2-factor authentication on the way for the website

[Hindsite]

About time..

 

[dioxide45]

I saw this, and watched the video. I wonder if this is also another method to limit point brokers?

 

[billymach4]

I saw this, and watched the video. I wonder if this is also another method to limit point brokers?

Plausible. However it is long overdue.

 

[jwalk03]

I saw this, and watched the video. I wonder if this is also another method to limit point brokers?

That was my first thought too. I doubt they are actually worried about security and see it as a way to make it harder for points brokers.

I mean when you call in they literally only ask your name and address and phone number. Very basic stuff that is very easy to find- not very secure!

 

[travelhacker]

I saw this, and watched the video. I wonder if this is also another method to limit point brokers?

Definitely, this is a very good thing in my opinion.

 

[dioxide45]

That was my first thought too. I doubt they are actually worried about security and see it as a way to make it harder for points brokers.

I mean when you call in they literally only ask your name and address and phone number. Very basic stuff that is very easy to find- not very secure!

I recall an incident a couple years ago where they, or someone, claimed that an owner's account was compromised and points "stolen" and rented. Those renters had their reservations cancelled and lost. Some were out a lot of money. I suppose this would help in that regard.

 

[TheTimeTraveler]

About time..
View attachment 120780

I'm surprised they are just introducing this to their members now. I already have this and have been using this since August of 2025.

Since I've been using this for 5 months I don't believe the January 24th, 2026 shutdown of the website has anything to do with the two factor authentication.

I would suggest TUG members contacting the Marriott helpless desk if you want to place it into effect immediately for your own account. By the way, I strongly urge everyone to do this in order to prevent any unauthorized persons from potentially accessing your Marriott Point Balance (which is a serious ongoing issue for Marriott members).




















.

 

[sponger76]

They're a couple of years behind the curve with this. If they had implemented 2FA back when it started to take off across a variety of industries on their apps and websites, maybe by now they'd be free to focus on at least some sort of usability improvements...

 

[davidvel]

I'm surprised they are just introducing this to their members now. I already have this and have been using this since August of 2025.

Since I've been using this for 5 months I don't believe the January 24th, 2026 shutdown of the website has anything to do with the two factor authentication.

I would suggest TUG members contacting the Marriott helpless desk if you want to place it into effect immediately for your own account. By the way, I strongly urge everyone to do this in order to prevent any unauthorized persons from potentially accessing your Marriott Point Balance (which is a serious ongoing issue for Marriott members).




















.

What Marriott point balance are you referring to? What Marriott members are you referring to? What website are you referring to?

 

[dioxide45]

I'm surprised they are just introducing this to their members now. I already have this and have been using this since August of 2025.

Since I've been using this for 5 months I don't believe the January 24th, 2026 shutdown of the website has anything to do with the two factor authentication.

I would suggest TUG members contacting the Marriott helpless desk if you want to place it into effect immediately for your own account. By the way, I strongly urge everyone to do this in order to prevent any unauthorized persons from potentially accessing your Marriott Point Balance (which is a serious ongoing issue for Marriott members).

I can't find any way to set up 2FA on the website at this time. It seems you set yours up manually? I don't think they would want to do have to do that for every owner. So the website shutdown might be intended as a rollout to all owners and making 2FA required.

 

[TheTimeTraveler]

I can't find any way to set up 2FA on the website at this time. It seems you set yours up manually? I don't think they would want to do have to do that for every owner. So the website shutdown might be intended as a rollout to all owners and making 2FA required.

Someone had attempted to transfer 400,000 of my credit card points into their airline account to use with their airline miles account. Marriott loss prevention smelled something fishy and notified me of the attempted fraud. At the time I said that was a good reason to establish two factor authentication. To my surprise they already had it available and they gladly provided it to me immediately when this occurred back in August of 2025.

If they provided it to me it proves they are already set up to do it for anyone (in my opinion). They set it up for me over the phone at the time.












.

 

[dioxide45]

Someone had attempted to transfer 400,000 of my credit card points into their airline account to use with their airline miles account. Marriott loss prevention smelled something fishy and notified me of the attempted fraud. At the time I said that was a good reason to establish two factor authentication. To my surprise they already had it available and they gladly provided it to me immediately when this occurred back in August of 2025.

If they provided it to me it proves they are already set up to do it for anyone (in my opinion). They set it up for me over the phone at the time.

Though you are saying credit card points, it sounds like you are referring to Marriott Bonvoy? Not your Marriott Vacation Club ownership account. This thread is about MVC, not Bonvoy. It seems that the Marriott.com/Bonvoy website has had 2FA since 2022.

 

[TheTimeTraveler]

Though you are saying credit card points, it sounds like you are referring to Marriott Bonvoy? Not your Marriott Vacation Club ownership account. This thread is about MVC, not Bonvoy. It seems that the Marriott.com/Bonvoy website has had 2FA since 2022.

Yes, Marriott Bonvoy















.

 

[dioxide45]

Yes, Marriott Bonvoy

It would seem then that your post #7 doesn't apply. @Dean owes @billymach4 a beer.

 

[billymach4]

Someone had attempted to transfer 400,000 of my credit card points into their airline account to use with their airline miles account. Marriott loss prevention smelled something fishy and notified me of the attempted fraud. At the time I said that was a good reason to establish two factor authentication. To my surprise they already had it available and they gladly provided it to me immediately when this occurred back in August of 2025.

If they provided it to me it proves they are already set up to do it for anyone (in my opinion). They set it up for me over the phone at the time.












.

Yes on the Marriott Hotel side. Bonvoy , Mother Marriott ~ Whatever the heck you want to call them... I have also had 2 factor for a long time now. Can't even remember when I turned that on? Been that long.

That is the basic SMS text 2FA. Yes that is a good method.

Good : SMS text
Better: Authentication app on your mobile
Best: Hardware key such as Yubikey.

The SMS text is easy and ubiquitous. However it can be hacked by bad actors.

As you go to the Better and Best options it does present more technical intervention. This in turn does have a negative effect on acceptance and usage.

I doubt they will offer the Hardware key as option. If they do present the hardware key I will adopt that option.
I do hope they at least offer the Better option of the authentication app on mobile such as Authy.

 

[billymach4]

Here is an old post about 2FA.

Post on 2FA PSA

 

[billymach4]

Here is an old post on Yubikey

Yubikey

 

[TolmiePeak]

Good move. Seems like there a couple of posts per week in the /AlaskaAirlines Reddit site about people having their accounts get hacked. No 2FA available. Not sure what they are waiting for.