Signing in
Who uses this: any guest on a confirmed booking, with no staff permission involved. Which sign-in methods are actually offered depends on your settings — see Settings: Access & Rules.
Guest portal sign-in page
There are three ways in. A property can enable any combination, as long as at least one stays on.
| Method | How it works | Notes |
|---|---|---|
| Booking number | The guest enters their booking number and surname. | No account needed — ideal for one-time guests. Works with the surname of any traveller on the booking, not only the main guest, and ignores case/accents. See the restrictions below. |
| E-mail link | The guest enters the e-mail address from their booking; a one-time sign-in link is sent. | The link is valid for 30 minutes and opens the booking directly — no password. |
| Account | The guest signs in with an e-mail and password, or creates an account. | Shows every upcoming or current booking under that e-mail in one place. Only offered when the property allows it. |
A Keep me signed in on this device checkbox extends the session from the default (a few hours) to 30 days.
Creating an account
When the account method is enabled, guests can register from the sign-in page: first name, surname, e-mail, and a password of at least 10 characters, plus accepting the terms and privacy policy. A few things to know:
- The password typed at registration is never used — neither for a brand-new e-mail address nor for one that already belongs to a customer. Every registration ends on a Check your inbox page, and the guest receives a "Set your password" e-mail. Only whoever reads that mailbox can set a password, so nobody can take over someone else's bookings by registering with their address. The page looks the same for every address, so it never reveals whether an e-mail is already known.
- Opening the link and choosing a password also confirms the e-mail address — no separate confirmation step is needed, whatever your general user-verification settings say elsewhere in Gurita. The guest then lands on the portal sign-in page and signs in with that password. Until then, the account can't be used.
- The link is valid for 3 hours. Registering again while a link is still valid doesn't send a second e-mail.
- If your loyalty program is active, the registration page also offers to join it and shows an estimate of the points this booking would earn.
Forgot password? on the sign-in page sends a password-reset e-mail. It uses the same password-reset e-mail template as the rest of Gurita, but its link brings the guest back to the portal: after choosing a new password they land on the portal sign-in page with the notice "Your password has been changed. Sign in with your new password." The "Set your password" link from registration opens the same page and also returns the guest to the portal sign-in.
A guest who confirms their e-mail address through the confirmation link (rather than by setting a password) is returned to the portal sign-in page too, with the second notice: "Your e-mail address is confirmed. You can sign in with your account now." Both notices open the Account sign-in form ready for the e-mail and password.
Note: Loyalty membership does not require an account — a guest signed in with just their booking number or an e-mail link still sees their points on the Loyalty club tab if they're enrolled (redeeming a reward needs an e-mail link or an account). An account simply makes it easier to find all past stays and points in one place.
Booking-number sign-in: what's restricted
Because a booking number plus a surname is comparatively easy to guess or share, sessions started this way are deliberately more limited than an e-mail-link or account session. This applies automatically — there's nothing to configure.
| Restricted | What the guest sees instead |
|---|---|
| Passport / ID numbers | Masked to the last 4 characters everywhere they'd otherwise show (guest form, check-in review). |
| ID scans / passport photos | Shown as "on file" with no thumbnail, preview, or download — even the guest's own upload. |
| Guest uploads and message attachments | Not listed on the Documents tab, and the upload card is hidden; message attachments show by name only. The portal can't tell an ID scan apart from any other upload, so no upload is served to be safe. The property's confirmations and invoices still open and download as usual. |
| Cancelling the booking | Not offered, whatever the cancellation settings say. Guests are told to sign in with an e-mail link or an account, or to contact the property. |
| Booking history | Not shown. A booking-number session only ever sees the one booking it opened with. |
| Loyalty rewards and points history | Balance and tier still show, but the points list shows only entries from this booking, and redeeming a reward fails with a message asking the guest to sign in with the e-mail link or their account. See The Loyalty club tab. |
Signing in again with an e-mail link or an account lifts every one of these restrictions immediately (assuming the guest is otherwise entitled to see the data — a co-traveller, for example, never sees the main guest's payments regardless of sign-in method; see Overview and Stay).
If sign-in fails
- Wrong booking number or surname — a single generic message either way, so a guest can't probe for valid combinations.
- Expired or already-used link — the guest can request a new one straight from that page.
- Wrong account e-mail or password — likewise a single generic message.
- No login method is available (the property switched the portal off, or turned off every method) — the guest sees a notice page with the property's contact details instead of a sign-in form.
See Settings: Access & Rules for turning each method on or off, and for the magic-link e-mail template.