Takeaway: On November 11, 2026, United Airlines said it is restricting access for unauthorized third-party AI agents and assistants, both directly on its digital platforms and indirectly through travel agencies and aggregators. The work includes updates to booking, ticketing, and distribution policies. This is not a ban on using AI to research a trip, and it is not a blanket ban on “all AI.” United’s own Digital Trust Center FAQ says customers can still use AI for general planning and inspiration if the tool does not access united.com or the United app. The airline also says it has not authorized any third-party AI agents yet, and that assistive technology for customers with disabilities is not affected.
The announcement matters because some consumer and enterprise agents are now built to operate websites, not just answer questions. That is a different product class from OpenAI’s Business Agents, which, in the official November 10 launch, cannot complete purchases or bookings and are meant to send customers to a company’s own site. United is drawing a line around its own platforms: unauthorized tools should not search, book, buy, manage, or collect information on united.com or in the United app on a traveler’s behalf.
Why United says it is doing this
United’s newsroom post frames the change as a customer-protection step. The airline says sharing account credentials with personal, third-party AI assistants can expose sensitive information, and that actions taken by those tools may result in unintended purchases, account changes, or use of MileagePlus miles. The Digital Trust Center page makes the same point in slightly broader language: third-party agents can act on a traveler’s behalf, and delegating authority to them to access a MileagePlus account, book trips, or buy add-ons and upgrades is “a lot of control.”
There is also a safety and compliance argument, and United is specific about it. Automated AI actions, the airline says, have the potential to violate FAA and DOT regulations. The example both the newsroom post and the FAQ use is flight check-in, which requires a human acknowledgment that bags do not contain banned substances such as explosives. The FAQ adds that using a third-party AI agent to check you into a flight automatically could result in you missing important safety content. That is United’s stated reason, not an independent finding that a particular tool has already done so.
United also notes that corporate leaders in the banking and retail industries have taken similar actions regarding AI agents, and it encourages others to consider measures that preserve customer data and security. It does not name those companies, and this article does not fill in that list. The post says United will continue to evaluate how personal AI assistants interact with its services as the tools evolve, with a focus on protecting customers.
What is restricted, and what is not
United’s wording is “restrict access” and “prohibit use by unauthorized third-party AI agents or assistants.” Stay with that wording. The company is not announcing a holiday shutdown of AI, and it is not saying that customers may not use AI at all.
The FAQ gives a practical test. If a third-party AI agent, bot, browser extension, or browser feature searches, books, buys, manages, or collects information on united.com or the United app for you, and United has not given permission, it is unauthorized. You can still use AI to research and plan trips, as long as the tool does not access united.com or the United app. United even notes that there are AI tools to help inspire a trip, “including ones built by us.” If you use AI to generate speech or text, the FAQ says to review it and search it yourself on united.com or the United mobile app.
The same page is clear on authorization: “Does United work with any third-party AI agents? Not yet.” If that changes, United says the page will be updated. Just because a traveler has given a third-party assistant permission does not mean United will permit that assistant to transact with United. Assistive technology for customers with disabilities is not affected.
United’s safety advice is about what you should not hand to a tool. Only give third-party AI agents general information for planning and travel inspiration, not sensitive information. The FAQ’s “try to avoid” list includes MileagePlus account numbers, passwords, or any sign-in information; a flight confirmation number used to request an upgrade; and personal information used to validate identity, such as a name, birthdate, or address. Those are illustrations of the boundary, not a complete list of every data element United considers sensitive.
Travel agencies, existing bookings, and what to do if you already shared a login
The restriction is not limited to a customer opening the United app. United says it is taking steps directly within its digital platforms and indirectly via travel agencies and aggregators. The FAQ tells travel agencies and booking platforms that they cannot use third-party AI agents to search for, book, or manage United travel for their customers on either direct or indirect channels. Agencies can only use their own third-party AI tools with United’s permission.
If a third-party AI agent already made a booking, United says agent bookings made prior to November 11, 2026, will not be canceled. It recommends that travelers review all recent travel plans to ensure they have been booked and ticketed correctly. That is a review request, not an automatic void.
