Telegram Launches Passkey Auth Worldwide

Telegram added Passkeys as a login method, now rolling out globally. The key advantage of Passkeys is the ability to log into your account with a single touch, without entering your phone number and looking for an OTP code.

How to create a passkey:

• Ensure you have the latest version of the app (Android — 12.2.10; iOS — 12.2.3).

• This new feature must be configured in advance. Go to Settings › Privacy and Security › Passkeys.

• If the "Passkeys" option is missing, it is not yet available for your account.

• Tap "Add Passkey" and confirm its creation.

• Your device may request your screen lock code or biometrics to unlock the key storage.

• The created key will appear in the list.

How to log in using a passkey:

• On the latest version of Telegram for Android or iOS, the app will automatically offer to select a passkey for login.

• If this doesn't happen, a "log in with passkey" link will appear under the "Your phone number" header after a few seconds — tap it.

• Tapping the button launches your password manager, which prompts you to select a key, verifies your identity via face, fingerprint, or screen lock PIN, and then transmits the selected key to the messenger.

• The passkey functions as both the phone number and the one-time verification code simultaneously.

• If you have Two-Step Verification enabled, you will still need to enter your password you've set in Security settings.

Q&A:

1. Can I register a new account with a Passkey?
No, this feature works only as an alternative to logging in via SMS or email.

2. What happens if I lose my phone?
The key is stored on the device where it was created, but it can be synced with other devices via Google Password Manager, iCloud Passwords, or other applications.

You can check your password manager settings on your device:
• On Android: Open "Settings" and search for "Google Autofill". Ensure the correct Google account is selected in the password manager.
• On iOS: Open "Settings" and tap your name at the top. Select iCloud › Passwords. Ensure sync is enabled.

3. What if my phone or key is stolen?
The Passkey is securely stored in the encrypted enclave of your password manager — it cannot be intercepted or entered on a phishing site. Additionally, you can always remove the key associated with your account in Telegram's Security settings.

4. Are third-party password managers supported?
Yes. If you use a password manager that supports Passkeys (e.g., Bitwarden, KeePassDX) and enable it in your system's autofill settings, you can save your Telegram passkey there.

5. Which clients support Passkeys?
Keys are supported on the latest versions of official Telegram apps for Android, iOS, and Telegram Desktop (Windows only — requires Windows Hello).

Not supported: Telegram Desktop on macOS and Linux, Telegram for macOS (Swift), Telegram WebK and WebA, Telegram X. Any unofficial apps won't be supported in this update due to Passkey security requirements.

6. Can I have multiple keys for one account on one device?
Yes. A list will appear on the login screen, allowing you to select the desired profile.

7. What's the maximum number of passkeys I can have?
Up to 5 on a Telegram account

If you have trouble setting up Passkeys on Android, please read our Passkeys Troubleshooting Guide for Android.

#security

Passkeys, Gift Purchase Offers and More

Telegram for Android has been updated to version 12.2.10, and Telegram for iOS to version 12.2.4. Here is what is new in this release:

• Passkeys: You can now create a Passkey on your device. It allows you to instantly log in to Telegram using a PIN or biometric data (fingerprint or Face ID). This makes signing in accessible even when you have no active sessions, no cellular service, or when SMS delivery from Telegram is blocked by carriers.

The @tginfo team has prepared a detailed guide and FAQ regarding the Passkeys feature. We've also developed troubleshooting steps for common problems with Passkeys on Android.

• Gift Purchase Offers: When viewing gifts in a user's profile, you can now offer to buy a gift you like from the owner, but for no less than 125 Stars or 1.1 TON. You set the price and duration of the offer yourself, and the amount is reserved for the validity period of the offer.

• Extended Audio Selection in Stories: Now, when creating a story, you can use music from your Saved Music playlist, as well as from recently sent audio files in your chats.

Other additions:
• View all attributes of collectible gifts.
• Channel settings now allow restricting which administrators can ban users.
• Note: the extended Liquid Glass redesign from the Beta version is not active in this release.

Blog: telegram.org/blog/passkeys-and-gift-offers

Download:
• Android: Google Play, APK from the official website or the verified channel
• iOS: App Store

#update #Android #iOS

Official Smart Glocal Support Bot

Some time ago, users discovered the bot @tgpb_support_bot, which has an official verification checkmark and is designed to handle inquiries related to Telegram Premium subscription payments made through @premiumbot.

This bot can be useful for users who have paid for a subscription via @premiumbot but haven’t seen it appear on their accounts.

#premium

Major Redesign of Android App

In 12.3 Beta version of Telegram for Android, the app’s interface has undergone a substantial redesign.

What’s new:

• The side menu has been completely removed. Key sections such as "Profile", "Contacts", and "Calls" have been moved to the bottom navigation bar, while the remaining options are now located in a three-dot overflow menu positioned directly above the chat list.

• The "Settings" section is now accessible in two ways: via a large "Settings" button on the Profile tab, or through the three-dot menu at the top of the screen.

• Long-pressing the "Profile" tab in the tab bar allows you to quickly switch between your signed-in accounts. This can also be done from the Settings section.

• The global search bar is now available directly above the chat list and remains visible while scrolling.

• The button for creating a new Story has been moved to the top of the screen.

• The icons next to items on the main "Settings" screen have been updated.

• The active chat folder is now displayed in a capsule-style design.

Subscribe to @betainfo — our second channel. There, our editorial team shares all the new features discovered in the Telegram beta versions.

#Android #beta

Telegram for Android and iOS Have Been Updated to Version 12.3

Telegram has postponed a large-scale redesign on Android — there is no bottom navigation menu in the iOS style in this version.

• Brief AI Summaries: When viewing long posts in channels, you can instantly view summaries of their content. A summarized version of Instant View articles is automatically displayed at the top of those, as well.

