Telegram account recovery

Telegram Account Hacked? Run the Five-Minute Recovery Triage

The 'I sent someone my login code' takeover is the most common way Telegram accounts are lost. Pick what's happening and get the exact official step to start with.

Someone logged in with a code I sharedI can still open Telegram but see a strange deviceI'm locked out by a password I never setTelegram says my account deletes in 7 daysI got a login alert but nothing seems wrong

Start recovery

We never ask for your login code or cloud password.

Official flows only

Every step happens inside Telegram, t.me, @SpamBot, or [email protected].

We never ask for your code

No login code, no cloud password, no OTP — not to us, not to anyone.

No account access

You perform every action yourself; we never touch your account.

Nothing to retain

We hold no credentials and store nothing tied to your account.

Cross-check any step against Telegram's own FAQ at telegram.org/faq — this guidance mirrors it.

How it works

1
Get back in with your own code
Open Telegram, enter your number, and receive the login code Telegram sends to your existing in-app session first, then SMS, then a phone call.
⏱ 1–2 minutes · The 5-digit code arrives and you reach your chat list.
2
Terminate every other session
Go to Settings > Devices (or Privacy and Security > Active Sessions) and tap Terminate All Other Sessions.
⏱ under 1 minute · The device list collapses to just the one in your hand.
3
Set or change your cloud password (2FA)
Settings > Privacy and Security > Two-Step Verification — set a new cloud password and attach a recovery email.
⏱ 2–3 minutes · Two-Step Verification reads Enabled, and a recovery-email hint appears on the password screen.
4
Check for a swapped number or email
Confirm the phone number under Settings and the recovery-email hint under Two-Step Verification still belong to you.
⏱ 1 minute · Both the number and the recovery-email hint match your own.
5
If a password you never set locks you out
The hard sub-case: the intruder enabled 2FA first, so recovery moves to Telegram's official 7-day account reset.
⏱ starts in minutes, completes in 7 days · The reset screen shows a countdown — and remember it deletes the account and all its cloud chats.

There's no ticking meter on this page — but session termination takes effect the instant you tap it, so the sooner you run steps 1–2, the shorter the intruder's window.

Right now

An unknown device is signed into your account
The intruder can read your cloud chats and message your contacts
Your login code may keep arriving to their session first
No cloud password stands between them and a fresh login

After the triage

Only your own device holds an active session
The intruder is logged out of Telegram everywhere at once
A cloud password only you know blocks any new login
Your number and recovery email are confirmed as yours

Five minutes of official steps — no tools, no bypasses, no one else's account touched.

Telegram blocks a brand-new session from terminating other sessions for its first 24 hours — an anti-theft rule that usually keeps the intruder from locking you out right away.
Terminating sessions logs the intruder out of Telegram on every one of their devices instantly.
The 7-day reset erases the account and all its cloud chats — spotting it early lets a single login cancel the countdown.

No countdowns here, no 'only N spots left.' These are the same official steps whether you act now or in an hour — earlier just means fewer of your messages read.

We do

✓ Walk you through Telegram's own login, Devices, and Two-Step Verification screens
✓ Help you re-request YOUR login code to your own number
✓ Show you how to terminate other sessions and set a cloud password
✓ Point you to the official 7-day reset when an attacker has locked you out
✓ Explain [email protected] appeals and @SpamBot limit checks

We never

✗ Ask for your login code or cloud password — ever
✗ Access, read, or monitor any Telegram account, including yours
✗ 'Hack back,' unlock, or break into the intruder's account
✗ Bypass or 'remove' two-step verification with tools
✗ Help anyone use a login code that wasn't theirs

This is recovery of YOUR OWN account through official Telegram flows only. We never help access, read, monitor, or 'hack back' anyone else's account, and we never ask for your login code or cloud password. If an attacker already has your code, the fix is terminating sessions and resetting — never sending another code to anyone. We do not help anyone who obtained a code that wasn't theirs.

FAQ

Someone logged in with the code I sent them — can you get my account back or hack them out?

We can walk you through getting YOUR OWN account back, but only through Telegram's official steps, and we will never 'hack,' unlock, or break into the other person's account — that's a hard line, no matter who they are. The real fix isn't retaliation: re-request your own login code, open Settings > Devices and tap Terminate All Other Sessions, then set a cloud password under Two-Step Verification so they can't log back in. We never ask for your login code or password, and we never send a code to anyone — 'send me the code' is exactly how the takeover happened.

I re-requested my code but it went to the intruder's device instead of my SMS — why?

Telegram delivers the login code to any existing in-app session first, then falls back to SMS, then to a phone call. If the attacker has an active session, the code shows up there. On the code-entry screen tap 'Didn't get the code?' to force an SMS or request a call to your number — that reaches a device only you control. Once you're in, immediately terminate all other sessions so the intruder stops receiving your codes.

The intruder set a cloud password and now I'm locked out. What now?

This is the hard sub-case. If two-step verification was enabled before you could act and you don't know the password, no tool can 'remove' it — and we won't pretend otherwise. Your official route is Telegram's account reset from the password screen. Be aware the 7-day reset DELETES the account and all its cloud chats, then frees the number for a fresh start. Our locked-out guide walks you through the exact screens and the wait.

Telegram says my account will be deleted in 7 days — did the hacker do that?

An attacker who can't get past your cloud password will sometimes start the 7-day account reset out of spite, hoping you don't notice. The fix is simple and reassuring: just log in normally before the timer ends. A successful login cancels any pending reset or self-destruct countdown automatically. If you can still sign in, do it now, then run the triage above to secure the account.

Will setting a cloud password kick the hacker out immediately?

No — and this catches people out. Enabling or changing your Two-Step Verification password does NOT end existing sessions, so the intruder stays logged in until you terminate their session. You need both actions: Terminate All Other Sessions logs them out now, and the cloud password stops them from logging back in with a fresh code. Do them in that order.

Do I have to give you access to my Telegram to fix this?

Never. We never ask for your login code, your cloud password, or access to your account — anyone who does is running the same scam that took it. Every step here is one you perform yourself inside official Telegram screens. Our role is to hand you the exact path: Settings > Devices, Settings > Privacy and Security > Two-Step Verification, @SpamBot for limit checks, and [email protected] if you're fully locked out and need a termination appeal.

Take your Telegram back — the official way

The 'someone logged in with my code' takeover is the most common way Telegram accounts are lost, and it has a clean, owner-only fix: re-request your own login code, terminate every other session, and set a cloud password the intruder doesn't have. If they enabled two-step verification before you could, the 7-day reset is your route — knowing it deletes the account and its cloud chats. Every step is yours to run inside Telegram; we never ask for your code or password, and we never touch your account.

Start the five-minute triage

Someone's in your account?Run the 5-minute triageOfficial steps only — we never ask for your code.