Disney Plus login / security

[Joe Brig]

I just canceled Disney Plus because it used the same account as Disney World and Disney Cruise Line. I don't reccomend anyone having the same account for Disney Plus and other Disney sites, especially if you give the username / passwords to kids or enter it on a TV or smart device. DCL has very sensitive information about each customer. Someone could also change or cancel WDW reservations. I plan on creating a new account just for Disney Plus.

 

[FigmentSpark]

Why don't you sign up with another email account? If you have a secondary one, use that or else use another family member's account.

Also, I totally agree. Those two accounts are for different things and I want them completely separated.

 

[greensombrero]

As someone who works in the infosec space I actually was pleased to see Disney is following industry best practices and having fewer logins and passwords. I like it is a single account for my relationship with them. What I don’t like though is they don’t go the device id route to connect devices. A lot of other services let you log in on your web browser and enter a device id to connect the device. That way you don’t have to enter what should be a long secure password via your TV remote. I also really wish they would offer multi factor auth options. If they want to tie everything to one account there is more they could and should do to secure it. Meanwhile they are encouraging people to create multiple accounts which is not ideal for them or us imho.

 

[sethschroeder]

DCL has very sensitive information about each customer.

Like what?

Passport information? Drivers license? All information from what I saw is actually X'd out if you go back in to see it. Just checked my "modify checkin" I my upcoming cruise.

DCL doesn't have anything that multiple other entities have.

 

[FigmentSpark]

Like what?

Passport information? Drivers license? All information from what I saw is actually X'd out if you go back in to see it. Just checked my "modify checkin" I my upcoming cruise.

DCL doesn't have anything that multiple other entities have.

It's not the fact that DCL or Disney has all that. It's the fact that the kids have access to it via their phones, tablets, PCs, etc, some of which could be lost or hacked. If that part of the website was siloed off, it would be different. But multiple people in a family (group of families?) will have access to one person's account.

 

[sethschroeder]

It's not the fact that DCL or Disney has all that. It's the fact that the kids have access to it via their phones, tablets, PCs, etc, some of which could be lost or hacked. If that part of the website was siloed off, it would be different. But multiple people in a family (group of families?) will have access to one person's account.

Disney does need family account access and 2FA as well.

That being said once logged in they shouldn't need to enter it again so it shouldn't be compromised.

That being said if someone had access to my phone or laptop they would have my passwords automatically entered anyways from Google sign on.

 

[TestingH2O]

What I don’t like though is they don’t go the device id route to connect devices. A lot of other services let you log in on your web browser and enter a device id to connect the device. That way you don’t have to enter what should be a long secure password via your TV remote.

I just got a Firestick and this is exactly what happened. I could log in on any device connected to the same network and verify that I was logging in via the TV.