Authenticator app
An authenticator app enables two-step verification, adding an essential layer of security when accessing sensitive data such as credit card information.
This process ensures that only a uniquely identifiable user can access such data, aligning with the requirements introduced in version 3.2 of the PCI Data Security Standards.
⚠️ Important: These requirements became mandatory in February 2018.
Authenticator app setup
The authenticator app can be set up on a smart phone or on a PC or laptop.
⚠️Important: Once the authenticator app is connected to your user account, you’ll be prompted to verify your identity through the app each time you attempt to access credit card information.
Setup the authenticator app on a smart phone
Below will outline how to setup the authenticator app on an iPhone or an Android.
iPhone setup guide:
Open the App Store on your iPhone.
Tap the Search icon at the bottom of the screen.
In the search bar, type authenticator app.
Find the Google authenticator and tap Get to download and install it.
Android setup guide:
Open the Google Play Store on your android device.
Tap the Search bar at the top of the screen.
Type authenticator app into the search bar.
Find the Google Authenticator and tap Install to download and install it.
Once the app is installed, you'll be ready to set up multi-factor authentication (MFA) for your account.
Download the Winauth authenticator app to a PC or laptop
Watch this short video on how to set up the Winauth authenticator before following the steps below:
Important points to note when setting up the Winauth authenticator app onto your PC:
Use your own Windows login when accessing the authenticator app; you are personally responsible for any credit card access performed under your login.
Each user must have a unique Windows login if multiple people use the same computer to access card data from the booking engine.
Avoid sharing Windows profiles, doing so opens the same instance of the authenticator app, which compromises security.
Each user account is linked to a specific instance of the authenticator app, only that user can decrypt card data through it.
Install the authenticator app individually on each user’s Windows profile to ensure secure and compliant access.
To download and use WinAuth follow the steps below:
⚠️ Important: Failure to follow these guidelines breaches PCI Data Security Standards.
Click the WinAuth link.
Click the Download link at the top.
Click on the link/zip file under the following message:
This is the latest stable version of WinAuth. This will automatically start to download the .zip file.
Click on the .zip file
If not showing in your browser go to your Downloads folder:
Right click on the .exe file and copy it to your desktop this is for opening the application after installation.
Double-click on the WinAuth.exe file.
Click the Add button, then choose authenticator.
Login into your booking engine account.
The authorisation screen should be open by default, if not click the Home tab.
Jump to the end of Step 2 and copy the 32-digit Secret to the right of the QR code.
Paste the 32 digit secret into the secret key text box on the WinAuth text area beside the decode button.
Press the Decode button.
Click the Verify Authenticator button.
This will start the 6 digit codes appearing at the bottom which will change every 30 seconds.
Go back to your booking engine login.
Enter your 6 digit code into the text area beside verify code.
Click Verify Code.
You should now see the message authenticator app setup successful on your PC.
If you don't see this message or you see an error message, press the Decode button.
Click Ok on the WinAuth application.
On the new window that opens enter a new password for your login to the WinAuth application.
Click Ok.
WinAuth will stay open. You can get a new 6 digit code which can be used to access credit card information on your booking engine reservations by hitting the Refresh icon.
The 6 digit codes will be active for 30 seconds.