United Airlines has drawn a line in the sand against AI assistants. On 12 November 2026 the airline said it will restrict access to AI agents trying to book flights and manage reservations on their customers’ behalf, citing cybersecurity risks and federal aviation rules. The move makes United the latest major American company to shut out personal AI agents, after banks issued similar warnings. Here is what United is blocking, why it says credential sharing is dangerous, and what it means if you use an AI assistant to plan your travel.
What United Airlines Is Blocking
United is targeting what it calls “unauthorized, third-party personal AI agents or assistants”, the kind of autonomous tools that log into your accounts and act for you. In a statement, the airline said it is taking steps to restrict access “directly within our digital platforms and indirectly via travel agencies and aggregators”, and that the work includes updates to its booking, ticketing and distribution policies.
In plain terms, the block covers both United’s own website and app and the third-party booking channels that feed into it. An AI assistant that logs in as you to search fares, book tickets, change seats or manage a reservation will find the doors closing, whether it accesses United directly or through a travel agency or aggregator.
United frames this as protecting customers first. The airline warns that “sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases, account changes, or use of MileagePlus miles.” In other words, once your password is in an assistant’s hands, a misheard command or a buggy agent can spend your money or your miles.
The airline has not published the technical details of the block, but policies like this usually combine automated traffic detection with plain terms-of-service rules. Once third-party agents are formally unauthorised, United can rate-limit, challenge or refuse sessions that behave like bots, and it can hold travel agencies accountable for the tools they pass bookings through.
The Cybersecurity Problem With AI Agents
The core issue is one the whole industry is wrestling with. Airlines and banks say they are struggling to tell real customers apart from AI systems acting on their behalf, especially when users hand their logins to an assistant. A shared password does not just give an agent permission to search flights. If that credential is leaked, stored insecurely or captured in a breach, it is a full account takeover.
There is also the problem of unintended actions. An agent optimizing for the cheapest fare might book a non-refundable ticket you would never have chosen, or apply your MileagePlus miles to the wrong booking. When a human clicks buy, there is a moment of consent. With an autonomous agent, that moment happens by default.
United adds a regulatory argument on top of the security one. Federal aviation rules require that a human completes flight check-ins to acknowledge that their bags do not contain banned substances, the airline says. An AI agent checking you in cannot legally make that declaration for you, which puts automated check-in flows on the wrong side of the rules.
Why Now: Banks Drew the First Line
United’s decision follows a warning from the banking sector. Bank of America last week urged customers not to share their banking passwords with their AI assistants, part of a broader push by financial institutions to keep autonomous tools away from authenticated sessions. TechCrunch notes that United is the latest American corporate giant to prevent customers from using AI agents and autonomous assistants to access its systems, and it is unlikely to be the last.
The pattern is becoming clear. Companies welcome AI that helps you research and decide, but they do not want AI that holds your password. Expect more travel, finance and retail platforms to add explicit AI agent policies to their terms of service over the coming months.
What This Means for Travellers Using AI Assistants
- Research still works: Nothing stops an AI assistant from helping you compare routes, dates and fare classes before you book. The restriction is on letting agents transact in your account.
- Book like a human: Use the AI to shortlist options, then complete the booking yourself on United’s website or app. That keeps the credential out of the agent and keeps you in control of the purchase.
- Watch your miles: If you have shared your MileagePlus credentials with any tool, change your password now. United specifically warns that agent misuse can spend your miles.
- Expect friction on third-party tools: Travel agencies and aggregators are part of the restriction, so AI-powered booking widgets may stop working with United inventory.
- Check-in stays human: Even if an agent could check you in, federal rules want a person confirming the baggage declaration. Plan to do it yourself.
How to Use AI for Travel Without Sharing Credentials
- Ask, do not hand over the login. Use your assistant for itinerary planning and fare research in plain conversation, without connecting it to your airline account.
- Do the booking yourself. Complete the purchase on the official site or app so the credential never leaves your hands.
- Turn on two-factor authentication. If your airline or bank supports it, a stolen password alone will not be enough to hijack your account.
- Use unique passwords per site. A password manager keeps one leaked credential from opening every other account you own.
- Read what your assistant stores. If a tool does keep session data or credentials, know where it goes and how to delete it.
The Bigger Picture
This is less about United hating AI and more about the trust gap around agentic automation. Assistants are good at planning and terrible at being accountable, and right now there is no reliable way for a company to verify that an AI acting in your account was actually authorised by you. Until that changes, expect corporate giants to keep closing the door on agents that hold passwords, while staying friendly to AI that helps you decide what to buy.
There is also a competitive angle. AI booking agents threaten to turn airlines into interchangeable inventory, where the assistant picks the cheapest fare and the airline loses the direct relationship. By restricting agents at the booking and distribution layer, United keeps the customer relationship on its own channels, where it controls pricing, upsells and loyalty. Security is the stated reason, but the policy also protects the business model.
For travellers, the practical upshot is simple. AI is welcome as a research assistant and unwelcome as an account manager. Keep your credentials to yourself, book directly, and let the agent do the thinking while you do the clicking.
Why did United Airlines block AI agents
United says AI agents holding customer credentials create cybersecurity risks, including unintended purchases, account changes and misuse of MileagePlus miles. The airline also says federal rules require a human to complete check-ins for baggage declarations.
Can I still use AI to find flights on United
Yes. AI assistants can still help you research routes, dates and fares. The restriction applies to AI agents that log into your United account to book tickets or manage reservations on your behalf.
Is it safe to share my airline password with an AI assistant
Airlines and banks advise against it. Shared credentials can leak or be misused, and agents can take actions you did not intend, such as spending reward miles or booking non-refundable tickets. Bank of America issued a similar warning for banking passwords last week.
Which other companies block AI agents
United joins a growing list of American corporate giants restricting autonomous AI assistants from customer accounts, including banks like Bank of America. More travel, finance and retail platforms are expected to add similar policies.
