New Marriott Security Measures
Jul 17, 2015 | 2:33 pm
#31
Join Date: Jan 2011
Location: Buffalo, NY
Programs: Marriott Plat, Delta Gold, United Silver
Posts: 66
My gripe is that most 2-factor auths are done via SMS(Text message for the Yanks). Nice if I'm in my home country, but if I'm abroad I usually have yanked the SIM on my mobile and am using a local SIM instead. Also, depending on what I'm working on, my mobile phone might not be allowed to be carried with me.
) is not allowed...I get that, I've been there, but access to Marriott.com in that same secure zone is not an issue? Not likely.
Jul 17, 2015 | 2:49 pm
#32
FlyerTalk Evangelist
Join Date: Nov 2003
Location: South Florida
Programs: AA LTG (EXP), Hilton Silver (Dia), Marriott LTP (PP), SPG LTG (P) > MPG LTPP
Posts: 11,329
...
My gripe is that most 2-factor auths are done via SMS(Text message for the Yanks). Nice if I'm in my home country, but if I'm abroad I usually have yanked the SIM on my mobile and am using a local SIM instead. Also, depending on what I'm working on, my mobile phone might not be allowed to be carried with me.
My gripe is that most 2-factor auths are done via SMS(Text message for the Yanks). Nice if I'm in my home country, but if I'm abroad I usually have yanked the SIM on my mobile and am using a local SIM instead. Also, depending on what I'm working on, my mobile phone might not be allowed to be carried with me.
I'm hoping the 2FA will be limited to redemptions only. Otherwise, it's an overkill for a loyalty program.
Jul 17, 2015 | 10:08 pm
#33
Join Date: Jul 2011
Location: Waxahachie, TX
Programs: WN 3 Million Miler, MR Lifetime Titanium, HH Diamond, IHG Plat, AA Silver, United never again
Posts: 509
I put a PIN on my account after a friend lots points for some bogus reservations. It isn't 2FA but it adds a slight delay for the question to be asked and answered.
I don't foresee a problem except overseas or in secure installations.
I don't foresee a problem except overseas or in secure installations.
Jul 19, 2015 | 12:38 pm
#34
Join Date: Apr 2000
Location: LAX and LHR. UA lifetime Gold 1.9MM 1K , DL Gold Medallion, HHonors Gold, Marriott Gold, Avis President's Club
Posts: 3,654
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.
Last edited by 1P; Jul 19, 2015 at 1:00 pm
Jul 19, 2015 | 3:19 pm
#35
Join Date: Feb 2005
Location: PHL
Programs: AA EXP MM, HHonors Lifetime Diamond, Marriott Lifetime Ti, UA Silver
Posts: 5,216
It happens. A lot more often than you might imagine.
Jul 20, 2015 | 6:43 am
#36
A FlyerTalk Posting Legend
Join Date: Aug 2002
Programs: UALifetimePremierGold, Marriott LifetimeTitanium
Posts: 74,162
This is completely untrue. United have spent the past year and more trying to
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.
Cheers.
Jul 20, 2015 | 8:00 am
#37
FlyerTalk Evangelist
Join Date: Jun 2004
Location: MSP
Programs: DL PM, MM, NR; HH Diamond, Bonvoy LT Gold, Hyatt Explorist, IHG Diamond, others
Posts: 12,163
So basically Marriott is asking you to provide a phone number and email to get ready for their new authentication. Presumably if you already have that and you'r e happy with it there should be no problem.
Fwiw - I thought Marriott was going to ask for a stronger password. If hackers can already access my account, they'd already have my email and phone number.
Fwiw - I thought Marriott was going to ask for a stronger password. If hackers can already access my account, they'd already have my email and phone number.
Jul 20, 2015 | 11:59 am
#38
Join Date: Jan 2006
Posts: 134
This is completely untrue. United have spent the past year and more trying to
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.
persuade me and many others to add a PIN to our accounts instead of/in addition to a password, just because pre-merger Continental customers had them. We have steadfastly refused to do so on security grounds. We have never had PINs and will not agree to invent them. My pre-merger United 2-digit 6-letter password is infinitely better security than any 4-digit PIN.
Jul 21, 2015 | 4:03 pm
#39
Join Date: Apr 2000
Location: LAX and LHR. UA lifetime Gold 1.9MM 1K , DL Gold Medallion, HHonors Gold, Marriott Gold, Avis President's Club
Posts: 3,654
May 11, 2016 | 3:40 pm
#40
Join Date: Mar 2003
Location: SAN
Programs: AS Titanium (100K), Hyatt Globalist, Marriott Lifetime Titanium Elite, UA 1MM,
Posts: 1,841
I attempted a password reset and the whole "we will email you a code" thing put me in an errored loop. Now, when I attempt either the new or old password, I get an error message that they are experiencing technical difficulties. 
May 11, 2016 | 3:50 pm
#41
Join Date: Feb 2006
Location: Cockeysville, MD
Programs: Marriott Rewards Lifetime Titanium, Amex Plat, Hertz Gold 5*, National Exec, AA Plat
Posts: 9,502
May 12, 2016 | 6:18 am
#42
Join Date: Dec 2009
Location: PEK & MKE
Programs: Amex-gold, Hainan-gold, Mrt-LT Titanium
Posts: 1,534
May 12, 2016 | 7:05 am
#43
Join Date: Apr 2016
Programs: IHG Rewards Club, Marriott Rewards
Posts: 78
I wish these loyalty programs had a way to disable "shop" redemptions, like buying a computer with points for example. I will NEVER trade my IHG or Marriott points for something like that.
May 12, 2016 | 7:27 am
#44
FlyerTalk Evangelist
Join Date: Nov 2003
Location: South Florida
Programs: AA LTG (EXP), Hilton Silver (Dia), Marriott LTP (PP), SPG LTG (P) > MPG LTPP
Posts: 11,329
Everyone has their own pluses and minuses. No need to cancel something just because it's no use to you. I'm not likely to stay at a RC property, so should they drop the brand?
May 12, 2016 | 2:38 pm
#45
Join Date: Apr 2016
Programs: IHG Rewards Club, Marriott Rewards
Posts: 78
I doubt we will ever see a "build your own" program. I agree those are not great payback options. But I can see someone that has earned mega points and finds they have no way to burn them on stays, they may choose to use them to get something they don't want to spend $s.
Everyone has their own pluses and minuses. No need to cancel something just because it's no use to you. I'm not likely to stay at a RC property, so should they drop the brand?
Everyone has their own pluses and minuses. No need to cancel something just because it's no use to you. I'm not likely to stay at a RC property, so should they drop the brand?
Just an idea, though I do think its a good one.