Telegram account recovery

Telegram Account Hacked? Run the Five-Minute Recovery Triage

Handing someone your login code is a common way Telegram accounts are lost. Pick what’s happening and get the exact official step to start with.

Someone logged in with a code I sharedI can still open Telegram but see a strange deviceI'm locked out by a password I never setTelegram says my account deletes in 7 daysI got a login alert but nothing seems wrong

Start recovery

We never ask for your login code or cloud password.

Official flows only

Every step happens inside Telegram, t.me, @SpamBot, or [email protected].

We never ask for your code

No login code, no cloud password, no OTP — not to us, not to anyone.

No account access

You perform every action yourself; we never touch your account.

Nothing to retain

We hold no credentials and store nothing tied to your account.

Cross-check any step against Telegram's own FAQ at telegram.org/faq — this guidance mirrors it.

How it works

1
Get back in with your own code
Open Telegram and enter your number. If you are still signed in on another device, the code usually arrives there in the “Telegram” chat; otherwise use the delivery options your login screen offers, such as SMS.
⏱ 1–2 minutes · The 5-digit code arrives and you reach your chat list.
2
Terminate every other session
Go to Settings > Devices (or Privacy and Security > Active Sessions) and tap Terminate All Other Sessions. This works from a device that has been signed in for more than 24 hours; a fresh login has to wait or use an older device.
⏱ under 1 minute · The device list collapses to just the one in your hand.
3
Set or change your cloud password (2FA)
Settings > Privacy and Security > Two-Step Verification — set a new cloud password and attach a recovery email.
⏱ 2–3 minutes · Two-Step Verification reads Enabled, and a recovery-email hint appears on the password screen.
4
Check for a swapped number or email
Confirm the phone number under Settings and the recovery-email hint under Two-Step Verification still belong to you.
⏱ 1 minute · Both the number and the recovery-email hint match your own.
5
If a password you never set locks you out
The hard sub-case: the intruder turned on Two-Step Verification first. Use “Forgot password” on the password screen to get a code at your recovery email. If you are signed in on any other device, reset the password there instead. Only when you are fully signed out with no recovery email is the account reset left, and it deletes the account.
⏱ depends on the route; the screen shows any wait · Either a recovery code arrives by email, or the reset screen tells you what happens next. The account reset deletes the account and its cloud chats.

There's no ticking meter on this page — but session termination takes effect the instant you tap it, so the sooner you run steps 1–2, the shorter the intruder's window.

Right now

An unknown device is signed into your account
The intruder can read your cloud chats and message your contacts
Your login code may keep arriving to their session first
No cloud password stands between them and a fresh login

After the triage

Only your own device holds an active session
The intruder’s session is ended from a device you have had for more than a day
A cloud password only you know blocks any new login
Your number and recovery email are confirmed as yours

Five minutes of official steps — no tools, no bypasses, no one else's account touched.

Which session can kick out which

A session signed in less than 24 hours ago can’t terminate other sessions. It protects you from a thief, and it decides what you can do right now.

You still have a device signed in for more than a day

Open Settings › Devices on that device.
Tap Terminate All Other Sessions. The intruder’s session ends at once.
Then set or change your cloud password and check that the recovery email is yours.

You only just logged back in

This new session can’t terminate the intruder’s session yet.
The same rule stops the intruder’s new session from ending yours.
Meanwhile, if the account has no cloud password, set one so the code alone can’t get them in again.
Use any older device you still have, or come back after 24 hours, and end the session then.

Telegram shows a notice like the one above when the rule applies. Timings can change between app versions.

We do

✓ Walk you through Telegram's own login, Devices, and Two-Step Verification screens
✓ Help you re-request YOUR login code to your own number
✓ Show you how to terminate other sessions and set a cloud password
✓ Explain the account reset, and what it deletes, when you are locked out with no other route
✓ Explain [email protected] appeals and @SpamBot limit checks

We never

✗ Ask for your login code or cloud password — ever
✗ Access, read, or monitor any Telegram account, including yours
✗ 'Hack back,' unlock, or break into the intruder's account
✗ Bypass or 'remove' two-step verification with tools
✗ Help anyone use a login code that wasn't theirs

This is recovery of YOUR OWN account through official Telegram flows only. We never help access, read, monitor, or 'hack back' anyone else's account, and we never ask for your login code or cloud password. If an attacker already has your code, the fix is terminating sessions and resetting — never sending another code to anyone. We do not help anyone who obtained a code that wasn't theirs.

FAQ

Someone logged in with the code I sent them — can you get my account back or hack them out?

We can walk you through getting YOUR OWN account back, but only through Telegram's official steps, and we will never 'hack,' unlock, or break into the other person's account — that's a hard line, no matter who they are. The real fix isn't retaliation: re-request your own login code, open Settings > Devices and tap Terminate All Other Sessions, then set a cloud password under Two-Step Verification so they can't log back in. We never ask for your login code or password, and we never send a code to anyone — 'send me the code' is exactly how the takeover happened.

I re-requested my code but it went to the intruder's device instead of my SMS — why?

If the attacker still has an active session, Telegram may deliver the code there, in the “Telegram” chat on their device. Use the other delivery options your login screen offers, such as SMS. If you still have any device signed in for more than a day, end their session from it first.

The intruder set a cloud password and now I'm locked out. What now?

This is the hard sub-case. If Two-Step Verification was turned on before you could act and you don’t know the password, no tool can ‘remove’ it, and we won’t pretend otherwise. Try these in order: “Forgot password” sends a code to the recovery email, if one is set. If any of your devices is still signed in, reset the password there; Telegram makes you wait but keeps the account. Only when you are signed out with no recovery email is the account reset left. The account reset deletes the account and its cloud chats. Depending on the account, Telegram either makes you wait (often 7 days) or deletes it straight away; follow what the screen shows.

Telegram says my account is about to be deleted. Did the hacker do that?

Possibly. Someone who has your number but not your cloud password can request an account reset. Telegram sends a service notification about the request to your signed-in devices; open it there and follow its link to cancel the deletion. Then run the triage above to secure the account.

Will setting a cloud password kick the hacker out immediately?

No — and this catches people out. Enabling or changing your Two-Step Verification password does NOT end existing sessions, so the intruder stays logged in until you terminate their session. You need both actions: Terminate All Other Sessions logs them out now, and the cloud password stops them from logging back in with a fresh code. Do them in that order.

Do I have to give you access to my Telegram to fix this?

Never. We never ask for your login code, your cloud password, or access to your account — anyone who does is running the same scam that took it. Every step here is one you perform yourself inside official Telegram screens. Our role is to hand you the exact path: Settings > Devices, Settings > Privacy and Security > Two-Step Verification, @SpamBot for limit checks, and [email protected] if you're fully locked out and need a termination appeal.

Topic

Hacked & suspicious logins

Account hackedSomeone else is in, or changed your number or passwordYou are here

New login detectedTelegram warned you about a sign-in Active sessions & devicesSee and end every logged-in device “Send me the code” scamSomeone asked you to share a login code

All recovery routes

Take your Telegram back — the official way

Handing over a login code is a common way Telegram accounts are lost, and it has a clean, owner-only fix: re-request your own login code, end every other session from a device signed in for more than a day, and set a cloud password the intruder doesn’t have. If they turned on Two-Step Verification first, try the recovery email and any signed-in device before the account reset, which deletes the account and its cloud chats. Every step is yours to run inside Telegram; we never ask for your code or password, and we never touch your account.

Start the five-minute triage

Someone's in your account?Run the 5-minute triageOfficial steps only — we never ask for your code.