Your reference and the email you booked with. No password, no account.
Both must match the booking. We do this so a reference on its own never exposes anyone's address.