Two-factor authentication (2FA)
2FA is a measure to enhance the security of your flight bookings and KrisFlyer account. A six-digit, time-sensitive, randomly generated passcode, also known as a One-Time Password (OTP), will be sent to your registered contact details to verify your identity. This will serve as an additional layer of verification to prevent any unauthorised person from accessing or making changes to your flight booking or KrisFlyer account.
For flight bookings, OTP is required to access passenger details, perform auto check in, change flights, or cancel flights.
For KrisFlyer members, an OTP is required for selected KrisFlyer transactions (e.g. when you access your KrisFlyer profile or make changes to your redemption group nominees).
As a default, the OTP will be sent to your registered mobile number to verify your identity. Should a mobile number not be available, the OTP will be sent to your registered email address.
Please ensure that the mobile number and email address indicated in your flight booking or KrisFlyer profile belongs to you, is up-to-date, and actively used.
Download the following guide for more details.
2FA has been introduced as part of our ongoing efforts to enhance online security for our customers.
The following information is required for 2FA authentication:
Flight bookings:
a. Booking reference number and last name
b. One-Time Password (OTP) sent by Singapore Airlines.
KrisFlyer account:
a. KrisFlyer membership number and account password
b. One-Time Password (OTP) sent by Singapore Airlines.
For flight bookings, 2FA is optional. Once enabled, it will be applied when:
- Accessing passenger details in your booking
- Turning auto check-in on
- Changing date or time of your flight
- Cancelling your booking
If you did not enable 2FA, you can access passenger details, make changes to your booking or cancel it, without the need for OTP verification via SMS or email.
For KrisFlyer members, 2FA is applied when you perform selected KrisFlyer transactions online pertaining to your KrisFlyer account. These include:
- Accessing and editing your KrisFlyer Profile
- Adding / removing redemption group nominees in the booking
- Adding / linking new redemption partners to convert miles to other loyalty programs (For example, Fliggy, Shangri-La Circle, Velocity, Esso, and CapitaStar)
- Resetting your account password under “Need Help Logging In” in the KrisFlyer account login widget
- Conversion of KrisFlyer miles to partner points (For example, Fliggy, Shangri-La Circle, Velocity, Esso, CapitaStar, Link Rewards, Marriott Bonvoy, and The Club)
- Donation of KrisFlyer miles
- Logging in to your KrisFlyer account on partner websites such as FlyScoot.com, KrisShop.com, KrisFlyervRooms.com and Pelago.co
- Offsetting your carbon emissions on The Singapore Airlines Group Carbon Offset Programme microsite
You can follow these steps to update your contact details:
- Log in to your KrisFlyer account
- Select the “Profile” tab*
- Select the “Edit” button beside “Personal Details”
- Your mobile number and email address can be edited under the “Contact Details” section
- Select “Save”
*Please note that you will be prompted for 2FA under step 2.
Your mobile number should follow the international format which includes the plus sign (+) and the country code. Please see examples shown in the table below. Members should omit the extra ‘0’ used when making domestic calls where applicable.
Country Code | Area Code | Phone Number |
---|---|---|
Country Code
Singapore (+65) |
Area Code
Not required |
Phone Number
8 digits |
Country Code
Australia (+61) |
Area Code
Not required |
Phone Number
9 digits |
Country Code
India (+91) |
Area Code
Not required |
Phone Number
10 digits |
Country Code
Indonesia (+62) |
Area Code
Not required |
Phone Number
8 to 11 digits |
Country Code
United Kingdom (+44) |
Area Code
Not required |
Phone Number
10 digits |
Country Code
United States (+1) |
Area Code
3 digits |
Phone Number
7 digits |
If your mobile number is not updated, request to receive your OTP via email in order to access your KrisFlyer profile. If both your mobile number and email address are not updated, contact KrisFlyer Membership Services to update your contact details.
We strongly encourage you to maintain individual mobile number and unique email address for your KrisFlyer account since key notifications and sensitive information pertaining to your account are sent to the mobile number and/or email address recorded in your KrisFlyer profile.
Mobile number is mandatory for your KrisFlyer account as it is a more secure method to receive an OTP. In scenarios where you are unable to access your mobile phone or receive an OTP by SMS, you may request to receive the OTP via email.
If you do not include a mobile number in your KrisFlyer profile when 2FA is enabled, you may receive your OTP via email, after which you can update your mobile number before logging out.
No, your KrisFlyer account will not be locked. However, you will not be able to perform certain transactions. KrisFlyer accounts will be locked at login only if the wrong KrisFlyer account number and/or account password is entered after consecutive tries.
As the OTP is sent by default to your mobile number registered in your KrisFlyer profile, please ensure that your mobile operator is on the GSM network and provides SMS service. Please contact your mobile service operator for further details on receiving SMS sent from Singapore whilst overseas.
For flight bookings, you can choose whether to send the OTP via mobile phone or email.
You are encouraged to make booking changes and KrisFlyer transactions before leaving for your trip.
In cases where you are unable to access your mobile phone or receive an OTP via SMS or experience a lag in receiving SMS, you may request to receive the OTP via email instead.
