What does the two-step authentication mean?

It means that besides giving your debit/credit card details, you may be asked for additional identity verification when paying for flights or other purchases in our purchase channels.   

In practice, you are directed to a service provided by your bank or credit card company to authenticate with personal credentials, like onetime SMS password or the bank’s key code app. The authentication method used depends on the bank or credit card issuer.   

This service reliably authenticates the merchant as well, so you can make online purchases with peace of mind.  

Secure, 2-factor authentication is introduced due to the Payment Services Directive 2 (PSD2), which is an EU wide regulation on secure remote payments. 

The security standard is universally also called 3D Secure. Credit card companies and banks provide it for online purchases with a credit or debit card. Services using this are called Verified by Visa, Mastercard SecureCode, American Express Safekey.