proactively update your password between February 19, 2015, and March 8, 2015, you’ll receive 1,000 Hilton HHonors Bonus Points.

Beginning tomorrow, February 19th, you can update your password by following the steps below:

• Visit www.HHonors.com/Login with your current username or HHonors number and existing password/PIN.
• On the left-hand side, under the My Profile section, click "Personal Information."
• If you have a password, select “Change Password;” if you do not have a password select "create username and password."
• Your new password must be at least 8 characters, contain at least 1 upper case letter, and contain at least 1 number or 1 special character.
• Remember to choose a unique password and update it regularly to protect your personal information.
• If you don’t change your password by March 25, 2015, you will be prompted to make this update the next time you attempt to login to your account on or after this date.

Thank you for your patience during this update. If you have any questions, please feel free to reach out within this thread or through PM and I will do my best to share updates with you all.

Thanks!
Erin

SPBanker

And this gets rid of reCAPTCHA? ^

ExpatSomchai

When should we expect the points to post ?

sjpmurph01

This is welcome news, and I'm glad to hear that PINs will finally be phased out.

Hopefully this also means that 100% reliance on captchas as a security layer can be scaled back to something more in line with industry standards - i.e. no captcha unless x number of failed attempts on the same account, or x number of attempts on different accounts from the same IP in a given timeframe.

Nice gesture with the bonus points as well.

masahiro

Hi,

Thank you for your information.
I will try today.

BTW, I couldn't log-in to my HHonors account using iPhone app a couple days ago. But I can log-in using my PC.
Tell me why?

Thanks,
masahiro

Miesque

This is password configuration change is good news even if it is long overdue after the rash of point hijacking. I also hope this means Captcha can be a bit less frequent.

pragakhan

... and cookies to stay logged in??!???! Please?!?!??

Smaug

As an IT person, I must ask... Will our new passwords be one-way encrypted in the database so that no other Hilton employee will have access to them?

I ask that because there were rumors the old PINs/passwords were (still are?) stored unencrypted.

Flyer78

For those already looking for points, do note the change window starts tomorrow, 2/19...

JBD

I had to call HH the other day and the call was escalated to a supervisor at my request (it was a matter of an award stay, nothing to do with the hacking).

She asked my name and account number. Then she asked for my PIN. I said I'd rather not give that out what with all the recent data breaches at HH. She said she was just using it to confirm my identity. So she asked for my street address instead.

So fact, not rumor, she had access to my PIN.

mnredfox

HHR, thanks for the update.

little_dc

Working great!

Customer profiles are unavailable.
Due to technical issues we cannot access your customer profile right now.
;(

Garina

For me too

Tim_T

Will the need to enter hh and pin to access the wifi in some hotels change? This always struck me as bad security practice.

sjc2679

Same here.