Holiday Villas
← What's new
How it works · 12 November 2026

Sign in to Holidu securely and easily with passkeys – no password needed

A passkey keeps your Holidu account safe and lets you in with the same face, fingerprint or PIN that unlocks your phone.
“123456” is once again the world’s most common password, according to NordPass’s 2025 list. It has topped their chart in six of the last seven years. A password so common protects very little, and behind it sits everything in your account: your bookings, your guests’ details and your payouts.
A strong password matched with a second authentication factor (like a code sent via SMS) already protects you. A passkey is even better: it’s harder to steal and quicker to use, and setting one up takes only a few minutes.

How a passkey keeps your account safe

A password is just a string of characters, and anyone who learns it can use it: by guessing it, by stealing it from another website, or by catching it on a fake page that looks like ours.
A passkey works like a key cut for one door. It stays with you, on your devices or in your password manager, and Holidu only ever gets the lock. Before using the key, your device checks the web address, so on a fake page it never offers it.
A passkey also replaces the password and the code in one step: it lives on your device and opens only with your face, fingerprint or device PIN.
Passkeys are optional: your password, your codes and signing in with Google, Apple, Facebook or Microsoft all keep working.

How to set up a passkey

The next time you sign in with your password, Holidu may ask you to “Make your next sign-in easier”. Choose “Set up a passkey”, confirm with your face, fingerprint or PIN, and you’re done. If you pick “Skip for now”, you’ll see the offer again on a later sign-in.
You don’t have to wait for it. In your Holidu account, select the passkey card on your Home screen or go to More → Security and open Passkeys. Select “Set up a passkey” and confirm as before.
Your device may ask where to save the passkey. Choose a place that goes with you to every phone and computer you use for Holidu:
  • All Apple or all Google? Save it to iCloud Keychain or Google Password Manager. It then usually shows up on your other devices with the same account.
  • Different brands, like an Android phone and a Windows laptop? Save it in your password manager, such as 1Password or Bitwarden, if you use one. Otherwise, add a passkey on each device with “Add new passkey”.
Your new passkey appears in the list, and you can remove it there at any time. It works in the Holidu Host App too.

Why Holidu asks for a code when you sign in with a password

If someone finds out your password, the code is what still stops them. That’s why, if you sign in with your email and password, two-factor authentication is required once you have a published property, for collaborators too. If you sign in with Google, Apple, Facebook or Microsoft, Holidu doesn’t ask you for a code.
You can get the code in two ways:
By SMS. Your verified phone number receives the code automatically.
From an authenticator app. An app such as Google Authenticator creates the code on your phone. Of the two code methods, it’s the one marked “Most secure”.
With both set up, the other method still gets you in if your phone has no signal or you change your number.
On your own computer or phone, you can also tick “Trust this device for 30 days” on the code screen. That device then skips the code for 30 days, but still asks for your password. Never tick it on a shared or public computer.

What to do if you lose your phone or can’t sign in

If you lose the device with your passkey, sign in on another device with your password and code, or with the account you normally use, such as Google, then remove the old passkey from your list and set up a new one.
If your device was stolen, do the same, then change your password. This also removes every device you trusted, so the code is needed again everywhere. If you sign in with Google, Apple, Facebook or Microsoft, change the password of that account instead.
If that phone also gets your SMS codes, use your other code method.
If none of this works, follow the steps in How can I contact Customer Service? To protect your account, the team checks if that’s really you before restoring access.

Frequently asked questions

Does Holidu see my fingerprint or face?

My phone has no fingerprint or face recognition. Can I still use a passkey?

I got a sign-in code I didn’t ask for. What should I do?

Your setup in three steps

1. Check your phone number. More → Account details: if it says “Not verified”, select “Verify”.
2. Add the authenticator app if you sign in with email and password: More → Security → 2-Factor Authentication → Authenticator App.
3. Add your passkey on the phone or computer you use most: More → Security → Passkeys.
Open your security settings
New to Holidu? There’s no subscription: you only pay when you earn.
New

Your Home screen now starts with what needs you today

Tomorrow’s check-in, a guest still waiting for a reply, last night’s booking: your Home screen lists them in order of what needs you first, and you can act on each one without leaving the page.
Tips

How to get better guest reviews, even from unhappy guests

What you do when something doesn’t go as expected often determines the review. Here’s what nearly 2,000 guest reviews show about what guests praise and complain about, and how to reply to a critical one.
Tips

Phone number missing on Booking.com or Airbnb? How to reach your guests

Booking.com no longer shares guest phone numbers, and Airbnb stops on 13 November 2026. Here’s what that means for your bookings, and what to do before your next guest arrives.