Min 8 chars, 1 uppercase, 1 number. Five failed attempts trigger a 15-minute lockout.
Optional: 2-3 letter airline identifier. Leave blank for auto-detection.
Keep me signed in for 7 days instead of 15 minutes.