A new identity and account access experience is here

For Account Administrators, the new Identity & Access experience means:

• Introduction of One-Time Passcode (OTP) login to the Business Booking and Rewards Portals
• Introduction of Multi-Factor Authentication (MFA)
• Introduction of Single Sign-On (SSO), meaning you’ll have only one set of credentials across the Business Booking and Rewards Portals
• When your accounts are linked, you’ll be able to move between your Velocity Frequent Flyer and Virgin Australia Business Flyer accounts without needing to sign in again
• Administrators will no longer be able to reset the password of other user profiles in the Business Booking Portal
• If an Administrator requests to close the Virgin Australia Business Flyer account, all users associated with that business account will be deactivated automatically.

For other user profiles in the business account, the new experience introduces:

• One-Time Passcode (OTP) login to the Business Booking Portal
• Multi-Factor Authentication (MFA).
  

Once these changes go live, all users will be auto logged out of their Virgin Australia Business Flyer account on both the Business Booking Portal and Rewards Portal. The next time they log in, they’ll be prompted to create a new password and authenticate their identity by passing MFA requirements. These changes provide a simpler and more secure sign-in experience.

Multi-factor authentication (MFA) is an additional security layer designed to protect your Virgin Australia Business Flyer account and your personal information. It requires two forms of verification: something you know and already use to access your Virgin Australia Business Flyer account (your username and password) and combines it with something you have access to (such as your email account or mobile phone). This extra step helps safeguard your account from unauthorised access. This approach to improved security is also referred to as Two-factor authentication (2FA) or step-up authentication. 

You’ll be prompted to enter a verification code when using your Virgin Australia Business Flyer account and when completing certain activities or making changes within your business’ account.

Single Sign-On (SSO) allows you to move between the Business Booking Portal and Rewards Portals without signing into each platform separately. You'll now be able to use one username and password across both the Business Booking and Rewards Portals.

If your Virgin Australia Business Flyer and Velocity Frequent Flyer accounts are linked, you'll also be able to move between your Virgin Australia Business Flyer user account and Velocity Frequent Flyer account without signing in again.

The account activation process has been simplified. Changes include:

• Once your business joins the Virgin Australia Business Flyer program, you’ll receive only one activation email to activate both your business’ Business Booking Portal and Rewards Portal simultaneously
• activation links are now valid for 48 hours.

You can log in to your Virgin Australia Business Flyer account faster and more securely using a 6-digit One-Time Passcode (OTP) sent to your registered email address or mobile number on recognised devices or browsers.

For step-by-step instructions, refer to the User Guide.

On the verification page, make sure you recognise your phone number or email – noting that most of the contact information will be hidden.

Don’t forget to check your junk or spam folder if the code was sent via email.

If you’re still having trouble, try verifying with a different method – e.g. text message instead of email.

One-Time Passcode (OTP) login and Multi-Factor Authentication (MFA) work together to help keep your account secure.

An OTP provides a faster way to sign in on recognised devices or browsers without entering your password. Multi-Factor Authentication (MFA) provides an additional layer of security. You can still log in using your password if you prefer.

No, MFA is mandatory for all members – it helps us keep your account safe.

If you have access to either your mobile number or email and not the other, you can select the method you do have access to, and when logged in, update your account details. If you don’t have access to the mobile number or email address listed on your Virgin Australia Business Flyer user account, please get in touch with our friendly team using the contact details at the bottom of this page.

Yes. A Virgin Australia Business Flyer user can select “Log in to a different account” and enter details for a different Virgin Australia Business Flyer user account. They will then be prompted to complete MFA for the account they are logging into.

If you receive a One-Time Passcode (OTP) that you didn’t request, do not share the code with anyone.

This may happen if you previously logged in on a shared device or browser and someone else attempted to access the site. If you’re unsure why you received the code or wish to report suspicious activity, please contact contact 1300 246 498 or email businessflyer@virginaustralia.com.

You can continue to use your One-Time Passcode (OTP) login for up to 90 days after your last log out, before you’ll be asked to sign in again using your Virgin Australia Business Flyer account username and password.

For your security, you’ll be automatically logged out after 17 minutes of inactivity.

The first time you sign in to either the Business Booking Portal or the Rewards Portal after these changes go live, you'll be prompted to create a new password.

During this initial login, you'll also choose your preferred One-Time Passcode (OTP) delivery method (email or SMS) to use moving forward. This one-time setup configures both your OTP sign-in method and Multi-Factor Authentication (MFA) for future logins.

Once you've completed the initial setup, you'll be able to sign in using a One-Time Passcode (OTP) on recognised devices or browsers as part of the new Identity & Access experience.

Yes. You can still use your password to log in at any time.

If you prefer to log in using your password, select "Log in another way", then choose "Use your password."

This usually happens if you’re using a new device or browser, or if your cookies have been cleared.

Once you’ve signed in and verified your account, future logins on that device or browser will use a One-Time Passcode (OTP).

Yes. Password resets and password changes are completed through a self-service process. Select “Forgot password” on the Business Booking Portal sign-in page and follow the instructions sent to your registered email address to reset your password.

Note: As part of our security enhancements, Account Administrators can no longer reset passwords on behalf of other users. If you need to reset your password, simply select Forgot Password on the login page and follow the prompts to securely reset it yourself.

If you're unable to sign in:

1. Check you're using the email address or mobile number that is associated with your Virgin Australia Business Flyer user account.
2. Complete your first login by creating your new password.
3. If you're still experiencing issues, contact our friendly support team using the details at the bottom of this page.

No. Each user should sign in using their own user account and registered contact details.

Sharing usernames or passwords is not recommended and may prevent successful authentication under the new Identity & Access experience.