Security Controls for Credit Card Passwords and 2 Factor Authentication

Follow

This article describes the security controls that Cloudbeds has put in place to protect your guest's credit card data, as well as the 2 Factor Authentication system we have added to protect your myallocator account.

New security controls to View Credit Card Data

Going forward, additional security requirements have been put in place when viewing credit card data from within the myallocator platform.

Note: The security controls mentioned here do not apply if you use a PMS to view credit card information.  This only applies if you are logging into myallocator directly to view/access credit card data.

To see credit card data on the bookings page in myallocator, the following steps must be performed:

1. Setup the new Security controls by requesting to view credit card data on a booking

To begin the process of setting up the new security controls, please begin by accessing a booking and attempting to view the credit card data on that booking.

  1. Click on the booking in question to open it
  2. Click "SHOW CREDIT CARD DATA" on the booking/reservation.
  3. Click NEXT on the information pop-up
  4. Place a check next to "I confirm that I would like to reset my credit card password".
  5. Click "RESET NOW"
  6. Please check your emails to proceed with the reset.

2. Reset the Credit Card Viewing Password

You will receive an email as shown below.  Please follow these steps to set a new credit card viewing password.

  1. Open the email and click "PROCEED WITH CREDIT CARD PASSWORD RESET"
  2. Enter a new password
  3. Confirm the new password
  4. Click "SET NEW PASSWORD"
  5. Wait until you receive the email stating "your new credit card password is ready to use!"

3. Setup 2 Factor Authentication

Note: Setting up 2 Factor Authentication is REQUIRED in order to view Credit Card Details within the myallocator system. There are no exceptions to this requirement.

  1. Click on the booking in question to open it
  2. Click "SHOW CREDIT CARD DATA" on the booking/reservation.
  3. Click NEXT on the information pop-up to setup 2 Factor Authentication
  4. Click Setup two-factor authentication
  5. Choose a Method (Phone Number, or Authenticator App)
3.1. Using a Phone Number
  1. Select Phone Number (text message and voice call) option
  2. Select your Country Code
  3. Enter your Phone Number
  4. Choose the method
  5. Click PROCEED
  6. Enter the code you receive
  7. Click PROCEED
  8. Process is Complete
3.2. Using an Authenticator App (Authy, Google Authenticator, etc).
  1. Select the Authenticator App option
  2. Scan the QR Code using your Authenticator App, or enter the code manually if you cannot scan the code.
  3. Enter the code provided by your Authenticator App
  4. Click PROCEED
  5. Process is complete

4. You are now ready to View the Credit Card Details

  1. Open the booking in question
  2. Click "SHOW CREDIT CARD DATA"
  3. Enter your newly updated Credit Card password
  4. Click SHOW
  5. Credit Card Details are now viewable.

Frequently Asked Questions

Why has 2 Factor Authentication been added to myallocator?

Answer:

The hospitality industry has been increasingly under attack by bad actors that want to take control over and access personal information.  These attacks have become more and more intelligent and targeted, which has resulted in the personal data breach of many individuals.  In order to maintain the security of your guest data and of your account, 2 Factor Authentication has been added and is required.

2 Factor Authentication is not convenient for me or my business. Can it be disabled?

Answer:

2 Factor Authentication is a hard requirement for any users that wish to view credit card data within myallocator.  There are no exceptions to this requirement if you wish to view credit card data within our system.

Currently, you don't have to enable 2 Factor Authentication unless you view credit card data.

Do I have to authenticate with 2 Factor each time I login?

Answer:

Once authenticated, the device will be trusted for 30 days. You only need to authenticate with 2 Factor if you wish to view credit card data.

Can I have more than one phone number authenticated for my account?

Answer:  

2 Factor Authentication is performed at the user account level.  If you have multiple people using myallocator, we highly recommend each person have their own username/account created in myallocator.  That way, each person can have their own 2 Factor number setup.  

To setup new user accounts in your myallocator profile, please follow these instructions.  How to add and manage myallocator users

Have more questions? Contact Support

Comments