Turn On Two-Step Verification
SMS login codes are not enough if someone can receive your SIM messages. Telegram’s cloud password (two-step verification) adds a secret only you know.
Where to Find It
On mobile: Settings → Privacy and Security → Two-Step Verification. On Desktop the path is similar under Settings → Privacy.
Choose a Password You Can Recall
This password is separate from your phone lock screen. Write a recovery hint that helps you, not a stranger. Add a recovery email you still check.
If You Forget the Password
Telegram’s recovery wait can be long. Store the password in a password manager before you need it. This site cannot reset Telegram cloud passwords.
Review Active Sessions After Changes
When you rotate the cloud password, open Devices and drop sessions you do not recognize. Treat unknown desktops as compromised until proven otherwise.