How to Set Up Two-Factor Authentication (2FA) on Your Holidu Account

To keep your account and data secure, Holidu uses Two-Factor Authentication (2FA) for all hosts that do not use social logins. This extra layer of security protects your account even if someone else knows your password. 2FA is mandatory for all hosts with published properties.

What is 2FA?

Two-Factor Authentication requires two things to log in:

1. First factor: Your email and password
2. Second factor: A one-time verification code, sent via one of the following methods:
   • SMS
   • Email
   • Authenticator app (e.g., Google Authenticator, Authy)

You can set up multiple methods for backup access. However, you can only use one instance of each method. For example, only one phone number or one authenticator app can be registered at a time.

Where to Set Up 2FA

1. Log in to your Holidu Host Account. You may be prompted to set up 2FA immediately after login. If not, continue to step 2.
2. Go to: Profile Picture Menu, then Security
3. Click Configure next to the authentication method(s) you want to activate.

Choose Your 2FA Method

Method 1: SMS (Mobile Phone)

SMS is the fastest and easiest method to get started with 2FA.

1. Select SMS from the list.

1. Enter the phone number you want to use and click Get SMS Code.

1. Enter the 6-digit code you receive and click Verify.

1. You'll see a confirmation message once the setup is complete. Congratulations, your account and your data are now secured!

Method 2: Email

Email verification is a convenient option if you prefer to receive codes via your registered email address.

1. Select Email from the authentication method list.
2. Confirm the email address where you want to receive verification codes.
3. Click Send Code to receive a 6-digit code in your inbox.
4. Enter the 6-digit code from your email and click Verify.
5. Once confirmed, your email-based 2FA is active. Your account is now secured!

Method 3: Authenticator App – Recommended

An authenticator app is a small program you install on your smartphone or tablet. It generates a new 6-digit security code every 30 seconds that only you can see. Unlike text messages or emails, the app works even without internet or mobile signal, because the codes are created directly on your device.

1. Download an app like Google Authenticator (Android | Apple) or Authy (Android | Apple).
2. Select Authenticator App from the list.

1. Scan the QR code displayed on your screen (or use a manual code if scanning doesn't work).

1. Enter the 6-digit code generated by the app, give the device a name (e.g., "My mobile phone"), and click Submit.
2. You'll see a confirmation message once setup is complete. Congratulations, your account and your data are now secured!
3. Authenticator apps generate codes locally, so they work without internet or mobile signal.

After Setup

From now on, logging in requires:

1. Entering your password
2. Entering the 6-digit code from your chosen 2FA method

You can manage your 2FA settings at any time via the Security section in your Holidu Account.

Tips for Success

• We recommend starting with SMS, as it's the fastest and easiest method.
• Enable at least two different methods in case you lose access to one.
• Remember: Only one instance of each method can be used (one phone number, one authenticator app).
• Store your backup codes in a safe place if your authenticator app provides them.
• Ensure your device time is synchronized correctly if using an authenticator app.

Frequently Asked Questions (FAQ)

Why do I need to set up 2FA?

Two-Factor Authentication protects your account from unauthorized access, especially if your password is ever compromised. With 2FA enabled, even if someone obtains your password, they cannot log in without the second verification code.

I do not see an option to set up 2FA in my account. Why?

Two-Factor Authentication is only available if you use a combination of email and password to login. If you are using a login method like Facebook or Google, you are already secure, since they also offer Two-Factor Authentication through their platforms.

What if I lose access to my phone or email?

You can use a backup method or contact Holidu support to recover access. We recommend setting up a secondary verification method to avoid any incidents. If you have multiple 2FA methods enabled, you can use whichever one is still accessible.

Can I skip setting up 2FA?

Only temporarily. Two-Factor Authentication becomes mandatory once you publish a property on Holidu.

How long does setup take?

Less than a minute in most cases. Each method requires only a few quick steps to verify and activate.

Can I use more than one method?

Yes! You can activate more than one method for backup. This ensures you always have access to your account, even if one method becomes unavailable.

What if I don't receive the code?

For SMS: Check your signal strength and ensure your phone number is correct. For email: Check your spam or junk folder. For authenticator app: Ensure your device time is synchronized correctly. If you still don't receive a code, contact Holidu support for assistance.

Do collaborators need to activate 2FA too?

Yes, if they have access to published properties. All users with management rights to active listings must have 2FA enabled for security purposes.

Can I change my 2FA method later?

Yes, you can update or remove methods at any time. Go to your Profile Picture Menu, select Security, and choose Configure next to any method you want to modify or disable.

Is the authenticator app method more secure than SMS?

Both methods are secure, but authenticator apps have certain advantages. They generate codes locally on your device, so they work without internet or mobile signal, and codes are not transmitted through SMS networks. However, SMS is more convenient for most users and is perfectly adequate for account security.

What happens if I uninstall my authenticator app without backing it up first?

If you lose access to your authenticator app without a backup, you won't be able to generate the required codes. Use your backup 2FA method (SMS or email) to log in, then reconfigure your authenticator app. Contact Holidu support if you need additional assistance.