If you log into Telegram from a new device, it will be enough for thieves to have access to the verification code to gain access to the entire archive of your messages.

What should I do to protect my account?

Two-step authorization

This point is probably the most important for the security of your account.

By default, the application asks you to enter a code from an SMS to confirm your Telegram login on a new device.

Criminals can intercept sms during authorization or duplicate SIM cards.

In order to prevent such actions, you need to enable two-step authorization in the application settings as follows:

Settings – Privacy – Two-step authentication

Come up with a password without which it will be impossible to log into your account.

Password must be six characters long, including upper and lower case letters.

Devices with access to the account must be checked on the mobile or web version of Telegram.

In the section "Settings" → "Devices" (or "Privacy" → "Active sessions"), view active sessions.

If you notice suspicious sessions, for example, logging in from another city or country, terminate them. 

Access code (local password)

If you use

Telegram on a computer 

as an application for the Windows operating system, we recommend that you set an access code:

Settings – Privacy – Enable passcode for the app.

Come up with a local password that you will enter to log into Telegram on your computer.

For

Telegram on a smartphone,

you can use Face ID or a fingerprint for the access code.

In addition, you can configure auto-blocking at certain time intervals, thus securing access to Telegram.

But, if you already have a password set on your mobile device, such protection may be redundant, because it will duplicate the function of the password for unlocking the smartphone.

Number visibility only for contacts

Attackers can import contact databases of Telegram users.

In order to close this opportunity for attackers, enable the visibility of the number only for your contacts:

Settings – Privacy – Put a checkmark in front of the “My contacts” item.

Here you can put a checkmark next to the "Nobody" item, thus prohibiting those in your contact book from seeing your number.

Secret chats

If you don't want your chat history to be visible from other devices, create secret chats.

The application will use end-to-end encryption so that your correspondence is only accessible from the devices from which the correspondence was carried out.

Thus, without access to your phone, attackers will not be able to read your messages, which will eventually be deleted from your device.

Prohibition on displaying avatars and profiles when sending messages

To prevent access to your profile through a forwarded message and make your avatar invisible to unknown users, enable the settings as follows:

Settings - Privacy - Avatar photo

Settings - Privacy - Profile when rewriting

Ban on calls

You can compromise yourself if you accidentally answer a video call, so be sure to turn off the ability to call you:

Settings – Privacy – Calls – Nobody

Ban on invitations to groups

Settings – Privacy – Groups – My Contacts

Anonymity chat administrators

If you are the owner of a public chat and do not want your identity to be revealed, update Telegram to the latest version and add the ability to send messages anonymously to yourself and your administrators.

This way you will be able to participate in the voice chat, but remain anonymous.

If you participate in a public survey or use an inline bot, your anonymity will be lost.

In the first case, your profile will be visible to any survey participant, and in the second case, your ID will be visible to the bot author.

Read also:

  • How to stay in touch when there is no mobile network: useful tips

  • How to choose the right sleeping bag for the winter: the best tips and what to pay attention to