If you've detected suspicious activity in your Hostaway account, you'll need to take immediate action to secure it and prevent unauthorized access.
Suspicious activity may include unauthorized guest messages sent from your account, notifications about login attempts from unknown devices or locations, or receiving authentication codes or password reset emails you did not request.
Follow the steps below to safeguard your account:
Immediate Steps After Detection of Suspicious Activity
- Reset Your Password - Use the password reset link sent to your registered email address by Hostaway.- Avoid reusing old passwords and always create a strong, unique password. Password managers like 1Password can help generate and store secure credentials.
- Enable Two-Factor Authentication (2FA) - Add an extra layer of security by enabling 2FA on your Hostaway account and other linked accounts. Set-up guides for Hostaway, Airbnb, Vrbo, and Booking.com are available.
If you are unable to log in after resetting your password, try using the same device and browser to click the verification link sent to your email. Clear your browser's cache and cookies, avoid using VPNs, and use the "Forgot your password?" link if necessary.
Review and Evaluate Account Activity
- Review Guest Messages - Check messages sent from your account within the past 24 hours to ensure there are no unauthorized communications. Report anything suspicious to Hostaway Support immediately.
- Inspect API Connections - Navigate to Settings > Hostaway APIs to review and verify all API connections linked to your account.
Securing Additional Accounts and Services
- Evaluate Other Linked Accounts - Consider other accounts or services where the same login credentials may have been used, and update those passwords immediately to minimize risk of unauthorized access.
- General Security Practices - Avoid sharing sensitive personal details in communication.- Always verify email senders and avoid clicking on suspicious links.
Understanding Hostaway’s Action Steps
If your account was flagged for suspicious activity, you may notice all passwords under your account were reset as a precaution. This is a standard safety measure undertaken to secure user data when risks, such as suspicious login patterns or phishing attempts, are detected. Hostaway continually monitors for unusual activities but has no evidence of infrastructure breaches.
If you suspect your account has been compromised or notice any unusual activity, report it to Hostaway Support for further assistance. Provide your account ID if necessary to expedite the resolution process.
By following these steps, you can secure your Hostaway account and minimize the risk of unauthorized intrusions. If you encounter issues or notice additional suspicious activity, contact Hostaway Support for assistance.