To generate such excerpts, open-source models running on the decentralized Cocoon network are used.

• Complete support for Liquid Glass on iOS: The client now fully supports the "Liquid Glass" style. Thus, transparent elements and soft light refraction have been added to all areas of the application.

Other New Features:
• The button for adding media to drafts has been moved on Android.
• Chat translation is now performed using Cocoon.

Article: https://telegram.org/blog/new-design-ai-summaries

Download the update:
• Android: Google Play, APK from the official site or verified channel.
• iOS: App Store.

#update #Android #iOS

Telegram Blocks Links to Amazon's CDN Domain

Updated 22:00 UTC: The problem was resolved.

Users are reporting that Telegram is blocking messages containing the cloudfront․net domain, which is frequently used to host media files for a wide range of websites.

When attempting to send text containing this domain, the app displays an error popup stating: "Sorry, you can only send messages to mutual contacts at the moment".

The popup is a mistake: The alert regarding account restrictions (a spam ban) is inaccurate. Users encountering this error have not actually been restricted.

The @tginfo team speculates that Telegram may have inadvertently blacklisted the popular Amazon web service domain in response to some malicious activity. It appears the app is misinterpreting the server rejection to deliver the message, triggering a generic placeholder message regarding a spam ban.

Telegram Mobile Apps May Expose IP Address via Quick Proxy Setup Links

A security researcher discovered that Telegram's mobile apps do not warn users about potential IP exposure when clicking quick proxy setup links. While not a major danger for average users, this is undesirable for those concerned about being surveilled.

The Core Issue

Typically, clicking an external link or unsafe file triggers a warning pop-up. However, clicking a quick proxy setup link is handled differently: the app immediately attempts to connect to the server to check its availability, bypassing the warning entirely.

An attacker can disguise such a link as a username or another hyperlink. The moment it is clicked, the app sends a request to the server controlled by the attacker, thereby revealing the user's IP address.

• The issue affects only Android and iOS clients.
• The @tginfo team independently confirmed that Telegram Desktop, macOS, Telegram X, and Web versions handle these links safely and do not automatically connect to proxy servers.

The Risk is Low

It is important to note that for most users, this problem is not critical. An IP address usually only reveals an approximate location (city level), and many users have dynamic IPs.

Similar flaws, such as EvilLoader, have been fixed by the Telegram team in the past. We believe developers may disable the automatic check for proxies opened from formatted links in upcoming updates.

For those whom IP privacy is critical, we recommend using a system-wide VPN. This is the only reliable way to prevent IP leaks across apps.

#security

Telegram Tests "Gift Crafting": Casino Mechanics and Asset Burning

A new feature for gifts called "crafting" has been discovered in Telegram's code. The concept is simple: users will be able to combine multiple gifts into one to obtain a rarer item.

@tginfo summarizes the mechanics found by teleLakel:

• Risk of losing everything. The main feature is that the process does not guarantee success. Selected gifts may simply "burn". When combining two gifts, the chance of losing them is highest; with four, the risk is lower but still present.
• Merging. You can use up to 4 gifts for crafting. The resulting item will inherit the ID of the first selected gift (e.g., if you select gifts in the order [100, 50, 200], the new gift will receive #100).
• Color inheritance. If you combine 4 gifts of the same color, the result is guaranteed to have that same color. In other cases, attributes are rolled randomly.
• Irreversibility. Gifts created this way cannot be used for crafting again.
• Incompatibility with NFTs. teleLakel speculates that gifts previously minted on the TON blockchain as NFTs might be incompatible with the new mechanics.

Why is this needed?

Effectively, Telegram is introducing a gambling element. Users will face a choice: keep what they have or risk their assets for a chance to get a unique model.

From a market perspective, this is a classic way to drive up prices. "Consumable" gifts will be burned in large quantities, their total supply will decrease, meaning remaining and newly created items could increase in value.

The feature is not yet functional and may change by release. Crafting could become paid, the logic might change, or additional restrictions could be applied.

Previously, the @tginfo team discovered that the Telegram team is working on a gambling game, Emoji Stake, which allows betting on dice rolls. The messenger team also introduced an auction system for gifts, allowing Telegram to sell new models for the maximum price offered by the market.

@tginfo Editors Opinion: Untimely Gambling

Introducing blatant gambling mechanics in early 2026 seems like a highly risky move. Telegram is going against the trend of platforms striving for regulatory compliance.

• Brazil. Starting in March, a ban on selling lootboxes to children comes into effect. A local court has previously blocked Telegram, and repeated disregard for laws could cost the messenger this market.
• EU and Australia. The European Union is preparing laws against "addictive design," while in Australia, such mechanics automatically assign an "18+" rating to the app, threatening removal from public access in app stores.

#gifts

Premium Subscription Is Now Sufficient for Sending Custom Emojis in Bots

Bot developers have noticed that Telegram has changed the logic regarding premium emojis in bots. Previously, a bot could send custom emojis only if it had an NFT username linked to it. Initially, linking such a username cost 5,000 TON, and later the price was reduced to 1,000 TON.

How it works now:
• If a bot is created on an account with a Telegram Premium subscription, it can send premium emojis in messages.
• If the account owner does not have Premium, the bot cannot use premium emojis.
• The feature is tied specifically to the account owner, not to the bot having an NFT username.

Important details:
• Premium emojis do not work in the bot's inline mode.
• Bots can't leave custom reactions (except in cases mentioned in Bot API documentation).
• Bots without an NFT username can't send custom emoji to channels.
• The Telegram team has not yet commented on the change — this behavior may change.

UPD. 23:15 UTC: Added a clarification that bots can't send custom emoji to channels.

#bots #premium