Miles&Smiles account and transaction security

Miles&Smiles prioritizes the security of your account and transactions and its systems are continually enhanced to ensure this commitment.

What is Two-Factor Authentication ?

In addition to your Miles&Smiles password, Two-Factor Authentication adds an extra layer of security to your account transactions. To ensure transaction security, you can perform two-step verification using the methods provided below:

- One-time Password via SMS

- One-time Password via Whatsapp

- Smart Notification

What is the purpose of Two-Factor Authenticationn?

- Increased security: This approach enhances security by incorporating an additional layer of protection for your account and transactions.

- User-friendly: Your transaction can be quickly completed with the one-time password sent via Mobile App Smart Notification, WhatsApp or SMS during the operation.

How can I get the one-time password (OTP) via SMS and Whatsapp?

During certain transactions, a one-time password is sent via WhatsApp and SMS or Whatsapp to the mobile phone number registered in your Miles&Smiles account. Please ensure that your registered phone number is correct and up to date. 

In cases where we send a one-time password via WhatsApp, if you’re unable to receive the OTP through WhatsApp, please make sure that you’re using the latest version of the app and that you’ve accepted the updated WhatsApp terms and privacy policy.

You can click the link to access the Turkish Airlines WhatsApp Smart Assistant: WhatsApp

How can I use the Smart Notification?

You can also log in to your account by approving the notification sent to your personal mobile device instead of using a one-time password. To use this feature, you can register your personal device as a Smart Notification Device by following the steps below:

  • After logging in to your account from your personal device, open the Device Management tab in the profile section.
  • Click on the edit tab under the Smart Notification heading on the page that opens.
  • Select your device and complete the process by entering the one-time password sent via SMS/WhatsApp.

You can watch the video for detailed information.

Suggestions for ensuring account and transaction safety

When a login is made from a new device, a notification containing the login details is sent to your registered email address. Please ensure that the email address in your Miles&Smiles account is up to date to receive these notifications. If you are logging in from a trusted device, you can mark your device as safe either by clicking the link in the email or through the Device Management section in your profile to avoid receiving re-login notifications from this device. If this activity was not done by you, you can temporarily protect your account using the link in the email.

For faster and more secure transactions, we recommend accessing the Turkish Airlines website and mobile app from your personal device.


Be cautious of any message requesting your personal information, whether it is an email or an SMS; do not click on suspicious URLs. For more information about phishing, please visit our phishing awareness page. 

Frequently Asked Questions (FAQ)

If the One-Time Password (OTP) is not received, what action should be taken? Learn more

First, ensure that your phone number is up to date. If your phone number is correct and updated, make sure that you have service in your current location. If you don't have service, you can still access your one-time password via WhatsApp with an internet connection.

If the mobile phone number hasn’t been updated, and the account can’t be accessed, what action should be taken? Learn more

If your registered mobile phone number is out of date, please contact us using the feedback form. We will assist you as soon as possible.

I am not receiving notifications even though I selected a Smart Notification device. What should I do? Learn more

If you are not receiving smart notifications on your selected personal mobile device, please ensure that notification permissions for the Turkish Airlines mobile app are turned on in your device's Settings.

I changed my mobile device. How can I update my Smart Notification device? Learn more

After logging into your account from your new device, you can remove your existing Smart Notification device and select your new device on the Device Management page in your profile.