If you've detected suspicious activity in your Hostaway account, you'll need immediate action to secure your account and prevent unauthorized access. Follow the steps below to safeguard your account:
Immediate Steps After Detection of Suspicious Activity
- Reset Your Password - Use the password reset link sent to your registered email address by Hostaway.- Avoid reusing old passwords and always create a strong, unique password. Password managers like 1Password can help generate and store secure credentials.
- Enable Two-Factor Authentication (2FA) - Add an extra layer of security by enabling 2FA on your Hostaway account and other linked accounts. Set-up guides for Hostaway, Airbnb, Vrbo, and Booking.com are available.
Review and Evaluate Account Activity
- Review Guest Messages - Check messages sent from your account within the past 24 hours to ensure there are no unauthorized communications. Report anything suspicious to Hostaway Support immediately.
- Inspect API Connections - Navigate to Settings > Hostaway APIs to review and verify all API connections linked to your account.
Securing Additional Accounts and Services
- Evaluate Other Linked Accounts - Consider other accounts or services where the same login credentials may have been used, and update those passwords immediately to minimize risk of unauthorized access.
- General Security Practices - Avoid sharing sensitive personal details in communication.- Always verify email senders and avoid clicking on suspicious links.
Understanding Hostaway’s Action Steps
If your account was flagged for suspicious activity, you may notice all passwords under your account were reset as a precaution. This is a standard safety measure undertaken to secure user data when risks, such as suspicious login patterns or phishing attempts, are detected. Hostaway continually monitors for unusual activities but has no evidence of infrastructure breaches.
By following these steps, you can secure your Hostaway account and minimize the risk of unauthorized intrusions. If you encounter issues or notice additional suspicious activity, contact Hostaway Support for assistance.