Managing Your MFA Methods From Your Profile

Mariia Korostashevych

Updated August 11, 2026 12:46

Purpose	View, add, and remove your multi-factor authentication methods from your Cloudbeds profile.
Best for	Cloudbeds PMS users managing their own sign-in security methods.
Use this when	You want to add a verification method, remove one method, identify enrolled devices, or understand when an administrator must help.
Requirements	An existing verification method to confirm security-sensitive changes.
Expected result	Your profile shows the verification methods you want to keep and sends an email confirming each addition or removal.
Limitations	You cannot remove your last verification method or perform a full multi-factor authentication reset yourself. The Sign-in & security section is not visible to super admin users.

Introduction

The Sign-in & security section in your Cloudbeds profile lets you manage most multi-factor authentication methods without an administrator reset. You can identify enrolled methods by device label, add another method, or remove one method while keeping the rest of your sign-in options available.

A full reset still requires an authorized property user because it removes all enrolled methods at once. Use the workflows in this article to make self-service changes or determine when to request administrator assistance.

Open Sign-in & security
Manage your verification methods
Request a full multi-factor authentication reset
Respond to security notifications
Frequently asked questions

Who this affects and how

Role	What to know
Front desk	Front desk users can add or remove their own verification methods. Add a backup method before replacing or retiring a device so access is not dependent on one device.
Night audit	Night auditors can use the same self-service workflows. Review enrolled methods before an overnight shift when losing account access would be difficult to escalate immediately.
Manager/GM	Managers can manage their own methods and should understand the distinction between individual self-service changes and a full administrator reset.
Admin	An admin with user-management permissions may need to reset all methods when a user has lost access to every enrolled device. Admins cannot view the user’s individual method details.
Owner	Property Owners may perform or authorize a full multi-factor authentication reset. The full reset remains separate from the user’s self-service profile workflows.

Use your Cloudbeds profile to view all verification methods currently enrolled on your account. Each method includes a device label, such as a device name or masked phone number, so you can distinguish multiple methods of the same type.

Sign in to Cloudbeds PMS.
Select the Account icon in the top-right corner.
Select My Profile.
Go to Sign-in & security.

Super admin limitation: The Sign-in & security section is not visible to super admin users.

Manage your verification methods

These actions are protected by step-up authentication — a security control that requires you to have been logged in for at least 10 minutes and to verify with an existing MFA method before any change is saved. This applies to both adding and removing methods. If options appear greyed out immediately after logging in, wait a few minutes and refresh.

Add a verification method

Add passkeys, security keys, phone verification, or other supported methods. You can register multiple passkeys or security keys, including methods on different devices.

From Cloudbeds PMS, select the Account icon, and go to My Profile -> Sign-in & security.
Go to Two-factor authentication -> Manage methods
Click +Set up to Add a verification method.
Verify your identity with an existing method when prompted.
Choose the method you want to add, and follow the prompts.

Verification requirement: Confirming with an existing method prevents someone with access to an open session from silently adding another device. All Cloudbeds users have email verification by default, so at least one method is available for confirmation.

Remove one verification method

Remove an individual method without changing your other enrolled methods. At least one verification method must remain on the account.

From Cloudbeds PMS, select the Account icon, and go to My Profile > Sign-in & security.
Go to Two-factor authentication -> Manage methods and find the method you want to remove.
Select Remove next to the method.
Verify your identity with an existing method when prompted.

Keep one method enrolled: You cannot remove your last remaining verification method.

Switch phone verification between SMS and WhatsApp

If Phone (SMS) verification is enrolled, you can switch code delivery between SMS and WhatsApp from Sign-in & security. Refer to Receiving MFA verification codes via WhatsApp for the complete workflow.

Request a full multi-factor authentication reset

A full reset removes every verification method at once and remains administrator-only. This restriction prevents someone who gains access to your account from removing every method and locking you out.

If you lose access to all enrolled devices, ask your property owner or a staff member with user-management permissions to complete the reset from Account-> Settings-> Users-> three-dot menu next to your name -> Reset MFA Status. Refer to Reset multi-factor authentication for the administrator workflow.

Respond to security notifications

Cloudbeds emails you whenever a verification method is added to or removed from your account. Review each notification promptly so you can identify an unauthorized change.

Did not make the change? Change your Cloudbeds password immediately, and contact Cloudbeds Support. Refer to Suspected phishing or compromised account: Emergency plan for the emergency response process.

Frequently asked questions

Review these answers for common questions about availability, accidental removal, and administrator visibility.

Can I add a method if I have only one factor enrolled?

Yes. All users have email verification by default, even when it does not appear in the list as a method you enrolled yourself. You can use email verification to confirm your identity when adding a new method.

Security-sensitive actions in Sign-in & security are blocked for the first 10 minutes after sign-in. Wait until 10 minutes have passed, and refresh the page.

Can I undo an accidental removal?

No. Go to Add a verification method, and enroll the same method again.

Can my administrator see my enrolled methods?

No. Administrators cannot see the contents of your Sign-in & security section or view individual method details. An authorized administrator can reset your multi-factor authentication status from the Users list.

Now that you understand which verification methods you can manage yourself, review these resources for administrator resets, WhatsApp delivery, passkeys, and account-recovery guidance: