Multi-factor authentication (MFA) is an extra layer of security that helps protect your Longbridge account. Longbridge requires MFA to help keep your account and assets safe.

What is MFA?

Instead of relying on your password alone to access your account, MFA requires an additional factor—such as a code sent to your mobile phone number or email address—to verify that it’s really you. Even if someone were to learn your password, they still couldn’t sign in without this second factor.

Because it adds this extra safeguard, Longbridge requires you to set up MFA as an added security measure to help protect your account.

How does MFA work?

How MFA appears depends on how you sign in.

Signing in with a password When you sign in with your password, Longbridge sends a numeric code to the mobile phone number or email address on file:

  1. You enter your password to begin signing in.

  2. Longbridge sends a text message or email containing a numeric verification code.

  3. You enter that code in the Longbridge app to finish accessing your account.

Signing in with your phone number and SMS one-time passcode (OTP) If you sign in using just your phone number, no password is required. Longbridge sends a one-time passcode (OTP) by text message, and entering that code signs you in.

To make sure you can always receive your codes, keep the phone number and email address on your account up to date. It’s also a good idea to check that our text messages and emails aren’t being filtered into your spam or junk folder, and to add our sender address to your contacts or safe-senders list.

Why do I need to use it?

Passwords can be guessed, reused, or stolen through phishing and data breaches. MFA means your password alone isn’t enough to get in, so your account stays protected even if your password is compromised. This is why MFA is required for every Longbridge account.

Keep your verification code private

Your verification code is for your use only.

  • Do not share this code with anyone, for any reason.

  • Longbridge support will never ask you for this code.

  • If someone requests your code, or you receive a code you didn’t request, do not enter or share it—this may be a sign of an attempted account takeover.