64 Cards found
0:07
Added
Request 2FA for important actions
Right now, anyone who accesses your account can delete it, change phone number, or close all of your sessions. Solution: request 2FA for these actions.
Critical Security Vulnerability: Mandatory 2-Step Verification (2FA) needed for high-risk regions (+86, +7, +98)
… country codes: Mandatory 2FA Prompt: During registration or immediately after the first login for users with high-risk prefixes (+86, +7, +98, etc.), Telegram must display a severe security warning…
2FA via TOTP or hardware token
2FA via TOTP/Hardware token
FIDO2 compatibility. Make Telegram accounts more secure against unauthorised access by allowing security key 2FA for the strongest security, and by allowing app based TOTP for medium security. SMS TOTP is not enough.
FIDO2 compatibility. Make Telegram accounts more secure against unauthorised access by allowing security key FIDO2 2FA for the strongest security, and by allowing non-SMS TOTP for medium security. SMS…
Deleting a chat history or an entire chat should require 2fa password if it has been set up
In my sleep I managed to nuke the entire conversation I had with my best friend, no way to bring it back. An "Are you sure" just isn't enough. If 2FA is enabled, it could perfectly act as a fail safe…
0:11
Fixed
Telegram X doesn't support account reset with 2FA
… Steps to reproduce 1. Set up 2FA 2. Open Telegram X (and logout) 3. Follow the standard procedure to login 4. When prompted for the 2FA password, click forgot password? Current result The window indicating…
Ask a 2FA password when log out devices
That regardless of the platform, everytime you need to logout a device (or all devices) that the app asks the 2FA password. It avoids that an unauthorized user access a device and logs you out of all…
View the 2FA Recovery Email set
An option to view the recovery email set for two-step verification password recovery.
Security feature (Replace login method after registration) (2FA)
An option to export two-factor key. If all session broken, but key exist, you can enter code same sms code to login. Also an option to change that key. Or block. (Default is locked).
Fixed
Emoji not renders on 2FA screen
When your hint for 2FA password contains emojis, it's not rendering correctly. Steps to reproduce 1. Enable 2FA and change your 2FA hint to 🚐⛽️💳 or something like that 2. Go to webk.telegram.org 3. Try…
Type 2FA password when deleting whole chat
… please ask that user to type 2FA password. 1. It makes deleting process more secure: another person can not take my device while I am looking to another side and delete my chat. 2. It makes me unable…
2FA QR Code Integration with Google authentication.
Please add QR Code to save 2FA on Google Authenticator, Full access to Telegram 2FA anytime, anywhere without an internet connection, even using Google Authenticator.
There is no 7-day wait for account deletion from 2FA, the code for account deletion has not been received.
… thing is that the account had 2FA, and I did not receive the deletion code and did not have 7 days to prevent it. I have not been able to restore my account. Steps to reproduce 1. Enable 2FA 2. Delete…
Fixed
Hint for 2FA password in not displayed for Telegram Passport
… are required to enter your 2FA password. The hint for the password is not displayed on macOS, but it is on iOS. Steps to reproduce 1. Go to Settings > Telegram Password Current result Hint for the…
Fixed
Mismatching 2fa password does not show any error
A mismatching password in the password recovery field does not show any error, the next button simply doesn't work. Animations turned off. Steps to reproduce 1. Begin the password recovery flow 2. Enter…
Fixed
gTLDs do not work for 2FA recovery emails
Telegram does not allow certain gTLDs (like .management) to be used in 2FA recovery email addresses. It states the email address is invalid even though it exists and can receive mail. Steps to reproduce…
Add Authentication (Password/PIN/2FA) to Delete Active Sessions in Telegram.
Hello Telegram team, I’m submitting a new suggestion to improve security on the platform. The proposal focuses on the active sessions feature. At present, a user can delete any session easily by tapping…
Reset forgotten 2FA password in WebA app.
Reset forgotten 2FA password. I setup my 2FA password a couple of years ago and have forgotten it now. How can i reset it, while being still logged into the WebA session? Currently, there is no way to…
Setting up 2FA password, all the device should be logged out
… device not applying the 2FA still hacker can use my account ,if we creating 2FA if should sign out from all device and it has ask for 2fA password instead of that if you are already logged in another…
If 2FA enabled, require password before allowing chat deletion or clear chat history
An option to enable 2FA password to be required before deleting a chat or clearing chat history. On Android, it is possible to accidentally delete chat history with an accidental swipe and a tap in the…
Desktop app doesn't indicate that a 2FA request was recently canceled
Steps to reproduce 1. Set a 2FA password (without email) 2. Go to reset it 3. When you receive the message, tap on cancel 4. Try to reset again (steps 1-3 from any device, step 4 from desktop app) Current…
2FA email never received
I am not receiving the 2FA password recovery emails that the app advises it is sending to my gmail account Steps to reproduce Install app Enter phone number Enter code from telegram on other device Forgot…
After each update, please do not display a reminder of the 2fa password in the app' settings
I'm talking about the message "Your password. Your account is protected by 2-Step Verification. Do you still remember your password? Yes, definitely / Not sure".
2FA need For secret chat
Need A 2FA For secret Chat .. like in facebook and instagram they are providing the otp in Authenticator for 30 so that the OTP will change and the numbers can be change it will be the best for the secret…
Unable to login with /z/ on a fresh device after 2fa change
Telegram wasn't accepting the 2FA password I had set because while resetting it on mobile I had to switch between my password manager and Telegram, and it reset the Telegram "activity" to the default…
0:06
Fixed
Letters are masked when typing hint while setting 2FA.
