Passkey is the new password-free way MPChat verifies sensitive actions starting in v1.6.0. One Face ID / fingerprint tap replaces the old "password + SMS code" combo. This article explains what Passkey is, where MPChat uses it, how to set it up, and how to manage Passkey across your devices.
What is Passkey in MPChat? How to set it up and manage it (v1.6.0)
What is Passkey
A Passkey is a cryptographic credential stored on your phone (iCloud Keychain on iOS, Google Password Manager on Android) and unlocked with your device's biometric — Face ID, Touch ID, or fingerprint. Compared with a password:
Phishing-resistant: a Passkey is bound to help.mp.net and the MPChat app. A fake site cannot trick it into signing in.
No password to remember or leak: the secret never leaves your device, and there is nothing you can accidentally type into the wrong page.
One-tap fast: most flows verify in under one second.
Where MPChat uses Passkey
From v1.6.0 onward, Passkey is the default verification method for these high-impact actions:
One-tap card application — the new card flow uses a single Passkey confirmation in place of password + SMS. See How to apply for an MPChat card with one tap (v1.6.0).
Wallet withdrawals to external accounts — replaces the previous 2FA prompt.
Updating identity-related profile fields — e.g., renewing your KYC document.
Sensitive security settings — adding a new device, rotating Passkey, or disabling 2FA.
Less sensitive actions (chatting, viewing balance, in-app messaging) do not require Passkey.
How to set up Passkey
Setup takes under a minute. The flow lives in your security settings:
1. Open MPChat, go to Profile → Security Settings → Passkey.
2. Tap Add Passkey. The system prompts for biometric confirmation (Face ID / fingerprint) or your device PIN.
3. Once successful, the Passkey is automatically saved to iCloud Keychain (iOS) or Google Password Manager (Android), so it syncs to your other devices that share the same account.
4. A confirmation banner appears in MPChat. From this point on, Passkey is the primary verification method on this device.
You can repeat the same setup on each device you want to use, or rely on iCloud / Google sync to push the Passkey across devices automatically.
If your device does not support Passkey
Some older devices, or devices in restricted environments, may not support Passkey. MPChat falls back gracefully:
The app keeps your existing 2FA setup (password + SMS / email code) active.
When a sensitive action requires verification, MPChat will offer the 2FA path automatically.
You can re-attempt Passkey setup later — for example after upgrading the OS — without losing any data.
How to manage your Passkey
Passkey lives under Profile → Security Settings → Passkey. From this screen you can:
See all devices that have an active Passkey for your MPChat account.
Remove a device — recommended if you sell or lose access to a phone.
Reset / re-add — useful if you upgrade phones; the new device must complete its own biometric confirmation before becoming a verifier.
Temporarily fall back to 2FA — you can disable Passkey for verification (your existing 2FA setup remains intact).
Frequently asked questions
What if I lose my phone? Can someone else use my Passkey?
No. The Passkey only unlocks with your biometric or device PIN. Without you, the credential is unusable. We still recommend you remove the lost device from Security Settings → Passkey and rotate your password.
Will Passkey replace my password?
No, your password remains for legacy login. Passkey is used for verification of sensitive actions and (where supported) faster login. You can keep both active.
What happens to Passkey when I uninstall MPChat?
The Passkey itself is stored by your OS (iCloud Keychain or Google Password Manager) and is not deleted by uninstalling MPChat. When you reinstall and log back in, Passkey is immediately ready to use again.
Can I share my Passkey with someone else?
You should never share your Passkey, your device, or your biometrics. MPChat support will never ask you for a Passkey verification on your behalf.