Securing your account

During the registration process on our platform, you must set up two-factor authentication (2FA) to give your account an extra layer of protection. With 2FA activated, you'll log in using your username and password. In addition, we'll send a PIN code to your authenticated device. We'll never ask you to give us any log-in info. 

In this article:

Maliciously accessed or breached account

Contact us within 24 hours if one or more of the following scenarios happens:

• You gave your log-in details and 2FA PIN to an unauthorized user
• Someone you think is pretending to be a Booking.com employee asked for your log-in details
• You received messages or calls to make changes to your account

Follow these steps if you have reason to believe someone has already accessed your account maliciously:

1. Reset your Booking.com password by going to the Extranet and clicking Forgot your password?
2. Check if any of your info on the Extranet has changed
3. Report a security issue within 24 hours

Securing your Pulse account

Follow these steps to set up one or more security methods for the Pulse app:

1. Log in to the Pulse app on your iPhone or iPad
2. Tap More, then Settings
3. Tap Face ID & passcode
4. Tap Enable passcode, Enable Touch ID, or Enable Face ID to set up your preferred security method
5. Follow the steps to finalize

Follow these steps to change your Pulse app passcode on iOS devices:

1. Log in to the Pulse app on your iPhone or iPad
2. Tap More, then Settings
3. Tap Face ID & passcode
4. Tap Change passcode
5. Follow the steps to finalize

Setting up two-factor authentication

Follow these steps to set up two-factor authentication for your account:

1. Log in to your account – you may be directed to the verification page to verify your log-in information
2. Select a working phone number or a Pulse verification code
3. Under Two-Factor Authentication, enter the one-time verification code you received via SMS
4. Click Verify now

Once you log in and verify your information on a specific device, you won't need to verify it again unless you switch to a different web browser or device.

The phone number you select must be able to connect directly to you or someone in your team. If there's a phone tree or robotic answering system, it won't work.