Community

What are some ways to reduce the chances of Hyatt points being stolen and redeemed?

4 weeks ago

Because of the Chase points redemption changes, I'm planning to transfer a large amount of points to Hyatt. I wanted to ask: besides changing my password often, what other methods are there to avoid unauthorized redemptions? But I've often seen on Xiaohongshu that as long as someone has your email name, unauthorized redemptions may be possible. It mainly feels like if just the email and password are enough for unauthorized redemptions, then there's no solution.

1.9K

Comments (5)

haha664 weeks ago

Linking your Hyatt account to a separate email and enabling two-factor authentication is more effective than repeatedly changing your password.

色字头上一把刀4 weeks ago

Besides your email password, you should also check whether your Hyatt account has a separate login name and phone verification set up—many people use the same credentials across multiple platforms.

龍角尖4 weeks ago

What you're describing with Xiaohongshu—where someone can supposedly drain your account with just your email and name—is usually a case where the other party already has your password from some platform and then tries credential stuffing. With Hyatt, if two-factor authentication is enabled, just having your email and password won't get them in. The key is to check whether you've ever leaked the same email-and-password combination somewhere else.

期米翁3 weeks ago

If Hyatt supports it, use a passkey or authenticator app instead of relying on SMS alone.

yangzhengzheng93 weeks ago

So how exactly can you check whether two-factor authentication is enabled on your Hyatt account? Which setting should you look for in your account settings?