Telegram’s New Interface Is Inaccessible to Users with Visual Impairments

Following the release of Telegram’s newly redesigned mobile apps, users with visual impairments have found themselves at a significant disadvantage. According to user reports, the elements in the app’s bottom navigation bar are no longer identifiable by screen readers such as VoiceOver. The buttons in the bottom panel cannot be detected by screen-reading software, and many interface controls no longer receive accessibility focus.

This is not the first time Telegram has faced accessibility issues. Between 2020 and 2023, blind users repeatedly reported numerous bugs — including being unable to scroll through the chat list, access message reactions, or use unlabeled buttons in the settings menu.

Log in to Telegram via Passkeys Without Codes or Phone Numbers

In the future, Telegram plans to introduce authentication via Passkeys. The first signs of this feature have appeared in the Beta version of Telegram for Android 12.2.8.

The key advantage of Passkeys is the ability to log into your account without entering a phone number or a one-time code. This distinguishes it from logging in via email or Google / Apple ID, which serve merely as alternatives to receiving an SMS code.

A “log in using passkey” button has appeared on the app's login screen. Tapping it launches your password manager, which verifies your identity using Face ID, fingerprint, or your screen lock PIN. From it, the messenger receives your signature, which functions as your login, password, and one-time confirmation code all simultaneously.

Much like email login, this new feature will need to be pre-configured in Telegram’s security settings. The key will be saved on the phone where it was created, but it can be synced with other devices via Google Password Manager, iCloud Passwords, or other applications.

Why is this important?

• Reduced reliance on SMS: This makes logging in possible even if you don’t have active sessions and your mobile operator is blocking SMS messages from Telegram.

• Security: The Passkey is stored in a secure enclave of your password manager—it cannot be intercepted or entered on a phishing site.

• Speed: Login is performed with a single touch via biometrics (face or fingerprint). When you switch phones, the Passkey automatically syncs via your password manager using your Google account or Apple ID.

The feature is currently under development and is not yet fully functional. Stay tuned for news about Telegram Beta versions on our Beta Info channel.

#Android #beta #security

Telegram Launches Passkey Auth Worldwide

Telegram added Passkeys as a login method, now rolling out globally. The key advantage of Passkeys is the ability to log into your account with a single touch, without entering your phone number and looking for an OTP code.

How to create a passkey:

• Ensure you have the latest version of the app (Android — 12.2.10; iOS — 12.2.3).

• This new feature must be configured in advance. Go to Settings › Privacy and Security › Passkeys.

• If the "Passkeys" option is missing, it is not yet available for your account.

• Tap "Add Passkey" and confirm its creation.

• Your device may request your screen lock code or biometrics to unlock the key storage.

• The created key will appear in the list.

How to log in using a passkey:

• On the latest version of Telegram for Android or iOS, the app will automatically offer to select a passkey for login.

• If this doesn't happen, a "log in with passkey" link will appear under the "Your phone number" header after a few seconds — tap it.

• Tapping the button launches your password manager, which prompts you to select a key, verifies your identity via face, fingerprint, or screen lock PIN, and then transmits the selected key to the messenger.

• The passkey functions as both the phone number and the one-time verification code simultaneously.

• If you have Two-Step Verification enabled, you will still need to enter your password you've set in Security settings.

Q&A:

1. Can I register a new account with a Passkey?
No, this feature works only as an alternative to logging in via SMS or email.

2. What happens if I lose my phone?
The key is stored on the device where it was created, but it can be synced with other devices via Google Password Manager, iCloud Passwords, or other applications.

You can check your password manager settings on your device:
• On Android: Open "Settings" and search for "Google Autofill". Ensure the correct Google account is selected in the password manager.
• On iOS: Open "Settings" and tap your name at the top. Select iCloud › Passwords. Ensure sync is enabled.

