iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To add an extra password to Telegram logins, open Settings > Privacy and Security > Two-Step Verification and follow the prompts. Add and verify a recovery email if you can: it can help if you forget the password. Telegram calls this feature “2-Step Verification”; it is separate from passkeys and from the passcode that locks the app on your device.
What Telegram Two-Step Verification adds
When you sign in on a new device, Telegram requires a login code and the additional password you set up. The code may arrive through Telegram on another device where you are already signed in; do not assume it will always arrive by SMS. Telegram’s FAQ describes the current feature, while the Telegram Team’s April 8, 2015 announcement originally explained the extra password as an added step alongside the login code.
Three account protections serve different purposes:
- Login code: Used as part of signing in on a new device.
- Two-Step Verification password: An extra account password required with the login code.
- App passcode: A separate lock for opening Telegram on a device. It does not replace the account password.
Telegram also describes passkeys as a separate login method that can be used instead of an SMS code. A passkey is not the Two-Step Verification password.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How to turn on Telegram 2-Step Verification
- Open Telegram’s Settings. The route and layout may differ by client or app version.
- Go to Privacy and Security.
- Choose Two-Step Verification. Telegram’s FAQ gives this menu path as Settings > Privacy and Security > 2-Step Verification. Follow the prompts in your app to create the additional password.
- Add a password hint if offered. Choose a hint that will help you remember the password without revealing it to someone else.
- Add a recovery email and verify it. Telegram requires verification for recovery email setup. Complete the code or confirmation prompt it sends.
Telegram’s screen names or sequence can vary between apps, so use the matching Two-Step Verification setting if the labels are not identical. The Telegram API documentation describes the technical email-verification process.
Set up recovery before you need it
A verified recovery email can help you regain access if you forget the Two-Step Verification password. Secure that mailbox with a strong, unique password and, where available, its own two-step verification. Store your Telegram password somewhere you can retrieve it privately; a hint is not a substitute for the password.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Recovery options matter because forgetting the extra password can obstruct signing in on other devices. Telegram’s original announcement warned users to add a recovery email or at least a password hint. If you cannot remember the password, the available recovery route depends on whether you set up a verified email or still have an active Telegram session.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →What to do if you forget the password
If you have a verified recovery email
Request email recovery in Telegram and follow the code or prompt sent to the verified address. Telegram’s technical documentation describes email-based recovery; the exact screens depend on the client and account state.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
If you are still signed in but cannot remember it
Telegram’s API documentation describes a password-reset flow initiated from an already logged-in session that includes a seven-day server-side wait. This is a documented technical behavior, not a guarantee that every user will see the same interface or recover access on the same schedule. Follow the instructions Telegram displays for your account.
If you have neither the password nor a usable recovery route
Do not assume that reinstalling Telegram or requesting another login code will remove the extra-password requirement. The login code and Two-Step Verification password are distinct checks. Use any recovery option presented by Telegram; the available outcome depends on your session and recovery setup.
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Protect Telegram on the device too
Account Two-Step Verification protects the sign-in process on a new device; it does not lock Telegram on a device that is already accessible. Telegram separately recommends setting a strong app passcode under Settings > Privacy and Security. For sensitive conversations, Telegram’s FAQ also points users concerned about personal security to Secret Chats. These are separate protections, not replacements for account recovery setup.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
