I have a booking system where passengers need to add information that is quite sensitive (passport details etc). When they book, I generate a (difficult to crack) reference number, which they use to log in. I also send it to their email address, so essentially it's an auto-generated password. They can only get access when they enter the reference number. However, the UX dept have asked for passengers to click a link and be automatically logged in.
But I think this might be a risk. For example, I can put the ref in the URL and automatically log them in, but ... what if it's a work computer or shared device. That URL can be found again.
Does anybody recommend a better way? How can I keep my passengers' data safe, but also make their life easy?
