On this page
The essentials
- Keep working sessions signed in during recovery.
- Password reset and account reset have different consequences.
- Follow your app’s waiting date and warnings.
First, identify the password
Telegram may ask for a login code, an app-lock passcode or your cloud password. You chose the last one when enabling two-step verification. It is not automatically your Apple, Google or email password. A separate password field after the login code usually means this additional account password.
Do not uninstall Telegram or sign out on your old phone. First check whether your tablet or computer still opens your chats. An existing session is more useful than another guess: it may offer a password reset that preserves your account. Privately note which devices remain signed in and keep one available throughout recovery.
Before recovery, check your keyboard layout, capitalization and any password hint the app displays. Sometimes the password is being entered using a different alphabet rather than forgotten. Make only a few considered checks. Never upload a list of old passwords to an “access checker” or send it to a helper. If attempts are limited, respect the displayed wait; endless guessing provides no additional recovery entitlement and makes troubleshooting harder.
If you can access your recovery email
Choose the recovery option on the password screen, usually “Forgot password?”. Check the masked address. If you recognize your mailbox, open it yourself and find the email matching the recovery attempt you just started. Enter the code in Telegram, never in a conversation with someone claiming to be support.
The recovery address must have been added and verified beforehand. Typing a new address while locked out is not proof of account ownership. If the email is missing, check spam, the correct mailbox and the request time. Avoid generating dozens of requests; resolve the latest attempt first. If the mailbox itself is inaccessible, use its provider’s official recovery process.
No email, but a session still works
In the signed-in app, open privacy settings and the two-step verification section. Look for recovery or a forgotten-password reset. Telegram supports resetting a password from an existing session after a waiting period; its documentation describes a seven-day timer. Follow the date shown for your particular account, since a recently canceled request can affect a new attempt.
There is no reason to buy an “expedited” recovery service. Keep the device accessible, read Telegram’s service notification and complete the process after the displayed date. If you did not request the reset, use the cancellation option and inspect your active devices. An unexpected request matters even while your chats still work.
If neither email nor a session is available
This is the difficult case. Receiving a phone login code does not by itself remove the cloud password. The app may offer an account reset, which is a different action: it involves deleting previous account data rather than recovering a forgotten secret. Do not confirm any screen that says your account will be deleted before reading every consequence.
Before deciding, check an old laptop, tablet and your password manager again. Look for your own saved entry, not a “Telegram hacking” tool. If no recovery route remains, stopping at the warning is better than losing conversations because the word “reset” sounded familiar. Neither support nor an outside bot should receive your login codes or passwords.
Example: a new phone and an old laptop
You are moving to a new phone. The login code arrives, but you cannot remember the cloud password and your recovery mailbox is long gone. Your laptop still opens conversations. The useful next step is to preserve that laptop session and check password reset there, or on another signed-in device.
Signing out everywhere for a “clean login” would remove a valuable recovery route. Do not sell or wipe the old device before finishing. If you urgently need work documents, use the existing session normally rather than attempting to move the whole account through an unfamiliar program.
After recovery, fix the weak point
Set a unique new password and store it in a trustworthy password manager. Verify a recovery mailbox you can actually access, and protect that mailbox with additional authentication too. Review devices afterward and terminate only sessions you do not recognize or no longer need.
Check the phone number on your profile separately: it should remain under your control. A passkey can make future sign-ins easier, but does not remove an enabled cloud password. A practical success check is knowing where the password is stored, being able to open the recovery mailbox and recognizing your signed-in devices. Signing out everywhere is unnecessary.
