While Cloudbeds leads with modern security methods like Passkeys and Social Logins, we understand that some operational environments still require traditional verification methods.
Continued Support for SMS and Email
Cloudbeds continues to support SMS and Email MFA for properties that require them. To ensure these codes are delivered safely and meet global security standards, they are processed through a specialized, secure third-party provider managed by Cloudbeds.
Important Considerations for Admins
- Additional Cost: Because of the third-party infrastructure required to send secure SMS and Email codes globally, an additional service fee applies to the property for using these methods.
- Security Level: SMS and Email are considered "legacy" security. They are more vulnerable to "SIM swapping" or email hacking compared to Passkeys or Authenticator Apps.
- Recommendation: We suggest leading with no-cost, high-security options first (Apple/Google Login, Passkeys, or Authenticator Apps). SMS should be viewed as a fallback option.
When to use SMS/Email MFA
This method may still be appropriate if:
- Staff have no access to smartphones or hardware security keys.
- Your property is in a short-term transition period while migrating to stronger methods.
- Device sharing is common, and alternative methods are not yet practical for your workflow.
Users can switch from SMS/Email to a more secure, free method at any time by resetting their MFA in their profile settings.
Comments
Please sign in to leave a comment.