If you previously shared any MileagePlus login information with a third-party AI agent, United recommends that you change your password immediately. If you suspect unauthorized access to a MileagePlus account, or an unauthorized purchase, the FAQ says to take steps to secure your account immediately. The page does not, in the text published with this announcement, spell out a separate claims form or phone tree beyond that password and account-security advice and a promise to update the Digital Trust Center so customers can better understand the restrictions, how to protect their accounts, and where to get help if an agent takes an unintended action.
How this sits next to other agent products
United is reacting to a class of tools that can act, not just advise. Computer-use and desktop-agent products, including ChatGPT’s local-computer Dots, are built to operate interfaces rather than only generate itinerary ideas. United’s rule is about unauthorized access to its platforms, not about whether those products exist. The airline is also leaving room for a future in which it authorizes standardized, secure integrations with privacy, security, authorization, and accountability protections in place. That is a stated intention, not a partner list and not a ship date. Until United names an authorized third-party agent, the operational rule is the one on the FAQ page: do not let an unauthorized tool touch united.com or the United app on your behalf.
What United announced, at a glance
| Item | What United’s November 11 materials say |
|---|---|
| What changed | United is restricting access by unauthorized third-party AI agents or assistants, directly on its digital platforms and indirectly via travel agencies and aggregators |
| When | Announced November 11, 2026, with updates to booking, ticketing, and distribution policies |
| Stated reasons | Credential sharing can expose data; unintended purchases, account changes, or MileagePlus use; automated check-in may skip required human acknowledgments |
| Safety example | Flight check-in requires human acknowledgment that bags do not contain banned substances such as explosives, which United ties to FAA and DOT rules |
| What this is not | Not a ban on using AI to research or plan a trip, provided the tool does not access united.com or the United app; assistive technology for customers with disabilities is not affected |
| Authorization today | United has not authorized any third-party AI agents yet |
| Existing bookings | Agent bookings made prior to November 11, 2026, will not be canceled; United recommends reviewing recent plans |
| If you already shared a login | If you shared MileagePlus login information with a third-party AI agent, United recommends changing the password immediately |
| Travel agencies | Agencies and booking platforms cannot use third-party AI agents to search for, book, or manage United travel on direct or indirect channels without United’s permission |
FAQ
Is United banning all AI, or banning AI for the holidays?
No. United says it is restricting access for unauthorized third-party AI agents and assistants. Customers can still use AI for general planning and inspiration if the tool does not access united.com or the United app. The announcement is dated November 11, 2026, and is not framed as a holiday ban.
Can I still use AI to research a trip?
Yes, according to United, as long as the tool does not access united.com or the United app. The airline says there are AI tools to help inspire a trip, including ones it has built, and that if you use AI to generate speech or text you should review it and search it yourself on united.com or the United mobile app. Do not provide sensitive or private data.
How do I know if a tool is an unauthorized AI agent?
United’s test is practical: if a third-party AI agent, bot, browser extension, or browser feature searches, books, buys, manages, or collects information on united.com or the United app for you, and United has not given permission, it is unauthorized. Assistive technology for customers with disabilities is not affected.
Has United authorized any third-party AI agents?
Not yet. The Digital Trust Center FAQ says United does not currently work with any third-party AI agents, and that the page will be updated if that changes. Giving a tool permission on your side does not mean United will permit it to transact with United.
Will United cancel a booking a third-party AI agent already made?
United says agent bookings made prior to November 11, 2026, will not be canceled. It recommends that you review recent travel plans to make sure they have been booked and ticketed correctly.
What if a third-party AI agent checks me in?
United says using a third-party AI agent to check you into a flight automatically could result in you missing important safety content. It argues that these automated actions have the potential to violate FAA and DOT regulations, and gives the example that flight check-in requires human acknowledgment that bags do not contain banned substances such as explosives.
What should I do if I already shared my MileagePlus login?
United recommends that you change your password immediately. If you suspect unauthorized access to your MileagePlus account, or an unauthorized purchase or use of miles, it says to take steps to secure your account immediately.
Does this apply to travel agencies?
Yes. United says it is restricting access indirectly via travel agencies and aggregators, not only on united.com and the United app. Travel agencies and booking platforms cannot use third-party AI agents to search for, book, or manage United travel for their customers on direct or indirect channels. Agencies can use their own third-party AI tools only with United’s permission.
Leave a Reply
You must be logged in to post a comment.