Keeping your account secure
Practical steps to protect your Cheaplyfly account, and what to do if something looks wrong.
Cheaplyfly accounts don’t hold payment details, but they do hold your email address, alerts and travel plans. A few simple habits keep them safe.
Built-in protection
- Passwords are stored only as a secure hash, never as readable text.
- After several wrong passwords, sign-in pauses for 15 minutes to stop guessing.
- New accounts usually confirm their email before the first sign-in.
- Forms have checks against automated abuse.
- Password reset links expire after an hour and work only once.
Five things you can do
- Use a unique password. Don’t reuse a password from another site. A password manager makes this easy.
- Make it long. At least 8 characters is required; longer is better. A short sentence works well.
- Turn on two-step sign-in in the Security tab, if the site offers it. Then a password alone isn’t enough to get in.
- Protect your email account. Codes and reset links go there, so it is the key to your Cheaplyfly account.
- Sign out on shared computers, and don’t tick “Keep me signed in” or “Trust this device” there.
If you think someone else used your account
- Sign in and open the Security tab in your dashboard.
- Change your password. Other devices are signed out automatically.
- Press Sign out other devices to be sure.
- Turn on two-step sign-in, if available.
- Check your alerts and saved items for anything you didn’t add.
- Tell us what happened.
If you can’t sign in, use Reset password. The reset email goes to your account’s address.
Watch out for fake messages
Cheaplyfly doesn’t sell tickets or take payment. Be careful with any message that claims to be from us and:
- Asks you to pay Cheaplyfly for a flight or a fee.
- Asks for your card details.
- Asks you to send your password or a sign-in code by email, chat or phone.
Sign-in codes are only for you to type on our sign-in page. Never share them with anyone. If an email looks suspicious, don’t click its links: go to Cheaplyfly directly instead.
If this, then that
- If you get a sign-in code you didn’t ask for, someone may know your password. Change it now.
- If you get a password reset email you didn’t ask for, ignore it. Your password doesn’t change unless the link is used.
- If sign-in is paused after failed attempts, wait 15 minutes or reset your password.
Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.
Was this helpful?
Thanks for telling us.