Skip to main content
BloxChat uses a secure verification flow to authenticate your Roblox account without requiring your password or cookies. This guide explains how verification works and how to complete it successfully.

​
Why Verification Is Needed

BloxChat requires verification to ensure:

Secure Authentication

Verify your Roblox identity without sharing passwords or account credentials

Authorized Access

Ensure only legitimate Roblox users can access chat channels

Session Management

Maintain secure, time-limited sessions that automatically expire

Privacy Protection

Keep your Roblox account secure while using BloxChat services
BloxChat never asks for your Roblox password, email, or authentication cookies. The verification process only confirms you control the Roblox account.

​
How Verification Works

The verification system uses a secure challenge-response process.

​
Architecture Overview

​
Step-by-Step Process

1

Request a verification code

When you click Start Verification in BloxChat, the app requests a unique verification code from the backend server.What happens:
  • A random 6-digit code is generated
  • The code is tied to your verification session
  • The session is valid for 10 minutes
2

Join the verification game

BloxChat displays your verification code and provides a button to join the verification game on Roblox.What happens:
  • The verification Place ID is retrieved from server configuration
  • Clicking Join verification game opens the game in Roblox
  • Your verification code remains visible while the game loads
3

Submit your code in-game

Inside the verification game, enter your 6-digit code when prompted.What happens:
  • The game sends your code and Roblox User ID to the backend
  • The backend validates the code matches your session
  • Your Roblox profile is fetched and verified
4

Verification completes

BloxChat detects the successful verification and logs you in automatically.What happens:
  • The backend creates a JWT (JSON Web Token) for your session
  • Your user profile (username, display name, user ID) is stored
  • BloxChat receives the session token and marks you as authenticated
  • You’re redirected to the main chat interface

​
Session Management

Verification creates a time-limited session that grants access to BloxChat.

​
Session Lifetime

Duration: 10 minutesThis is the window you have to complete verification after clicking Start Verification.Countdown timer:
  • Displayed under your verification code
  • Shows remaining seconds
  • Automatically refreshes every second
If the verification session expires, you must click Start Verification again to get a new code.

​
Completing Verification Successfully

Follow these steps to ensure smooth verification.
1

Start verification at the right time

Only start verification when you’re ready to join the game immediately. Don’t wait—the 10-minute timer starts as soon as you click Start Verification.
2

Keep BloxChat open

Don’t close BloxChat while joining the verification game. The app needs to stay running to detect when verification completes.
3

Enter the code accurately

Double-check your verification code before submitting it in-game. The code is case-insensitive but must match exactly.
The verification code is displayed in a large, easy-to-read font with letter spacing for clarity.
4

Wait for confirmation

After submitting your code in the verification game, wait for BloxChat to detect the successful verification. This usually takes 2-5 seconds.What you’ll see:
  • The login screen automatically transitions to the welcome screen
  • Your Roblox username and display name appear
  • A “Go to chat” button becomes available

​
Verification Security

BloxChat’s verification flow is designed with security in mind.

​
Security Features

BloxChat never asks for your Roblox password. Verification proves you control the account without exposing credentials.
Verification codes expire after 10 minutes, preventing replay attacks or delayed abuse.
Each verification code can only be used once. After successful verification, the code is invalidated.
The verification game uses a secret key to authenticate with the backend. Only authorized games can complete verification.
Verification requests are rate-limited to prevent brute-force attacks:
  • 20 verification attempts per minute per user
  • 60 status checks per minute per session
  • 4 session refreshes per hour per user
Authenticated sessions use industry-standard JWT tokens with expiration times, ensuring sessions can’t be used indefinitely.

​
What BloxChat Stores

During and after verification, BloxChat stores: On the backend:
  • Your Roblox User ID (numeric)
  • Your Roblox username
  • Your Roblox display name
  • Verification session data (temporary, auto-deleted after 10 minutes)
On your device:
  • Your JWT session token (in local storage)
  • App settings and preferences
  • Favorited media URLs
BloxChat does not store your Roblox password, email, authentication cookies, or any other sensitive account information.

​
Re-Verification

You’ll need to verify again in certain situations.

​
When Re-Verification Is Required

When it happens:
  • Your JWT session expires (default: 1 hour)
  • You close BloxChat and your session isn’t refreshed
  • The backend restarts and sessions are cleared
What to do:
  1. Click Start Verification on the login screen
  2. Complete the verification flow again
  3. You’ll be logged back in with a fresh session

​
Avoiding Frequent Re-Verification

​
Troubleshooting Verification

If verification isn’t working, see the Troubleshooting Guide for detailed solutions.

​
Quick Fixes

Symptom: Message says “Verification code expired” in-game or BloxChat.Solution: Click Start Verification again to get a new code.
Symptom: Game says “Invalid or expired verification code.”Solution:
  • Double-check you entered the code correctly
  • Ensure you copied the full 6-digit code
  • Verify you’re using the most recent code (not an old one)
Symptom: Clicking “Join verification game” does nothing or fails.Solution:
  • Check your internet connection
  • Verify Roblox is installed and working
  • Try opening the game manually through Roblox website
  • Contact support if the verification Place ID is invalid
Symptom: Code is accepted in-game, but BloxChat doesn’t log you in.Solution:
  • Wait 5-10 seconds for BloxChat to poll for completion
  • Check your API Server URL is correct in Settings
  • Restart BloxChat and try again
  • Verify you’re not rate-limited (wait 1 minute and retry)

​
Next Steps

Using the App

Learn how to use BloxChat after successful verification

Troubleshooting

Resolve verification errors and issues

Build docs developers (and LLMs) love

Get started for freeTalk to us