@vaartis @solidsanek I had something similar when I was using Ripcord (a third-party client that strips a lot of telemetry and provides privacy options that the official client doesn't)
Token wouldn't work, so I'd log in on browser and get "Something suspicious is going on here" and it would make me reset my password. So I'd just alternate between two passwords, daily. After two months of this they locked my account and demanded a phone number verification.
So I quit using it altogether.