Telegram Two-Step Verification

Add a cloud password so a stolen login code alone can't open your Telegram account.

An error occurred. Please try again.

Turn It On: Set a Cloud Password and a Recovery Email Today

US +1 213 555 9876
Live location
Not shared in any chat
Time
November 09, 2026, 15:23
Visible to
Only me
Backup size
Example: 701 MB backup
folder
Sharing off
Telegram Two-Step Verification | AppMsr

How the Cloud Password Works

Go to Settings > Privacy and Security > Two-Step Verification and create a password you don't use anywhere else. With it on, signing in on a new device needs both the login code and this password. Add a recovery email for resets. A passkey can also replace the SMS code.

Login Codes

Codes Arrive in One Place

Telegram sends login codes to its verified service chat. A code sent by a user, bot or website is not from Telegram. Never pass one on.

Reset Timer

Know What the 7-Day Wait Means

Without a recovery email, a reset completes 7 days after you request it. Cancel any reset you did not start yourself.

Session Check

End Sessions After Any Code Leak

If you shared a code or typed your password on a suspicious page, open Settings > Devices and end all other sessions. Then change your cloud password and confirm the recovery email is yours. This signs out anyone who used the code. Menu names may vary by app version.

Forgot Password
If you added a recovery email, Telegram sends a recovery code there so you can set a new password. Without a recovery email, your choices are to remember the password or request a reset from a signed-in device and wait 7 days for it to complete.
Login Code Theft
Login codes arrive in the official Telegram service chat on your signed-in devices. Phishing messages and fake sites ask you to forward that code or type it on their page. Anyone who gets it can try to sign in as you; the cloud password is what stops them. Never share codes with anyone.

Transparent Prices

No setup, monthly or hidden fees

$99.00 / USD
One number – Basic
$237.00 / USD
Three numbers – Optimal
We also offer individual prices for large enterprises.

Password Situations

1

Reset Request

Got a notice about a password reset you didn't start? Cancel it from any signed-in device right away.
2

Change Email

Update the recovery email in Two-Step Verification settings whenever you stop using the old address.
3

New Device

On a new phone, Telegram asks for the login code and then your cloud password. Keep the password handy.
4

Lost Phone

With another signed-in device, end the lost phone's session in Settings > Devices. Your cloud password blocks a new sign-in with the SIM.

Cloud Password Tips

  • Unique only

    Use a Password You Don't Use Anywhere Else

    A reused password can leak in another site's breach. Pick a long, unique cloud password, store it in a password manager, and never type it on a page you reached from a link in a message.

  • Add email

    Add a Recovery Email Before You Need It

    Without a recovery email, a forgotten cloud password means a 7-day reset wait. Add an address you control, and protect it with its own strong password and two-factor sign-in.

  • Watch alerts

    Cancel Password Resets You Didn't Ask For

    A reset request starts a 7-day timer. If you didn't start it, cancel it from a signed-in device, then check Devices for sessions you don't recognize.

  • Codes stay

    Treat Every Request for Your Code as Phishing

    Login codes arrive in the official Telegram chat or by SMS. Anyone asking you to forward one, including bots and accounts claiming to be support, is trying to sign in as you. Report them to @NoToScam.

Cloud Password Questions Answered

What Owners Ask About 2-Step Sign-In

Next Guide

Learn how to see every device signed in to your Telegram and end sessions you don't recognize.

More messenger guides: Snapchat Security · Messenger Security · WeChat Security