⚡ Quick summary
You verify every item you have turned on, up to 4: Passkey, phone, email and Google. You complete them one by one; it is no longer “pick any one”.
Phone and email codes are sent automatically when you open the verification screen, and submit automatically once typed.
If 2FA is off, logging in on a new device only checks your Passkey; with no Passkey you go straight in.
📖 Two-Factor Authentication (2FA) at login
2FA is the extra security check when you log in to MPChat. From version 2.2.5 the login check runs step by step, and Passkey is one of the 2FA options.
🔑 1. Which items exist, and how to turn them on or off
Items on the 2FA settings page appear in this order: Passkey (biometric) → phone → email → Google. Each item shows Not bound, Off or On.
Open My > Security Center > Two-Factor Authentication (2FA).
Turn on the switch of an item you have bound. An item that is not bound has to be bound first.
The switch updates right away, with no loading spinner or toast.
To turn 2FA off, switch off every item that is on. You will not be asked for 2FA at your next login (except when you log in on a new device, see below).
📋 2. When login needs verification
You turned on any 2FA item: you verify each item you turned on. A method you already used to log in is not asked again. For example, if you logged in with your Passkey, you are not asked to verify the Passkey again.
New device and 2FA is off: the platform enforces a security check, but only the Passkey. If you already logged in with your Passkey you do not verify again; if your account has no Passkey yet, there is nothing to verify and you go straight in.
✅ 3. How the step-by-step check works
After you log in, you land on the Security Verification page. It shows your progress, such as 0/3 or 0/2 (done / required).
Tap one item to open its verification screen.
Phone / email: the code is sent as soon as you open the screen, a 60-second countdown starts, and the number keypad opens. The code submits automatically once you finish typing.
Google: type the 6-digit code from your authenticator; it submits automatically.
Passkey: tap it to bring up the system Passkey check (Face ID / fingerprint / screen lock), then you return automatically.
When a check passes you return to the Security Verification page and the item gets a tick. A wrong or expired code shows a message right on the verification screen.
Once every item passes, you enter the app automatically.
A few details:
If you leave a verification screen and come back before the 60-second countdown ends, the code is not sent again automatically; after the countdown, tap “Resend”.
If you finish only some items and tap the back arrow at the top left, the verification state resets the next time you open it, and you start again.
A human check appears before a code is sent. Tap once on the current screen; after it passes, the code is sent automatically. Resending after a timeout does not need the check again.
🔄 4. What changed from the old version
It used to be pick one of three. Now you verify every item you turned on, up to 4.
The old “Change verification method” entry is gone, and you can no longer pick just one item yourself.
Codes used to be sent by tapping a button; now they are sent automatically when the screen opens.
Turning an item on or off used to show a loading prompt; now the switch just updates.
🛟 5. What if my Passkey does not work
On the Passkey verification screen, tap Passkey unavailable?:
KYC completed: you go through a face check. After it passes, the system clears the Passkey on your account (clear only, nothing new is added), turns off the Passkey item and returns you to the login home screen. After logging in again, the 2FA page no longer shows a Passkey item; if the check came from a new device, login goes straight through after clearing. You can add a new Passkey afterwards.
KYC not completed: you cannot reset it yourself. Contact [email protected]. Support first verifies your phone number and email, then helps clear the Passkey, and you log in again.
Full steps: How to reset your MPChat Passkey.
If your phone, email or Google item is unavailable, self-service reset at the login stage is not available yet. Email [email protected] with your registered phone number or email and we will help.
❓ FAQ
2FA is off, so why does login still ask me to verify?
Usually because you are on a new device. The platform enforces a check, but only the Passkey; with no Passkey you go straight in.
Why can I no longer choose which method to use?
Under the new rule you verify every item you turned on, and there is no “Change verification method”. If that feels like too many steps, turn off the items you do not need on the 2FA page; you can keep as few as one.
I did not get a code. What now?
First make sure you tapped the human check on the page, then see the code troubleshooting steps in MPChat password, login and device security.