2FA for CMS Admin Access Starting March 2, 2026

As part of our ongoing commitment to platform security, Two-Factor Authentication (2FA) will be required for all CMS admin logins beginning March 2, 2026.

This update applies only to CMS admins. Travelers will continue to access the online itinerary page and mobile app as usual, with no changes to their login experience.

What Will Change for Admins?
After entering their usual login credentials, CMS admins will be prompted to complete a second verification step:

• A one-time code will be sent to the registered email address
• The code must be entered to complete the login process
• The “Remember me for 2 weeks” option can still be used on trusted devices to reduce the frequency of verification requests

If 2FA is already enabled, no changes to the current login experience are expected.

Why This Update?
Adding this extra layer of security helps prevent unauthorized access, reduce the risk of compromised accounts, and better protect sensitive client and traveler data.