Is Telegram Safe? Encryption, Privacy and the Scams to Know

Telegram is safe in some ways and not in others, and the line between them is one menu item most people never open: Start Secret Chat.

Updated 2026-10-03

Is Telegram end-to-end encrypted?

Only in Secret Chats and calls. Telegram's FAQ says voice and video calls are end-to-end encrypted, and so are Secret Chats. Everything else is cloud chat: encrypted between your device and Telegram's servers, then stored encrypted on those servers.

That covers more than people expect:

• Regular one-to-one chats: client-server, not end-to-end.
• Groups, including private groups: client-server. There's no Secret Chat option for groups.
• Channels: client-server, and public channels are readable by anyone with the link anyway.
• Saved Messages and files you send: stored in the cloud like any other cloud chat.

What are Telegram secret chats?

A separate, one-to-one chat type with end-to-end encryption. To start one, open the other person's profile, tap the three-dot menu and choose Start Secret Chat. It opens as a new conversation, marked with a lock, alongside your regular chat with the same person.

Three things make it different. It's device-specific: a Secret Chat started on your phone exists only on that phone, isn't in the cloud and won't appear on your laptop. Logging out deletes it. It supports a self-destruct timer, which removes messages from both devices once the time runs out after they're read. And it's where Telegram's screenshot alert lives, which does Telegram notify screenshots covers in detail.

The catch is that nobody uses it by accident. If you want end-to-end encryption on Telegram, you have to ask for it, one conversation at a time.

Can Telegram see your messages?

Technically, cloud chats are within Telegram's reach, because they're decrypted and re-encrypted on its servers rather than end-to-end. Telegram's FAQ describes splitting the decryption keys across data centres in different jurisdictions, so that several court orders would be needed to force it to give up data, and it says it has disclosed zero bytes of user messages to third parties.

That's a description of policy and architecture, not of mathematics. With a Secret Chat, Telegram can't read the messages even if it wanted to. With a cloud chat, you're relying on how Telegram runs its systems and on its promises. For most conversations that's an acceptable trade. For anything sensitive, start a Secret Chat or use a messenger that encrypts every chat end to end.

Is Telegram safe from hackers?

The weak point is the login, not the encryption. A Telegram account is opened with a code sent to your phone number or app, and anyone who gets that code can log in from their own device and read every cloud chat. Telegram's FAQ is blunt about it: Telegram should never ask for login codes, and you should never share them with anyone.

Three settings close most of the gap:

• Two-step verification. Under Privacy and Security, add a password. Once it's on, a login needs both the code and the password, so a stolen code alone isn't enough.
• Devices. The same settings list every active session. End any you don't recognise, and end all other sessions if you think a code leaked.
• Phone number privacy. By default your number is visible only to your contacts; Privacy and Security, then Phone Number, lets you tighten it. A public username lets people reach you without the number at all.

Does Telegram share data with authorities?

It can, in specific cases. In September 2024 Telegram updated its terms and privacy policy to say that if it receives a valid order from the relevant judicial authorities confirming you're a suspect in a case involving criminal activity that violates its terms, it may disclose your IP address and phone number after a legal review. Before that change, the policy limited this to terrorism cases.

The policy refers to IP addresses and phone numbers, not message content. The broader point stands, though: Telegram isn't beyond the law, and a cloud chat is held by a company that answers to courts. Secret Chats are the only messages Telegram couldn't hand over in readable form.

What are common Telegram scams?

Most of them aim at your login code or your money, and they reuse the same few scripts:

• Fake support. A message claiming to be Telegram, warning that your account will be closed unless you confirm a code. Telegram doesn't ask for codes, ever.
• Code forwarding. A friend's hijacked account asks you to forward a code that just arrived, often framed as a vote or a contest. The code logs into your account.
• Investment and crypto groups. Screenshots of profits, an admin who will trade for you, a withdrawal that needs one more fee first.
• Task and job offers. Paid to like videos or rate hotels, until you're asked to deposit to unlock earnings.
• Impersonated channels. A copy of a popular channel with a similar name, used to push a fake giveaway or link.
• Fake premium or unlock bots. A bot that promises a paid feature for free once you sign in through it.

What does safety mean for a group or channel owner?

Mostly, protecting the admin accounts. A channel belongs to whoever holds its owner account, so two-step verification on that account matters more than any channel setting. Keep the admin list short, and give admins only the rights they need.

Then decide who can find you. Public groups and channels have a link anyone can open, and who can see Telegram channels explains what a public link exposes compared with a private invite link. Content protection can stop members forwarding and saving posts.

Growth is the other half. A public group shows its member count to every visitor, and a near-empty one reads as abandoned. Telegram members adds to that public count with the group's t.me link and a quantity, never a login code or admin rights, and the same honesty applies: it changes the number, not whether the posts are worth staying for. Telegram groups vs channels helps decide which format suits what you're building, and every Telegram service is on the Telegram page.

Questions people ask about Telegram safety