Never send your code, password or card details

Bookly support never asks for your password, a code from an email or a text message, or your card number. If someone asks for them on Bookly’s behalf, it isn’t us — change your password and check your active sessions.

What never to send anyone

“Never send your account password, a code from an email or text message, or your card number. If someone asks for them on behalf of Bookly, it isn’t us.”

• Your account password. Not even to an employee: they should have their own sign-in — how to invite an employee.
• Codes from emails and text messages. The text message itself says so: “Bookly sign-in code: … Do not share it with anyone.” The booking confirmation code that salon clients get ends the same way: “Do not share it with anyone.”
• Your card number and CVV. Card details are entered only on the payment provider’s page — Bookly sees only the masked number.
• Payment and receipt links from our emails. They’re as secret as a code — don’t forward them.

What you can send to support

A description of what happened, a screenshot, and the details from “Copy details for support” — they contain no name, email or phone number. Before you send a screenshot, check that it shows no password, code or card number. What else helps: What to include in your message.

If you’ve already sent a code or a password

1. Change your password — Forgot your password: reset or change it.
2. Check “Active Sessions” and end any you don’t recognise — Active sessions: where you are signed in and how to sign out elsewhere.
3. Tell support what happened. Write any time — we reply during working hours.

If someone got hold of your card details, call your bank.

If something goes wrong

You got an email saying “We noticed suspicious activity”

Someone entered a wrong code in your account several times in a row — to sign in, change the email or confirm the phone number — so Bookly temporarily locked that step. Signing in with your password works as usual. If it wasn’t you, change your password and review your active sessions. If the email is about SMS codes, someone already knows your password — change it right away. More in Code sign-in is temporarily locked.

A code arrived, but you didn’t do anything

An email “Your Bookly login code” means someone entered your email, username or phone number on the sign-in page and asked for a code — perhaps they simply mistyped their own address. Without the code they can’t sign in: don’t send it to anyone, and don’t enter it on a page someone sent you a link to. The code stops working by itself after 5 minutes.

An SMS “Bookly sign-in code…” arrives only after someone has already entered your password or the code from your email. If it wasn’t you, change your password right away and end any active sessions you don’t recognise.

Someone messages or calls “from Bookly” and asks for a code

Don’t send or read out anything. The real ways to reach us are on the support page. If in doubt, contact us there yourself.

Related articles

• Active sessions: where you are signed in and how to sign out elsewhere
• Forgot your password: reset or change it
• What to include in your message