Hi all, just a quick question: does StarAlliance regularly ask members to reset password? I got an email with subject "The password for your account will expire in 3 day(s)"
It looks legit but I want to be careful. Please share if you received similar emails from them. Thank you.
I have never been asked to change my password.
Iām sorry to hear that hopefully you get asked one day š
password123 has served me very well. I would hate to have to change it. I struggle to remember my mums maiden name is Jones but it is easy to remember first dogs name was Bozo.
Thanks for your response … I am wondering what might have happened to my account that I was asked to reset password if no other members aren't. I logged via normal way and didn't see any notification or some sort. But also, there is no menu to go to Profile for example. The menu is just to "Point activities" and "Change password".
Apparently they do reset password every 180 days according to https://www.staralliance.com/en/web/rewards/au/faqs
For security purposes, your password will expire every 180 days. To help remind you of this, we will send you a daily email notification from three days before your password expires. If you attempt to log in to your Star Alliance Rewards account after your password expires, you will be prompted to follow the steps to reset your password.
For security purposes, your password will expire every 180 days.
Nice to see they are adhering to recommended security protocols from the 1990's.
Much research from the last 20 years suggests that forcing frequent password changes is counter-productive, and actually makes systems less secure.
I wonder, does Star Alliance at least have MFA?
Not that I can see lol
Probably lots of Star Alliance people using… Password1234, Password1235, Password1236…
Wife has had a Star alliance account for ~6 months, has not been asked to reset password at all.
But why risk clicking on the email - go to the known website and login, and it will no doubt prompt you if it is true.