⚡ Quick summary (TL;DR)
Enable authenticator-based 2FA on MPChat: bind steps, backup codes, phone migration, and login failure fixes.
Keep egress region, billing address, and card details aligned; leave a balance buffer; do not rapid-retry payments.
This guide is for MPChat Pay & MPCard (Cloud / Flash / Boundless).
📖 Overview
two-factor verification improves account security. MPChat supports Passkey and Google Authenticator 2FA — sensitive card actions rely mainly on Passkey, but you should still bind an authenticator at the account layer.
What are Passkey and 2FA?
Method | Use case | Details |
Passkey | Issue cards, view CVV, freeze/delete cards, withdraw, etc. | From v1.5.0 replaces the 6-digit payment PIN; stored on device, phishing-resistant |
Google Authenticator / 2FA | Login and account security settings | 6-digit TOTP code refreshes every 30 seconds — extra protection if password leaks |
This article focuses on authenticator (2FA) setup and maintenance; for Passkey, see the help center Passkey section.
Why enable 2FA?
Anti takeover: hard to log in even if password leaks.
Protect assets: your account holds USDT and MPCard — maximize security.
Some sensitive actions may require phone/email/2FA on top.
Get an authenticator app
Any one of these works:
Google Authenticator
Microsoft Authenticator
Authy
Other TOTP-compatible authenticators
Binding steps
Open MPChat → Me → Security Center → Google binding (or the “Two-factor / 2FA” entry).
You will see a QR code and a Setup Key.
⚠️ Back up the secret first (write it down or save offline) — you need it when changing phones.
Open your authenticator app → scan the QR code (or enter the key manually).
When the app shows a 6-digit code, return to MPChat and enter it to finish binding.
Detailed guide: Google Authenticator
How to change or replace your authenticator?
Go to Security Center → Google binding.
To switch devices: verify with the old authenticator or backup secret, then scan the QR code on the new device.
If the old device is lost and you have no backup, reset via account appeal / support after identity verification (follow in-app prompts).
New phone or lost authenticator?
With backup secret: manually add the key in the authenticator app on your new phone.
No backup: contact MPChat live chat and complete identity verification as guided.
Also enable the authenticator app’s cloud backup if supported.
❓ FAQ
Codes always wrong?
Usually incorrect phone time. Enable “Set date & time automatically”.
Should I enable both 2FA and Passkey?
Yes. Passkey protects card and fund actions; 2FA hardens account login.
Is SMS enough?
Authenticators are safer than SMS (less vulnerable to SIM swap).
📚 Related articles
💬 Still having trouble?
Do not retry payments rapidly (risk systems may cool you down). Screenshot the error (mask card number & CVV), then tap the message icon in MPChat for 1:1 support.
Need an MPCard? Apply inside the MPChat App — a virtual card is usually ready in about a minute.