An OTP is typically sent to your registered mobile number within seconds. If you are experiencing a delay in receiving your OTP, it could be due to a weak mobile connection.
If you did not receive your OTP within two minutes, select “Resend OTP” to request for a new OTP. Note that there may be a delay in receiving the OTP via SMS if there’s a weak mobile connection.
Alternatively, you can request for the OTP to be sent via email.
If you are a KrisFlyer member, please verify that the mobile number in your KrisFlyer profile is updated.
There may be a delay in receiving the OTP via SMS in cases where the mobile connection is weak. If you requested the OTP via email, check the spam folder in your email account for the OTP email.
For urgent requests pertaining to upcoming flights, contact Singapore Airlines.
KrisFlyer members can approach KrisFlyer Membership Services for assistance with their flights. Verify the mobile number and email address registered in your KrisFlyer profile with our staff.
Please contact Singapore Airlines if you received an OTP but did not request for it. If you are a KrisFlyer member, contact KrisFlyer Membership Services for assistance.
Select “Resend OTP” to request for a new OTP. Ensure that you enter the latest OTP sent to you within 3 minutes before it expires.
Verify that you have entered the correct OTP sent to you via SMS or email.
You will only be required to enter the last 6 digits of the OTP, without the 4-letter alpha prefix. Please check that the 4-letter alpha prefix in the OTP sent to you corresponds with the one shown in the 2FA OTP prompt window.
If your OTP is still incorrect after several tries, select “Resend OTP” to generate a new OTP.
This service is currently offered free of charge, but you may incur standard SMS charges from your mobile operators for receiving an SMS.
Please clear cache on your web browser and try again.
You will be prompted to enable 2FA on the passenger details page when you make a flight booking.
If you are a solo traveller, the OTP will be sent to the contact details (email address and / or mobile number) entered in your flight booking.
If you are travelling with a group of friends or family, any one of the passengers will be able to get the OTP, as long as their contact details are included in the booking. You will be given a choice as to who would receive the OTP.
For flight bookings, 2FA is optional. You can choose to enable it or disable it when you are making a flight booking.
2FA is mandatory when you perform identified KrisFlyer transactions online pertaining to your KrisFlyer account. This includes accessing and editing your KrisFlyer profile, adding redemption group nominees, converting KrisFlyer miles to partner points, and more.
You are unable to turn off 2FA after you have confirmed your flight booking. It is recommended that you enable or disable it before you proceed to the next page in your booking.
For KrisFlyer members, note that once you have enabled 2FA for flight bookings via your KrisFlyer profile and have confirmed a flight booking, 2FA cannot be turned off for this booking. Any change to your 2FA settings will only apply to subsequent new flight bookings.
You can update your contact details or add another passenger’s contact details in Manage Booking. Do note that this action requires OTP verification to access and make changes to passenger details. We recommend that you only register contact details of travellers in your booking only.
Yes, if the principal KrisFlyer member has enabled 2FA, any booking made for a redemption nominee who is not a KrisFlyer member will also have 2FA enabled.
This is because one or more passengers in your booking have enabled 2FA in their KrisFlyer profile.
For bookings where there is more than one traveller, 2FA will be enabled for all passengers if at least one traveller has chosen to enable 2FA. This strengthens the security of your booking from unauthorised changes.
Set your 2FA setting preference by logging into your KrisFlyer profile. From there, navigate to ‘Profile’ section, and select ‘Security'.
Note that your 2FA preference setting will apply to subsequent new bookings.
Please note that if you choose to disable 2FA, this will only apply for subsequent new bookings. 2FA will still be applied to existing bookings made before this feature was disabled.
Yes, your flight booking will be secured with 2FA if you had enabled it on your KrisFlyer profile and shared your KrisFlyer details with your travel agent.
Yes, you will need to perform 2FA if you had enabled 2FA during booking or in your KrisFlyer profile.
This is because personal information is involved and thus requires additional verification.
You would not need to perform 2FA if you did not enable 2FA for your booking when making the booking or via your KrisFlyer profile security settings.
For additional security, OTP will still be sent to the original contact details given at the time of booking when you want to access passenger details, perform auto check-in, change booking, or cancel it.
Flight updates will be sent to the updated contact details during check-in.
You can secure your bookings with 2FA by enabling it via your KrisFlyer profile security settings.
When making a booking through a travel agent, please give your agent your KrisFlyer membership number. This ensures that your booking will be secured with 2FA and OTP can be sent to your contact details in your KrisFlyer profile.
Yes, your booking will be secured with 2FA if you have enabled it in your KrisFlyer profile before making the booking, and shared your KrisFlyer membership number.
The OTP will be sent to the contact details given at the time of booking and what is registered in your KrisFlyer profile.
If you had enabled 2FA for flight bookings on your KrisFlyer profile, your booking will secured with 2FA.
OTP will be sent to the contact details given at the time of booking and what is registered in your KrisFlyer profile. You can select which contact to send the OTP to.
Note that 2FA will only be applied when you want to access passenger details, perform auto check-in, change booking, or cancel it.