⚡ Quick summary (TL;DR)
Enable authenticator-based 2FA on MPChat: bind steps, backup codes, phone migration, and login failure fixes.
Keep egress region, billing address, and card details aligned; leave a balance buffer; do not rapid-retry payments.
This guide is for MPChat Pay & MPCard (Cloud / Boundless).
📖 Overview
two-factor verification improves account security. MPChat supports Passkey and Google Authenticator 2FA — sensitive card actions rely mainly on Passkey, but you should still bind an authenticator at the account layer.
What are Passkey and 2FA?
Method | Use case | Details |
Passkey | Issue cards, view CVV, freeze/delete cards, withdraw, etc. | From v1.5.0 replaces the 6-digit payment PIN; stored on device, phishing-resistant |
Google Authenticator / 2FA | Login and account security settings | 6-digit TOTP code refreshes every 30 seconds — extra protection if password leaks |
This article focuses on authenticator (2FA) setup and maintenance; for Passkey, see the help center Passkey section.
Why enable 2FA?
Anti takeover: hard to log in even if password leaks.
Protect assets: your account holds USDT and MPCard — maximize security.
Some sensitive actions may require phone/email/2FA on top.
Get an authenticator app
Any one of these works:
Google Authenticator
Microsoft Authenticator
Authy
Other TOTP-compatible authenticators
Binding steps
Open MPChat → Me → Security Center → Google binding (or the “Two-factor / 2FA” entry).
You will see a QR code and a Setup Key.
⚠️ Back up the secret first (write it down or save offline) — you need it when changing phones.
Open your authenticator app → scan the QR code (or enter the key manually).
When the app shows a 6-digit code, return to MPChat and enter it to finish binding.
Detailed guide: Google Authenticator
How to change or replace your authenticator?
Go to Security Center → Google binding.
Tap “Reset Google binding”. A security reminder appears first; after you continue, you only need to verify your Passkey (if you have none, you are guided to add one), then scan the QR code on the new authenticator.
You can reset even if the old device is lost and you have no backup secret, because only Passkey verification is needed, not the old authenticator. If your Passkey is also unavailable, see How to reset your MPChat Passkey or contact support.
How to unbind Google verification
Open My > Security Center > Google binding and tap Unbind, which sits below the “Reset Google binding” button.
Tap continue on the security reminder. If you already have a Passkey you go straight to Passkey verification; if not, a prompt appears first and you tap “Add now” to create one.
Once Passkey verification passes, the system unbinds Google automatically. You do not need to enter a Google code.
After unbinding, the related states update together:
The Google binding status in Security Center changes from Bound to Not bound.
Google is no longer an available item on the security verification page.
The Google item on the Two-Factor Authentication (2FA) page shows Not bound. If you had turned on Google verification, it stops taking effect automatically.
For changing your phone or email and updating your password, see Change phone or email, update your password, or unbind Google in Security Center.
New phone or lost authenticator?
With backup secret: manually add the key in the authenticator app on your new phone.
No backup: contact MPChat live chat and complete identity verification as guided.
Also enable the authenticator app’s cloud backup if supported.
❓ FAQ
Codes always wrong?
Usually incorrect phone time. Enable “Set date & time automatically”.
Should I enable both 2FA and Passkey?
Yes. Passkey is now one of the 2FA options too, and works for login, changing details and password changes across the app. You verify every item you turn on, up to 4.
Is SMS enough?
Authenticators are safer than SMS (less vulnerable to SIM swap).
Calibrate device time (detailed steps)
Before using an authenticator app, make sure your phone clock is accurate — otherwise codes keep failing.
iPhone (iOS)
Open Settings > General > Date & Time.
Turn on Set Automatically.
Android
Open Settings > System (or More settings) > Date and time (path varies by device).
Turn on Set Date & Time automatically / automatic time.
ℹ️ Tips
Stay online when using automatic time.
For manual time, turn automatic off first, then set date, time, and time zone.
Google Authenticator also has “Time correction for codes” to sync only the app clock.
📚 Related articles
💬 Still having trouble?
Do not retry payments rapidly (risk systems may cool you down). Screenshot the error (mask card number & CVV), then tap the message icon in MPChat for 1:1 support.
Need an MPCard? Apply inside the MPChat App — a virtual card is usually ready in about a minute.