Recently, a user reported that their ticket had already been used when they arrived at an event. The assumption was that our site had been compromised. While we have found no evidence of a security breach, we take these concerns seriously. Your tickets are valuable, and ensuring they remain in your control is our top priority.

Rather than responding directly to speculation, we’re taking action—by giving you an extra, unavoidable layer of security that makes it significantly harder for anyone other than you to access your tickets.

How Accounts Get Compromised

A bad actor doesn’t need to hack a website to gain access to your account. The most common ways accounts get compromised include:

Password Reuse – If you use the same password across multiple websites and one of them gets hacked, attackers can use leaked credentials to access your account.
Phishing Attacks – Scammers may trick you into entering your login details on a fake website, giving them direct access.
Insecure Devices – If someone has access to your email or logs into your account on an unprotected device, they can steal your tickets.

Even if your password is strong, these methods can put your account at risk. That’s why we’re implementing Two-Factor Authentication (2FA)—so that even if someone obtains your password, they still won’t be able to access your tickets.

How Two-Factor Authentication (2FA) Works

Starting now, whenever you access your tickets, you may be asked to verify your identity using Two-Factor Authentication (2FA). Since all users have already verified their phone numbers when creating an account, the verification code will be sent to the phone number linked to your account.

You will have the option to receive your one-time verification code via WhatsApp or SMS. Here is a breakdown of the process:

Log in as usual with your email and password.
If you’re on a trusted device, you’ll get immediate access.
If you’re on a new device or browser, we’ll send a verification code to your registered phone number.
You can choose to receive the code via WhatsApp or text message (SMS).
Enter the code to confirm your identity and access your tickets.
You can mark your browser as trusted to avoid repeating this step for 60 days.

This simple but powerful security feature ensures that only you can retrieve your tickets.

What If Your Phone Number Has Changed?

If you no longer have access to the phone number linked to your account, you won’t be able to receive your verification code. To update your phone number, please contact our support team by one of the following methods:

Email us at: admin@islandetickets.com
Or use the contact form on our website: https://islandetickets.com/contact

Once we verify your request, we’ll update your number so you can continue accessing your tickets securely.

Why This Matters

Protects Against Unauthorized Access – Even if someone gets your login credentials, they won’t be able to access your tickets without the second factor of authentication.
Prevents Ticket Theft – This system makes it significantly harder for bad actors to fraudulently use tickets that don’t belong to them.
Gives You More Control – You’ll know exactly when and where your tickets are accessed, and you’ll be able to manage your trusted devices.
Peace of Mind – You can attend events knowing that your tickets are safe and in your control.

What You Need to Do

This feature is automatically enabled for all users. The next time you access your tickets, if you’re on a new device, you’ll be asked to complete verification.

Pro Tip: If you frequently use the same device to access tickets, mark it as trusted to avoid repeating this step for 60 days.

Final Thoughts

Security is an ongoing process, and we’re committed to continuously improving your experience while protecting what matters most—your tickets.

We appreciate your understanding and your trust as we implement these changes. If you have any questions or feedback, feel free to reach out to our support team.

Your tickets, your control.

Upcoming Features on Island eTickets

Leave a Comment