Security - Help

How Do I Keep My Account Secure?

To keep your account safely secure, we recommend using a strong password that is not used on other websites. Be cautious of any suspicious links and always make sure you are on https://www.flyertalk.com/forum before entering any login information.

We strongly discourage the sharing of your password with others. Please also make sure your computer is up to date with the latest software and anti-virus program updates.

What Makes a Strong Password?

We consider a strong password to be one that is unique to the forums and not used by you elsewhere online. Our passwords require the following:

  • A minimum of eight (8) characters
  • At least one (1) lowercase letter
  • At least one (1) uppercase letter
  • At least one (1) number
  • At least one (1) of the following special characters: @ # _ $ % ^ & ! ~ ? *

We also recommend the following for your password:

  • Do not include personal information such as your birthday, date of birth, or address in your password.
  • Avoid commonly used words like "password" or the name of the website.
  • Do not use sequences such as "abcd", "123", "asdf", "jkl" or "qwerty".

When Will You Ask for My Password?

Please note that our only password prompts are on https://www.flyertalk.com/forum. We will not ask you to login to another website with your https://www.flyertalk.com/forum credentials nor will we ask you to download a file in order to login. If you receive such requests, please alert our site team and disregard it as the message is not from us.

What If My Password is Compromised?

If you believe your password has been compromised and/or someone logged in using your credentials, you can reset your password at any time via our Password Reset form. Filling out this form will generate a password reset link that is sent to the email address associated with your forum account.

Two-Step Authentication
What is Two-Step Authentication?

Two-step authentication is a feature to keep your personal information, as well as the site, more secure. It does this by assigning you a personalized Verification Code that needs to be entered when you log in, independent of your standard username and password.

How does it work?

In order to give your account an extra layer of security, two-step authentication requires you to use a six digit, randomly generated Verification Code when logging in. This code is generated separately from our site, either within a smartphone app or on a special verification webpage.

If you're using an iOS, Android, or Blackberry device, you can set up and access your Verification Code via the free "Google Authenticator" app. If you are using a Windows Phone device, you can do so via the free "Authenticator" app.

Note that your verification code is never the same twice. The code changes every 30 seconds to help ensure that you're really you. As such, you will need to access your app or the security webpage every time you want to log in.

How do I enable Two-Step Authentication?

You can set up two-step authentication for your account by going to your User CP and selecting "Edit Security" at the bottom of the left-hand menu. Follow the on-screen instructions and you'll be all set!

Do I need to remember the 16-digit key from the set up process?

No, this key is only used to help generate your rotating, six-digit Verification Code. Once you have successfully set up your Verification Code, feel free to disregard the longer key.

Why do I need a Recovery Question/Answer?

If you somehow lost access to your Verification Code and need to create a new one, we use the Recovery Question as a tool to confirm your identity.

What is "Authorize My IP" and how does it work?

Authorize My IP is an optional setting that allows you to bypass entering your verification code for 7 days at a time. This option is useful when on a trusted device that only you use as it saves you the time of manually entering a Verification Code during every log in.

In addition to adding your IP address on the "Edit Security" page, you can also monitor and remove any IP addresses associated with your account via the "Authorized IPs" option in your User CP's left-hand menu.

How do I disable Two-Step Authentication?

If you no longer wish to use two-step authentication, you can disable it by going to the "Edit Security" page in your User CP. You will be prompted to enter your Verification Code, and once confirmed, authentication will be turned off. You can re-enable it at any time.

What should I do if I'm told my Verification Code is invalid when trying to login?

You can set a new randomly-generating Verification Code at any time by going to our Reset page and following the on-screen instructions.

What should I do if I accidentally deleted my Verification Code on my app or webpage?

You can set a new randomly-generating Verification Code at any time by going to our Reset page and following the on-screen instructions.

I received an email saying my security settings were changed, but I didn't make the change myself. Now what?

We recommend you immediately log in to your account and change your password. If you are logged in, you can do this by going to your User CP and selecting the "Edit Email & Password" option. If logged out, you use our Password Recovery Form to generate a new password via email.

You should set a new randomly-generating Verification Code as well, which you can do by going to our Reset page and following the on-screen instructions.

If you believe for any reason that your account has been compromised, please contact us.

Don't have a smartphone?

If you don't have a smartphone, you can also set up and access your code at http://internetbrandsauto.com/security/. We recommend bookmarking this page so you have it whenever you need to log in.