Two-factor authentication (2FA) adds a second layer of security to your Nomad Stays account. Once enabled, signing in requires both your password and a one-time code from an authenticator app on your phone — so even if someone learns your password, they can’t get into your account without your device.
Before you start
You’ll need an authenticator app on your phone. Any of these work:
- Google Authenticator (iOS / Android)
- Microsoft Authenticator (iOS / Android)
- Authy (iOS / Android)
Install one from your phone’s app store if you don’t already have one.
Setting up 2FA
- Log in to your Nomad Stays account and go to Your Profile.
- Find the Two-Factor Authentication card and click Set Up Two-Factor Authentication.
- Open your authenticator app and choose Scan QR code (or the + / Add account option).
Important: Use the authenticator app’s built-in scanner — not your phone’s regular Camera app. Camera apps don’t recognize this type of QR code and will show a “no compatible app” error. This is expected; just switch to scanning from inside your authenticator app instead.
- Point your phone at the QR code shown on the page.
- Can’t scan it? Tap Enter a setup key manually in your app and type in the setup key shown below the QR code instead.
- Your authenticator app will start generating a new 6-digit code every 30 seconds. Enter the current code into the Verification Code box on the page.
- Click Verify and Enable.
That’s it — 2FA is now active on your account.
Save your recovery codes
Immediately after enabling 2FA, you’ll be shown 10 recovery codes. Each code can be used once to sign in if you ever lose access to your authenticator app (lost phone, app deleted, etc.).
- Click Download as .txt to save them to your device.
- Store them somewhere safe — a password manager, encrypted note, or printed copy in a secure place.
- These codes are shown only once. If you lose them and also lose access to your authenticator app, contact support to regain access to your account.
Signing in with 2FA
Once enabled, logging in works like this:
- Enter your email and password as usual and click Log In.
- You’ll be prompted for a 6-digit authenticator code. Open your authenticator app and enter the current code shown for Nomad Stays.
- Optionally check Remember this device for 30 days if you’re on a personal device you trust — you won’t be asked for a code again on that device until it expires.
Lost your phone or can’t get a code?
Click Lost your device? Use a recovery code on the code-entry screen, then enter one of the recovery codes you saved during setup. Each recovery code only works once — after using one, consider resetting your authenticator (see below) once you’re back in.
Managing or removing 2FA
Go to Your Profile → Two-Factor Authentication card.
- Reset Authenticator — generates a brand-new QR code and setup key, and invalidates the old one. Use this if you’re switching phones or think your old code might be compromised. You’ll need to scan the new QR code into your authenticator app and verify a fresh code, just like initial setup.
- Disable Two-Factor Authentication — turns 2FA off entirely. You’ll be asked to confirm your current password before it’s disabled.
Admin and Tech accounts: after September 15, 2026, you won’t be able to disable 2FA — it’s required to access admin areas of the site.
Frequently asked questions
Do I need 2FA?
Right now it’s optional for regular member accounts, but strongly recommended. In the near future certain users will requiring this for access to certain highly secure parts of the site.
I scanned the QR code with my phone’s camera and got an error. What’s wrong?
Nothing’s broken — your phone’s Camera app doesn’t understand authenticator QR codes. Open your authenticator app first, then use its scanner from inside the app.
What if I lose my phone and my recovery codes?
Contact Nomad Stays support with your account email so we can verify your identity and help you regain access.
Can I use 2FA on more than one device?
Yes — when you scan the QR code (or enter the setup key manually) into an authenticator app on a second device, both devices will generate matching valid codes.
Will “Remember this device” keep me logged in forever?
No — it skips the 2FA prompt for 30 days on that specific browser/device, not indefinitely. You’ll still need your password to log in.
Still stuck? Contact us