Recovery reference
Telegram Recovery Glossary: The Terms That Decide Your Next Step
Telegram uses a very specific vocabulary, and two of its terms — the one-time login code and the optional cloud password — get confused constantly. This page defines both, plus every term you meet while recovering your own account, so you never take the wrong step or hand the wrong thing to the wrong person.
Jump to the glossaryLogin code vs cloud passwordOwner-only, always
Every definition here serves recovering your own account — nothing else.
Official channels only
We point to Telegram's own apps, @SpamBot and recovery email, never third-party 'tools'.
We never ask for your code
No one on this site will ever request a login code, cloud password or OTP.
No account data collected
This is a reference page; it stores no Telegram credentials or messages.
These are neutral definitions, not a service that logs into your account.
What getting the vocabulary right saves you from
Code stays secret
Recognize the one line you must never share or type into a stranger's screen.
Password vs code
Tell your optional cloud password apart from the one-time login code.
Recovery email
Know where the reset link goes before you ever need it.
Session control
Read the Active Sessions list and end any device that isn't yours.
Reset means deletion
Understand that the 7-day reset erases the account and its cloud chats.
QR sign-in
Learn which device shows the code and which one scans it.
Every step above happens inside Telegram's own apps and official channels.
Owner recovery vs the shortcut
| Login code (one-time) | Cloud password (Two-Step Verification) | |
|---|---|---|
| What it is | A single-use code that authorizes one sign-in on your phone number. | An optional standing password you set yourself to add a second step. |
| Do you create it? | No — Telegram generates and sends a fresh one each time. | Yes — you choose it under Settings > Privacy and Security > Two-Step Verification. |
| Where it arrives | Existing Telegram session first, then SMS, then a phone call. | Nowhere — you type it from memory; a hint and recovery email can help. |
| When you're asked for it | Immediately, to begin any login. | Only after the login code succeeds, as a second step. |
| If forgotten or lost | Request a new one — old codes expire in minutes. | Use the recovery-email reset link, or the 7-day reset (which deletes the account). |
| Should you ever share it? | Never. Anyone asking for your login code is attempting to take over your account. | Never. Support never asks for it either — only phishers do. |
| Does Telegram support ask for it? | Never. | Never. |
The login code proves it's your phone right now; the cloud password proves it's you across every login. They are two different things, and no one but you should ever know either.
FAQ
Which does Telegram ask for first — the login code or the cloud password?
The login code first. You enter your phone number, Telegram sends a one-time code (to an existing session first, then SMS, then a call), and only if you have Two-Step Verification enabled does it then ask for your cloud password. The code proves you hold the number; the cloud password proves you are the owner beyond the SIM.
What's the difference between the login code and the cloud password?
The login code is a single-use code Telegram sends every time you sign in — to an existing session first, then by SMS, then by call. The cloud password is a standing password you created, and it's asked for only after the code succeeds. One is temporary and delivered to you; the other is permanent and known only in your head.
Someone says they can recover any Telegram account if I send them the login code — is that real?
No. That is the exact method used to steal accounts. The login code authorizes a sign-in, so anyone who gets it can log in as you. Telegram support never asks for it, and neither do we. This site only explains how to recover your own account through Telegram's official channels — we never obtain, intercept or ask for anyone's code, and we can't and won't access an account that isn't yours.
Where does the recovery email come in?
It's the optional email you attach to your cloud password. A masked hint appears on the Two-Step Verification screen, and if you forget the cloud password, Telegram emails a reset link there. No recovery email means no reset link — which leaves only the 7-day reset.
How do I tell whether a screen is asking for my one-time code or my cloud password?
The one-time code screen shows empty boxes and says a code was just sent to your phone or another session — it changes every login. The cloud-password screen asks for a password you set yourself and shows a masked recovery-email hint underneath. If the field expects the number texted to you, it's the login code; if it expects something you memorised, it's the cloud password.
What is @SpamBot and when do I use it?
@SpamBot is Telegram's official bot for account limits. If your account was restricted for spam — for example you can't message people who don't have your number — you message @SpamBot to check the status and appeal the limit. It is unrelated to login codes or cloud passwords.
Know the word, then take the step
Recovery goes wrong when the vocabulary does — a login code mistaken for a password, a reset mistaken for a rescue. With the terms straight, the next page in the cluster tells you exactly what to do for your own account, through Telegram's official channels only.
How we verify it's your account