Collecting Disney Account Logins

Last updated August 25, 2026

To link reservations, book dining and manage Friends & Family, you need the Disney account your client signs in with. JourneyFuse collects it through a secure form, stores it encrypted, and clears it out once the trip is over.

The same flow covers Walt Disney World (My Disney Experience), Disneyland and Disney Cruise Line — it is one Disney account either way, and only the wording of the client's email changes.

Asking the lead client

On the trip's Command Center, the Account access chip carries a Request button. Pressing it:

  1. Creates the secure form and links it to that client and trip
  2. Emails them the link automatically
  3. Switches the chip to Copy Link, so you can also send it yourself

Note: if your Send Mode holds client emails for review, the request waits in Inbox → Outbox until you release it. The confirmation after pressing Request tells you which of the two happened.

Once they submit, the chip shows On file and an eye icon reveals the login for 30 seconds. Every reveal is logged.

Collecting more than one account

A party is often more than one family, and each adult may have their own Disney account. Beside the Account access chip is Other travelers, which lists everyone on the trip.

  • Request sends that traveler their own secure link, addressed to the email on their traveler record
  • Copy link appears once a request is out, for when you would rather send it yourself, or when they have no email on file
  • The pencil stores an account you were given over the phone
  • Each account is listed by name, with its own status and its own reveal

Every traveler gets their own link. Do not forward the lead client's request link to a second family: that link is the lead client's portal, and it also shows their other trips, their invoices and the whole party's passport details.

Entering a login yourself

Clients frequently read their account out over the phone. Use Manual on the Account access chip for the lead client, or the pencil beside a traveler's name in Other travelers. Either way it is encrypted exactly the same as a submitted one.

How the login is protected

  • Encrypted with AES-256-GCM before it is stored, never held as plain text
  • Only your agency can open it, and every reveal is counted and time-stamped
  • It hides itself again 30 seconds after being revealed
  • It is removed seven days after the trip ends

Do not collect Disney passwords through a form you build yourself. Answers to a custom form are stored as ordinary form text, with none of the protections above.