Guest access & arrivals

Each hosting service has three access modes you can switch between in the Guest access tab: (1) Open access, anyone with the link can enter (default, best for properties with QR codes). (2) Access code, guests must enter a 4 to 6 digit code you set, with rate limiting against brute force. (3) Guest list, only names you've added to the allowlist can enter. You can change modes at any time without breaking existing links.

Set a 4 to 6 digit numeric code in the Access Control card. Guests are asked for it after entering their name. Codes are stored hashed in the database, never in plain text. The system tracks failed attempts per IP address and locks out repeated bad attempts for 15 minutes to prevent guessing. You can rotate the code at any time from the same panel.

Add expected guest names to the allowlist in the Access Control card. When a guest enters their name on arrival, the system checks it against the list (case-insensitive, with simple fuzzy matching for spelling variations). If their name isn't found, they see a friendly message asking them to check with their host. Useful for events and small groups where you know exactly who's invited.

Toggle 'Notify me when guests arrive' in the Guest access tab to get notified the first time each guest opens your link or scans your QR code. The host receives an email saying '[Guest name] just checked in to [Service name] at [time]'. Repeat opens within 24 hours are deduplicated, so a guest refreshing the page won't trigger multiple notifications.

An 'Arrivals Today' card appears at the top of the Guest access tab showing a live count of today's check-ins, plus a scrollable list with each guest's name, arrival time, and a badge marking them as 'First visit' or 'Returning'. A 'View all' link opens a 7-day history. Data updates in real time and is private to you as the host.

Yes. Enable 'Collect guest emails' in the Guest access tab and Hostigram will ask new guests for their email at the start of the conversation in a friendly, optional way. Collected emails appear in the Guest Contacts list, can be exported, and are used for any host-to-guest broadcasts you opt to send by email. Guests can decline, it never blocks access.