3. What if my phone or key is stolen?
The Passkey is securely stored in the encrypted enclave of your password manager — it cannot be intercepted or entered on a phishing site. Additionally, you can always remove the key associated with your account in Telegram's Security settings.

4. Are third-party password managers supported?
Yes. If you use a password manager that supports Passkeys (e.g., Bitwarden, KeePassDX) and enable it in your system's autofill settings, you can save your Telegram passkey there.

5. Which clients support Passkeys?
Keys are supported on the latest versions of official Telegram apps for Android, iOS, and Telegram Desktop (Windows only — requires Windows Hello).

Not supported: Telegram Desktop on macOS and Linux, Telegram for macOS (Swift), Telegram WebK and WebA, Telegram X. Any unofficial apps won't be supported in this update due to Passkey security requirements.

6. Can I have multiple keys for one account on one device?
Yes. A list will appear on the login screen, allowing you to select the desired profile.

7. What's the maximum number of passkeys I can have?
Up to 5 on a Telegram account

If you have trouble setting up Passkeys on Android, please read our Passkeys Troubleshooting Guide for Android.

#security

Passkeys, Gift Purchase Offers and More

Telegram for Android has been updated to version 12.2.10, and Telegram for iOS to version 12.2.4. Here is what is new in this release:

• Passkeys: You can now create a Passkey on your device. It allows you to instantly log in to Telegram using a PIN or biometric data (fingerprint or Face ID). This makes signing in accessible even when you have no active sessions, no cellular service, or when SMS delivery from Telegram is blocked by carriers.

The @tginfo team has prepared a detailed guide and FAQ regarding the Passkeys feature. We've also developed troubleshooting steps for common problems with Passkeys on Android.

• Gift Purchase Offers: When viewing gifts in a user's profile, you can now offer to buy a gift you like from the owner, but for no less than 125 Stars or 1.1 TON. You set the price and duration of the offer yourself, and the amount is reserved for the validity period of the offer.

• Extended Audio Selection in Stories: Now, when creating a story, you can use music from your Saved Music playlist, as well as from recently sent audio files in your chats.

Other additions:
• View all attributes of collectible gifts.
• Channel settings now allow restricting which administrators can ban users.
• Note: the extended Liquid Glass redesign from the Beta version is not active in this release.

Blog: telegram.org/blog/passkeys-and-gift-offers

Download:
• Android: Google Play, APK from the official website or the verified channel
• iOS: App Store

#update #Android #iOS

Official Smart Glocal Support Bot

Some time ago, users discovered the bot @tgpb_support_bot, which has an official verification checkmark and is designed to handle inquiries related to Telegram Premium subscription payments made through @premiumbot.

This bot can be useful for users who have paid for a subscription via @premiumbot but haven’t seen it appear on their accounts.

#premium

Major Redesign of Android App

In 12.3 Beta version of Telegram for Android, the app’s interface has undergone a substantial redesign.

What’s new:

• The side menu has been completely removed. Key sections such as "Profile", "Contacts", and "Calls" have been moved to the bottom navigation bar, while the remaining options are now located in a three-dot overflow menu positioned directly above the chat list.

• The "Settings" section is now accessible in two ways: via a large "Settings" button on the Profile tab, or through the three-dot menu at the top of the screen.

• Long-pressing the "Profile" tab in the tab bar allows you to quickly switch between your signed-in accounts. This can also be done from the Settings section.

• The global search bar is now available directly above the chat list and remains visible while scrolling.

• The button for creating a new Story has been moved to the top of the screen.

• The icons next to items on the main "Settings" screen have been updated.

• The active chat folder is now displayed in a capsule-style design.

Subscribe to @betainfo — our second channel. There, our editorial team shares all the new features discovered in the Telegram beta versions.

#Android #beta

Telegram for Android and iOS Have Been Updated to Version 12.3

Telegram has postponed a large-scale redesign on Android — there is no bottom navigation menu in the iOS style in this version.

