How to Set Up Two-Factor Authentication (2FA) on Your Holidu Account

To keep your account and data secure, Holidu uses Two-Factor Authentication (2FA) for all hosts that do not use social logins (where 2FA is also offered, for example by Gmail). This extra layer of security protects your account even if someone else knows your password. 2FA is mandatory for all hosts with published properties.

What is 2FA?

Two-Factor Authentication requires two things to log in:

1. First factor: Your email and password
2. Second factor: A one-time verification code, sent via one of the following methods:
   • SMS
   • Email
   • Authenticator app (e.g., Google Authenticator, Authy)

You can set up multiple methods for backup access. However, you can only use one instance of each method. For example, only one phone number or one authenticator app can be registered at a time.

Where to Set Up 2FA

1. Log in to your Holidu Host Account. You may be prompted to set up 2FA immediately after login. If not, continue to step 2.
2. Go to: Profile Picture Menu, and then Security
3. Click Configure next to the authentication method(s) you want to activate.

Choose Your 2FA Method

Method 1: SMS (Mobile Phone)

SMS is the fastest and easiest method to set up. A one-time code will be sent to your phone via text message each time you log in.

1. Select SMS from the list.

1. Enter the phone number you want to use and click Get SMS Code.

1. Enter the 6-digit code you receive and click Verify.

1. You will see a confirmation message once the setup is complete. Congratulations, your account and your data are now secured!

Method 2: Email

Email verification sends a one-time code to your registered email address each time you log in. This method is reliable and works as long as you have access to your email.

1. Select Email from the list of authentication methods.
2. Confirm the email address associated with your Holidu account.
3. Click Get Email Code to send a verification code to your email.
4. Check your email inbox and enter the 6-digit code in the verification field.
5. Click Verify to confirm the setup.
6. You will see a confirmation message once the setup is complete. Your account is now secured with email-based 2FA!

Method 3: Authenticator App – Recommended

An authenticator app is a small program you install on your smartphone or tablet. It generates a new 6-digit security code every 30 seconds that only you can see. Unlike text messages or emails, the app works even without internet or mobile signal, because the codes are created directly on your device.

1. Download an app like Google Authenticator (Android | Apple) or Authy (Android | Apple).
2. Select Authenticator App from the list.

1. Scan the QR code displayed on your screen (or use a manual code if scanning does not work).

1. Enter the 6-digit code generated by the app, give the device a name (e.g., "My mobile phone"), and click Submit.
2. You will see a confirmation message once setup is complete. Congratulations, your account and your data are now secured!
3. Authenticator apps generate codes locally, so they work without internet or mobile signal.

After Setup

From now on, logging in requires:

1. Entering your password
2. Entering the 6-digit code from your chosen 2FA method

You can manage your 2FA settings at any time via the Security section in your Holidu Host Account.

Tips for Success

• We recommend starting with SMS, as it is the fastest and easiest method.
• Enable at least two different methods in case you lose access to one.
• Remember: Only one instance of each method can be used (one phone number, one authenticator app, one email address).
• Store your backup codes in a safe place if provided by Holidu.
• Keep your phone and email contact information up to date to ensure you always receive verification codes.
• Test your 2FA setup immediately after configuration to ensure it works correctly.

Frequently Asked Questions (FAQ)

Why do I need to set up 2FA?

To protect your account from unauthorized access, especially if your password is ever compromised. 2FA adds an essential security layer that makes it significantly harder for anyone to access your account without your permission.

I do not see an option to set up 2FA in my account

Two-Factor Authentication is only available if you use a combination of email and password to log in. If you are using a login method like Facebook or Google, you are already secure, since these providers also offer Two-Factor Authentication through their own systems.

What if I lose access to my phone or email?

You can use a backup method or contact Holidu support to recover access. We recommend setting up a secondary verification method to avoid any incidents. Having multiple 2FA methods enabled ensures you can always access your account.

Can I skip setting up 2FA?

Only temporarily. It becomes mandatory once you publish a property on Holidu.

How long does setup take?

Less than a minute in most cases. The process is straightforward and quick for all three methods.

Can I use more than one method?

Yes! You can activate more than one method for backup. This is highly recommended to ensure you always have an alternative way to access your account.

What if I do not receive the code?

Check signal strength (SMS), or time sync on your device (authenticator app). Still no luck? Contact Holidu support to get help. Make sure your contact information is current and check your spam folder for email codes.

Do collaborators need to activate 2FA too?

Yes, if they have access to published properties. This ensures the same level of security across all accounts managing your listings.

Can I change my 2FA method later?

Yes, go to Profile Picture Menu > Security to update, remove, or add new 2FA methods at any time.

Which 2FA method is most secure?

All three methods (SMS, Email, and Authenticator App) are secure. However, authenticator apps are considered the most secure option because they generate codes locally on your device and do not rely on network connectivity. SMS and Email are convenient alternatives if you prefer receiving codes to your phone or email.

Are there backup codes available?

Contact Holidu support if you need backup codes or recovery options. Having backup methods set up is your best insurance against losing access to your account.