A login code alone is not enough to protect an account: codes can be intercepted, phished or read from a stolen SIM. Two-step verification adds a password you choose, which Telegram asks for at every new login. It also unlocks features such as channel ownership transfer, so it is worth setting up on every account.
1. Why turn it on
- It protects the account even if someone gets your SIM or an SMS code.
- It is required, with a waiting period, before you can transfer channel or group ownership.
- It reduces the chance of losing an account you use for business, a channel you own or an asset you bought.
2. How to set it up
- Open Settings → Privacy and Security → Two-Step Verification.
- Tap Set Additional Password and choose a strong, unique password.
- Add an optional hint that only you would understand.
- Add a recovery email and confirm the code sent to it. Do not skip this step.
- Store the password in a password manager.
Menu names can vary a little by app version, but the path is the same.
3. Change or remove the password
In the same menu you can change the password, change the recovery email or turn the feature off. You need to know the current password to do this. If you are handing an account or channel to a new owner as part of a deal, agree in writing who sets which password, and change it as soon as the handover is finished. Our post-delivery checklist lists the order to follow.
4. What if you forget the password
| Situation | Option |
|---|---|
| You have access to the recovery email | Choose Forgot password on the login screen and follow the code sent to the email |
| You lost the recovery email but are logged in elsewhere | Change the password and email from the logged-in device in the settings menu |
| No email and no other session | Telegram offers a reset that takes about 7 days and erases the account's data. Use it only as a last resort and check Telegram's help page first |
5. Safe habits
- Never share login codes or your cloud password with anyone, including people claiming to be support.
- Review Settings → Devices regularly and end sessions you do not recognise.
- Use a strong password that you do not reuse elsewhere.
- Keep the recovery email secure with its own two-factor protection.
Having trouble receiving codes at all? See login code not received. If the account was restricted, read account banned: causes and appeal.
Ready to buy? Compare published prices by creation year to buy aged Telegram accounts, buy old Telegram channels or buy old Telegram groups.
Frequently asked questions
What is Telegram two-step verification?
An extra password, chosen by you, that Telegram asks for at every new login in addition to the login code.
Where do I turn on two-step verification?
Go to Settings, then Privacy and Security, then Two-Step Verification, and set an additional password with a recovery email.
What if I forgot my two-step verification password?
Use Forgot password with your recovery email. Without email access, Telegram offers a reset after about 7 days that erases the account data, so treat it as a last resort.
Do I need two-step verification to transfer a channel?
Yes. Ownership transfer normally requires it to be enabled for a waiting period, commonly 7 days.
Can Telegram support remove my password?
Support cannot bypass it on request. Use the recovery email or the official reset process.
Telegram