Before you start
Manage multi-factor authentication (MFA) settings via your profile (user) icon (top right) > select My account > click Set up MFA/Reset MFA
Overview
Multi-factor authentication (MFA) adds an extra layer of security that helps to prevent unauthorised access and protect sensitive guest and property data. When logging into your account, after entering your e-mail address and password, you'll need to authenticate with a one-time password to complete your login.
Setting up MFA is mandatory within 30 days of your first login. You'll need to authenticate with MFA:
Every 30 days, or when switching browsers, devices, or clearing cookies
When accessing sensitive details such as guest contact and payment details
When performing sensitive actions such as accessing guest contact and credit card details, setting up a payment gateway, creating or editing users, or modifying Direct Booking reservations
Each person must have their own Little Hotelier user account with a unique e-mail address. Each user has their own MFA codes - you must authenticate using the device where MFA was set up.
Supported MFA methods
You can only use one authentication method at a time but can reset it whenever needed.
You can authenticate using one of the following methods:
Little Hotelier mobile app (recommended): When you log in, a number appears on your screen. Open the Little Hotelier mobile app, confirm (select) the matching number, and complete face or fingerprint recognition. Biometric login must be enabled on your device to use this method.
Authenticator app: A third-party app such as Authy, Google Authenticator, or Microsoft Authenticator generates a 6-digit one-time code. Enter the 6-digit code generated by the third-party app to authenticate and log in.
Web browser authenticator: A browser extension, for example Authenticator or 2! Authenticator, generates a 6-digit one-time code directly in your browser. Available in Google Chrome, Microsoft Edge, and Mozilla Firefox. Not currently available in Safari.
Note: Phone, SMS, and email are not supported for MFA.
Setting up MFA
Each staff member needs their own user account to access Little Hotelier and complete MFA on their personal device.
Authentication methods
Option 1: Little Hotelier mobile app (recommended)
Note: MFA with the Little Hotelier mobile app requires biometric login (face or fingerprint recognition) enabled on your device.
Download the Little Hotelier app from the App Store or Google Play using the QR code below
Log in to your Little Hotelier account
Click Secure my account with the Little Hotelier app when prompted for MFA setup
Follow the on-screen instructions and log in to the mobile app
In your Little Hotelier mobile app, click on Use this device for MFA
Click Enable now to enable/allow access to biometric login (facial or fingerprint recognition)
Once you have enabled biometric login, you will see a confirmation in the Little Hotelier app. Tap Close, then select the matching number shown on your browser screen to complete your first login.
Option 2: Alternative authentication apps
Supported apps include:
Authy
Google Authenticator
Microsoft Authenticator
Setup steps
Log in to your Little Hotelier account
Select Alternate authentication options when prompted
Click Next. A QR code will now appear on your screen.
Open your authenticator app (e.g., Authy, Google Authenticator). Set up your account in the app if this is your first time using it.
Add Little Hotelier to your authentication app. Point your device's camera at the QR code displayed on your Little Hotelier login screen, or look for a "+" or "Add account" button in your authenticator app to add the code manually
Enter the code from your chosen authenticator app to complete setup
Option 3: Web browser authenticator
You can use a browser extension authenticator for MFA instead of a mobile app. This works in Google Chrome, Microsoft Edge, and Mozilla Firefox. It is not currently available in Safari.
On the MFA setup screen in Little Hotelier, select Alternate authentication options
Install an authenticator extension, depending on your browser (Chrome, Edge, Firefox), for example install Authenticator from the Chrome web store.
In your browser, click the extensions icon, then pin the authenticator extension.
In your browser, click find the authenticator extension, then click the pencil (edit) icon.
Click the plus (+) button to create a new account - you will be given the options to scan QR code, or enter the code manually.
On the Little Hotelier login screen, click Having problems scanning? Manually enter the code.
Copy the code displayed on the screen.
Paste this code into the authenticator extension, then click Next.
Copy the one-time code generated by the extension and paste it into the login page to complete setup.
Note:
Use the browser where you installed the authenticator extension. The extension won't be accessible in incognito or private browsing mode
For better security, before setting up MFA using a web browser authenticator, make sure you have antivirus software installed and that it’s kept up to date
If you need to switch the browser extension authenticator you are using, you will need to reset MFA
Reset MFA
Common scenarios for MFA reset
You may need to reset your MFA when:
You want to change how you receive your one-time code/change your authentication app
You are replacing your current device with a new one
Access to your phone or device has been lost
You have deleted your authenticator app
Your phone has been restored to its factory settings
Reset your MFA yourself
If you can still log into your account and have access to your current MFA method:
Navigate to User icon > My account
Click Update next to multi-factor authentication
Complete one final verification with your current MFA method, then follow the on-screen steps to set up your new MFA method
Ask another user to reset MFA for you
If you cannot log in or you've lost access to your MFA method:
Ask a user at your property with User Management/Manage users access to help you reset your MFA.
Once they have reset your MFA, the next time you log in, you’ll be prompted to set up a new MFA method
If no one else at your property has access to manage users (or if those users are unavailable), contact our support team to reset your MFA.