• Brief AI Summaries: When viewing long posts in channels, you can instantly view summaries of their content. A summarized version of Instant View articles is automatically displayed at the top of those, as well.

To generate such excerpts, open-source models running on the decentralized Cocoon network are used.

• Complete support for Liquid Glass on iOS: The client now fully supports the "Liquid Glass" style. Thus, transparent elements and soft light refraction have been added to all areas of the application.

Other New Features:
• The button for adding media to drafts has been moved on Android.
• Chat translation is now performed using Cocoon.

Article: https://telegram.org/blog/new-design-ai-summaries

Download the update:
• Android: Google Play, APK from the official site or verified channel.
• iOS: App Store.

#update #Android #iOS

Telegram Blocks Links to Amazon's CDN Domain

Updated 22:00 UTC: The problem was resolved.

Users are reporting that Telegram is blocking messages containing the cloudfront․net domain, which is frequently used to host media files for a wide range of websites.

When attempting to send text containing this domain, the app displays an error popup stating: "Sorry, you can only send messages to mutual contacts at the moment".

The popup is a mistake: The alert regarding account restrictions (a spam ban) is inaccurate. Users encountering this error have not actually been restricted.

The @tginfo team speculates that Telegram may have inadvertently blacklisted the popular Amazon web service domain in response to some malicious activity. It appears the app is misinterpreting the server rejection to deliver the message, triggering a generic placeholder message regarding a spam ban.

Telegram Mobile Apps May Expose IP Address via Quick Proxy Setup Links

A security researcher discovered that Telegram's mobile apps do not warn users about potential IP exposure when clicking quick proxy setup links. While not a major danger for average users, this is undesirable for those concerned about being surveilled.

The Core Issue

Typically, clicking an external link or unsafe file triggers a warning pop-up. However, clicking a quick proxy setup link is handled differently: the app immediately attempts to connect to the server to check its availability, bypassing the warning entirely.

An attacker can disguise such a link as a username or another hyperlink. The moment it is clicked, the app sends a request to the server controlled by the attacker, thereby revealing the user's IP address.

• The issue affects only Android and iOS clients.
• The @tginfo team independently confirmed that Telegram Desktop, macOS, Telegram X, and Web versions handle these links safely and do not automatically connect to proxy servers.

The Risk is Low

It is important to note that for most users, this problem is not critical. An IP address usually only reveals an approximate location (city level), and many users have dynamic IPs.

Similar flaws, such as EvilLoader, have been fixed by the Telegram team in the past. We believe developers may disable the automatic check for proxies opened from formatted links in upcoming updates.

For those whom IP privacy is critical, we recommend using a system-wide VPN. This is the only reliable way to prevent IP leaks across apps.

#security

Telegram Tests "Gift Crafting": Casino Mechanics and Asset Burning

A new feature for gifts called "crafting" has been discovered in Telegram's code. The concept is simple: users will be able to combine multiple gifts into one to obtain a rarer item.

@tginfo summarizes the mechanics found by teleLakel:

• Risk of losing everything. The main feature is that the process does not guarantee success. Selected gifts may simply "burn". When combining two gifts, the chance of losing them is highest; with four, the risk is lower but still present.
• Merging. You can use up to 4 gifts for crafting. The resulting item will inherit the ID of the first selected gift (e.g., if you select gifts in the order [100, 50, 200], the new gift will receive #100).
• Color inheritance. If you combine 4 gifts of the same color, the result is guaranteed to have that same color. In other cases, attributes are rolled randomly.
• Irreversibility. Gifts created this way cannot be used for crafting again.
• Incompatibility with NFTs. teleLakel speculates that gifts previously minted on the TON blockchain as NFTs might be incompatible with the new mechanics.

Why is this needed?

Effectively, Telegram is introducing a gambling element. Users will face a choice: keep what they have or risk their assets for a chance to get a unique model.

