To keep your Holidu host account and guest data secure, you can turn on Two-Factor Authentication (2FA). You set it up in your account's Security section by adding a phone number for SMS codes or by connecting an authenticator app. 2FA is mandatory for all hosts with published properties.

What is 2FA?

Two-Factor Authentication (2FA) adds a second layer of protection to your login. It protects your account even if someone else learns your password.

With 2FA turned on, logging in requires two things:

1. First factor: Your email address and password
2. Second factor: A one-time 6-digit verification code, sent through one of the following methods:
   1. SMS to your mobile phone
   2. An authenticator app, such as Google Authenticator or Authy

You can set up more than one method for backup access. However, each method can only be registered once. For example, you can register one phone number and one authenticator app.

Note: If you log in with Facebook or Google, you already benefit from two-factor protection offered by those providers. In that case, you will not see a 2FA setup option in your Holidu account.

Where to Set Up 2FA

1. Log in to your Holidu Host Account. You may be prompted to set up 2FA right after you log in. If not, continue to step 2.
2. Open the Profile Picture Menu and select Security.
3. Click Configure next to the authentication method you want to activate.

Choose Your 2FA Method

You can choose between SMS and an authenticator app. Follow the steps for the method you prefer below.

Method 1: SMS (Mobile Phone)

SMS is the fastest and easiest way to set up 2FA.

1. Select SMS from the list of authentication methods.

1. Enter the phone number you want to use and click Get SMS Code.

1. Enter the 6-digit code you receive by text message and click Verify.

1. You will see a confirmation message when the setup is complete. Your account and your data are now secured.

Method 2: Email

Email is not offered as a separate second-factor method for 2FA. Your email address is already the first factor you use to log in, so it cannot also serve as the verification code channel. To add a second verification step, use SMS or an authenticator app as described in this guide.

Method 3: Authenticator App (Recommended)

An authenticator app is a small program on your smartphone or tablet. It generates a new 6-digit security code every 30 seconds, and only you can see it. Because the codes are created directly on your device, the app works even without an internet connection or mobile signal.

1. Download an authenticator app, such as:
   • Google Authenticator (Android | Apple)
   • Authy (Android | Apple)
2. Select Authenticator App from the list of authentication methods.

1. Scan the QR code shown on your screen with your authenticator app. If scanning does not work, enter the manual code instead.

1. Enter the 6-digit code shown in your authenticator app, give the device a name (for example, "My mobile phone"), and click Submit.
2. You will see a confirmation message when the setup is complete. Your account and your data are now secured.</