WhenWhen I enter the hint while setting up 2FA, the typed words are masked for no reason. Steps to reproduce 1. Open Telegram. 2. Go to settings. 3. Enable 2FA. 4. Type password. 5. Validate your email…
Fixed
Strong Password is generated when you try to login with 2FA enabled
Steps to reproduce 1. Login on webk.telegram.org or web.telegram.org/k/ 2. After inserting login code, the site shows you the 2FA page where you can enter your password 3. Tap on Done > Tap on input field…
Added
Tmail - Telegram Email Service
… code to SMS/Telegram and then 2FA password You can also access mails by Telegram Messenger itself as an integrated part of it. All you need to enter is your 2FA password in this form. So for the inbox…
0:03
Added
Redesign the signup (onboarding) page with Utya Duck animated stickers & switch to the new Telegram logo
Utya Duck animated stickers found on telegram.org & switch to the new Telegram logo and optionally prompt for [2FA / Proxy] setup if needed.
Added
Don't use Telegram Security Notifications for bug platform posts
… (the same one that sends you 2FA-codes and login attempts!) B) The (user)name was clickable and transferred users to a channel. This is possible thanks to the following security flaws: 1. Using Telegram…
Allow usual bots use 'requires_password' in inline butttons.
… a two-factor authentication (2FA) password within Telegram. For instance, if a user's account is compromised, implementing 2FA would prevent a hacker from causing any damage to the user's finances…
@dotvhs add an email login way on Telegram. :( It will help if you lost your number but can't acess receive the code from another Telegram Client
Add an email login way on Telegram. :( It will help if you lost your number but can't receive the code from another Telegram Client And PWEASE add an 2FA to acess the EMAIL (Google Auth, Microsoft Auth…
0:10
Added
Sign In by QR code using system camera
… You still have to enter your 2FA code This poses no threat to the user who is scanning Even if you have to show a modal with a confirmation, the app should take you to the scanner instead of telling…
Login with Telegram ID and cloud password
… enable my cloud password (2fa) and it and my phone number or Telegram ID to login without verify code. It's very useful so I wont lose my account even if I lost my sim card or if I want to login into…
Transfer owner of sticker/emoji packs
… owner of that sticker pack. 2FA will be required. Emoji packs are the same.
Parental Control (self, with password / location) for Premium
… order to buypass block) 5. 2FA unlock (buy auth app code)
Telegram Security Overhaul
… deleted texts) 2. More 2FA options. Users should be allowed to use the 2FA app of their choosing. 3. Encrypted chats… while implementing full E2EE could harm convenience, telegram could allow you to…
Add a way to recovery account if telegram terminate all your sessions and your account phone number is not updated
… use the email connected with 2fa as a way to update the account's phone number or something else but now users are alone with bugs. I've lost an account two weeks ago and no help from the support…
Feature Request: Password/PIN Confirmation for Saved Messages Deletion
Please add an extra confirmation step (like password, PIN, or 2FA) before deleting messages from Saved Messages. These messages often contain very valuable information, and it’s too easy to delete them…
WebZ forgetting login sessions / configurations
… -Number and QR-code based - 2FA is enabled for my account), even when "Keep my signed in" is checked. Also changing the background image is not persisted and resets back to the default. I haven't tried…
[Firefox] Not possible to log in
When using Firefox browser with incognito mode, after you enter the 2FA password, the app gets stuck displaying a 'Please Wait...' service message. Device info Telegram WebZ 1.0, Browser, 5.0 (Windows)
Temporary Security Restrictions for Newly Connected Devices (24–48h Protection Window)
… settings (e.g., password, 2FA, recovery options, active sessions management). All previously trusted devices would retain full functionality and remain unaffected by these restrictions. Rationale:…
Send bug comment notifications in a separate chat from service messages
… it without also blocking 2FA codes and other security-related notices. Since Telegram is clearly not doing anything about the spam problem, I want comment notifications to be delivered in a separate…
The 2026 Security Manifesto: Phasing out SMS/Phone Numbers for AI-Driven Biometric & Hardware Security
… as the primary 2FA method, making unauthorized remote access technically impossible even if a password is leaked. 3. Proactive AI "Anti-Scam" Shield Intent Analysis: Instead of reactive moderation…
Better protection against session and account hijacks and telegram account theft
… kill all sessions and set up 2FA password and prevent real user from logging in. Here is some suggestions for improving protections against session or account hijacks. - device bound session credentials…
guardian
… on top of existing security (2FA/sessions), not a replacement. Expected impact: Meaningfully reduces successful takeovers for vulnerable users via a human approval barrier.
log in issue
I scan the QR code > I am redirected to the 2FA input window > I enter the correct password > the logo appears for a few seconds > I am returned to the QR code screen again Steps to reproduce 1. scan…
An per-session option to control access to takeout(data export) feature.
… toggles. While toggled, a 2FA password is requested, and the current session(invoking the method to change settings) should be authorized for more than 24 hours ago to make modifications.
Activation code SMS OTP never arrived to SMS inbox
Try to login to account that has already has 2FA. But the activation code never send to email and send to SMS instead. But the SMS with activation code never arrived in my SMS inbox. Already try to contact…
Messages are missing
After I logged out and logged back in, turned on 2FA and messages and media in a chat with one person was completely removed before 25 july 2024, it happens only on my side. Other person's chat shows…