From a market perspective, this is a classic way to drive up prices. "Consumable" gifts will be burned in large quantities, their total supply will decrease, meaning remaining and newly created items could increase in value.

The feature is not yet functional and may change by release. Crafting could become paid, the logic might change, or additional restrictions could be applied.

Previously, the @tginfo team discovered that the Telegram team is working on a gambling game, Emoji Stake, which allows betting on dice rolls. The messenger team also introduced an auction system for gifts, allowing Telegram to sell new models for the maximum price offered by the market.

@tginfo Editors Opinion: Untimely Gambling

Introducing blatant gambling mechanics in early 2026 seems like a highly risky move. Telegram is going against the trend of platforms striving for regulatory compliance.

• Brazil. Starting in March, a ban on selling lootboxes to children comes into effect. A local court has previously blocked Telegram, and repeated disregard for laws could cost the messenger this market.
• EU and Australia. The European Union is preparing laws against "addictive design," while in Australia, such mechanics automatically assign an "18+" rating to the app, threatening removal from public access in app stores.

#gifts

Premium Subscription Is Now Sufficient for Sending Custom Emojis in Bots

Bot developers have noticed that Telegram has changed the logic regarding premium emojis in bots. Previously, a bot could send custom emojis only if it had an NFT username linked to it. Initially, linking such a username cost 5,000 TON, and later the price was reduced to 1,000 TON.

How it works now:
• If a bot is created on an account with a Telegram Premium subscription, it can send premium emojis in messages.
• If the account owner does not have Premium, the bot cannot use premium emojis.
• The feature is tied specifically to the account owner, not to the bot having an NFT username.

Important details:
• Premium emojis do not work in the bot's inline mode.
• Bots can't leave custom reactions (except in cases mentioned in Bot API documentation).
• Bots without an NFT username can't send custom emoji to channels.
• The Telegram team has not yet commented on the change — this behavior may change.

UPD. 23:15 UTC: Added a clarification that bots can't send custom emoji to channels.

#bots #premium

Posting Stories Becomes Available to All Users

This evening, Telegram enabled the ability to post Stories without a Premium subscription for all users — including accounts associated with Iranian, Russian and Ukrainian phone numbers.

At the same time, some users report that they still cannot post Stories without a subscription. The @tginfo editorial team suggests that access to the feature is being rolled out gradually.

Within a 24-hour period, a user can post only one Story under their own name. To increase this limit to up to 100 Stories per day, a Premium subscription is required.

Note that some options in the Story editor remain Premium-only, such as adding a link sticker and choosing the story duration.

#Stories

Lifetime Limit on Posting Stories Without Premium

Some users without a Telegram Premium subscription from several regions (including Russia, Ukraine, and European countries) have found themselves unable to post stories. The app informs them that the feature is available only with a subscription, while for other users it is available for free.

Based on our own observations, @tginfo editors have deduced the following rule:

A user can post stories for free only if the total number of stories ever posted on their account is less than three. Moreover, there are important caveats.

How the Limit Works

The counter is cumulative. It accounts for absolutely all stories posted during the entire existence of your account, including:

• Stories you posted immediately after the feature appeared, when it wasn't paid yet.
• Stories you have deleted.
• Stories you posted earlier when you had an active Premium subscription.

Thus, if you actively used stories with a subscription in the past but are now without it, your "free" limit is likely already exhausted. To post a new one, the app will require you to subscribe to Premium.

How to Know When the Limit Is Reached

The interface does not warn about reaching the limit in advance.

If, when attempting to post, you see a popup "Posting stories is currently available only to subscribers of Telegram Premium." rather than a message about reaching the daily limit — this means your counter of free stories is completely exhausted.

Confirmation From Developers

The messenger's developers have confirmed that this is not a bug, but intended behavior.

The restriction applies in regions where stories were initially introduced as a paid option. The @tginfo editors don't know whether the "3 posts for all time" limit applies to countries where this feature was free since launch.

#stories #premium #limits