How we verify your identity in Messenger
A quick email code helps us protect account details and sensitive requests without making you create another password.
Updated July 23, 2026
When you write to us in Messenger, you can start chatting right away. If your question involves private account information or a sensitive change, a teammate may ask you to verify the email address saved on your customer record first.
You do not need a separate support account or another password. The check happens inside the conversation you already have open.
How it works
1. A teammate starts the identity check from the Inbox.
2. Minnas sends a six-digit code to the email address on your customer record.
3. Enter that code in the verification field in Messenger.
4. Once the code is accepted, the conversation is authenticated for ten minutes.
During that window, the teammate can use protected account Actions that require verification. If more time is needed later, they can send a new code.
Why we use it
Knowing someone’s name, email address, or order number is not enough to treat a browser session as trusted. Email verification gives us a quick way to check that the person in the current Messenger conversation can access the email address already connected to the customer record.
That means we can offer fast support without exposing sensitive account tools to an unverified visitor.
Safety built in
• Each code expires after ten minutes.
• A newer code revokes the previous one.
• Five incorrect attempts lock the code, so a teammate must send a new one.
• Successful authentication expires after ten minutes.
• Verification is tied to the current Workspace, customer, conversation, and Messenger session. It does not carry over to another person or conversation.
If you did not expect a code
Do not share it. Enter a verification code only in the field inside the Messenger conversation where it was requested. Toothpaste Apps will never ask you to send the code somewhere else.
What this check means
This confirms that the person using the current Messenger conversation has access to the email address on the customer record. It is a focused email-access check, not a permanent login or a broad proof of legal identity. For an especially sensitive request, a teammate may still ask for another form of confirmation.
You do not need a separate support account or another password. The check happens inside the conversation you already have open.
How it works
1. A teammate starts the identity check from the Inbox.
2. Minnas sends a six-digit code to the email address on your customer record.
3. Enter that code in the verification field in Messenger.
4. Once the code is accepted, the conversation is authenticated for ten minutes.
During that window, the teammate can use protected account Actions that require verification. If more time is needed later, they can send a new code.
Why we use it
Knowing someone’s name, email address, or order number is not enough to treat a browser session as trusted. Email verification gives us a quick way to check that the person in the current Messenger conversation can access the email address already connected to the customer record.
That means we can offer fast support without exposing sensitive account tools to an unverified visitor.
Safety built in
• Each code expires after ten minutes.
• A newer code revokes the previous one.
• Five incorrect attempts lock the code, so a teammate must send a new one.
• Successful authentication expires after ten minutes.
• Verification is tied to the current Workspace, customer, conversation, and Messenger session. It does not carry over to another person or conversation.
If you did not expect a code
Do not share it. Enter a verification code only in the field inside the Messenger conversation where it was requested. Toothpaste Apps will never ask you to send the code somewhere else.
What this check means
This confirms that the person using the current Messenger conversation has access to the email address on the customer record. It is a focused email-access check, not a permanent login or a broad proof of legal identity. For an especially sensitive request, a teammate may still ask for another form of confirmation.