Contents
What Is a Passkey, and Why Replace Traditional Verification?
How Telegram Passkey Passwordless Login Works
Improved Security: Advantages of Passkeys over SMS Codes
How to Enable Passkey Login in Telegram
Device Compatibility and Cross-Platform Support
A Better User Experience: Faster, Easier Login
Why Internet Giants Are Adopting Passkey Technology
Recommended Telegram Clients
Telegram has introduced Passkey passwordless login, a major security upgrade that marks the end of easily intercepted SMS verification codes and one-time passwords in instant messaging apps. As a leading global privacy-focused messaging platform, Telegram is demonstrating its commitment to account security while reflecting the broader internet industry’s shift toward safer authentication methods.
What Is a Passkey, and Why Replace Traditional Verification?
A Passkey is a new authentication technology based on public-key cryptography. Users do not need to remember or enter a traditional password. Unlike SMS verification codes and one-time passwords (OTPs), Passkeys help prevent account theft through man-in-the-middle attacks and phishing sites.
Traditional SMS verification codes have several security vulnerabilities. First, SMS messages are transmitted as unencrypted plain text, so hackers can intercept verification codes through SIM-swapping attacks or vulnerabilities within mobile carriers. Second, users often share or forward codes insecurely, increasing the risk of exposure. Third, SMS depends on telephone network infrastructure and may not arrive promptly in some remote areas.
One-time passwords are relatively safer than SMS, but malicious apps or viruses can still steal them. Users must enter the code manually, which is error-prone and makes them vulnerable to phishing pages. Passkeys bypass these issues entirely, providing a stronger and more user-friendly authentication method.
How Telegram Passkey Passwordless Login Works
Telegram’s Passkey feature is based on the WebAuthn standard and the open standards of the FIDO2 Alliance. When users first sign in to Telegram on a new device, the system prompts them to register a Passkey. Users can authenticate with biometrics (fingerprint or face recognition) or their device PIN.
The process works as follows: After the user enters a phone number on the login screen, the Telegram server generates a cryptographic challenge. The device receives the challenge and verifies the user with biometrics or a PIN, then signs the challenge with the private key stored on the device. The device sends the signature back to the Telegram server. The server verifies it using the corresponding public key. If verification succeeds, the user signs in directly, without a password or code.
A key advantage is that the private key never leaves the user’s device and is never transmitted over the network, so hackers cannot steal it by intercepting network traffic. In addition, a Passkey is tied to a specific website or app. Phishing sites cannot trick the user’s device because the private key is activated only in response to a legitimate request from a Telegram server.
Improved Security: Advantages of Passkeys over SMS Codes
From a security perspective, Passkeys represent a major advance in authentication technology. SMS codes rely on a single factor—“something you know” (the code). Passkeys combine “who you are” (biometrics) with “what you have” (a specific device), which is a form of multifactor authentication.
Cybersecurity guidance published by NIST (the U.S. National Institute of Standards and Technology) explicitly recommends no longer relying on SMS as the primary authentication method. Passkey technology follows these modern security standards and provides stronger resistance to attacks.
Passkeys offer several specific security advantages:
Resistant to phishing: Passkeys verify domain authenticity to prevent users from being tricked by phishing sites. Even if users visit a fake Telegram login page, their devices will not automatically fill in or activate a Passkey.
Prevents account hijacking: Because Passkeys do not rely on codes that can be intercepted, attacks such as SIM swapping are ineffective against them.
Reduces password reuse risks: Passkeys are not traditional passwords, so users do not need to reuse the same password across services. This avoids multiple accounts being compromised when one service suffers a data breach.
Prevents brute-force attacks: Passkeys use public-key cryptography and are theoretically immune to brute-force attacks. A hacker would need the user’s device and biometric information to impersonate them.
How to Enable Passkey Login in Telegram
Enabling Passkeys in Telegram is simple and straightforward. First, make sure your device supports biometrics or has a device PIN set. Currently supported devices include iPhones and iPads with Face ID or Touch ID, as well as Android devices with biometrics or a PIN.
In the Telegram app, open “Settings,” find “Account Security” or “Privacy and Security,” then select “Enable Passkey.” The system will guide you through a simple registration process, including verifying your current session and setting biometric preferences.
If you use Telegram on multiple devices, you can register a Passkey on each device separately. When signing in, you can then choose any registered device to authenticate with a Passkey. Telegram provides a flexible Passkey management interface where you can view registered devices and remove a device’s Passkey when needed.
Device Compatibility and Cross-Platform Support
Passkey support was introduced with broad device compatibility in mind. Apple iPhones and iPads support Passkeys starting with iOS 16, while Google Android devices have supported them since Android 9. Windows 11, macOS Ventura, and later versions also support Passkeys.
Telegram ensured that users on different operating systems could use Passkeys when the feature launched. This means users can benefit from Passkey security and convenience whether they use an iPhone, Android, Windows, or Mac.
For users who cannot yet upgrade their device or operating system, Telegram retains traditional sign-in methods, including SMS verification codes and one-time passwords. This ensures backward compatibility and keeps users with older devices from losing access to Telegram.
A Better User Experience: Faster, Easier Login
From a user-experience perspective, Passkey login is much faster than traditional verification. Users no longer need to wait for an SMS or manually enter a code. The whole process takes just a few steps: enter a phone number → verify with biometrics or a PIN → open the app, usually within seconds.
This is especially useful for people who frequently sign in on new devices. For example, if users replace their phones or sign in on a new browser, a Passkey greatly simplifies the process. Traditional methods may require waiting several minutes for a code, or longer when the network is unstable or SMS is delayed.
Telegram also designed its Passkey implementation with user privacy in mind. Biometric information is never uploaded to Telegram servers; all biometric checks take place on the local device. This means Telegram does not even know whether a user used fingerprint or face recognition, further protecting user privacy.
Why Internet Giants Are Adopting Passkey Technology
Promoting Passkeys is not just a Telegram initiative; it is an industry-wide trend. Technology giants such as Google, Apple, and Microsoft are promoting Passkeys on their platforms, and many large internet companies are beginning to support Passkey login.
The reason for this trend is simple: SMS verification has proven to have serious security vulnerabilities. In 2019, the U.S. Federal Communications Commission (FCC) began warning telecom operators about the threat of SIM-swapping attacks. Since then, attacks targeting SMS verification codes have become frequent, leading to many well-known accounts being hacked.
For businesses, adopting Passkeys can significantly reduce the risk of account security incidents, user complaints, and information security breaches. For users, Passkeys offer a simpler and safer login experience. This win-win situation is accelerating the industry’s shift to Passkeys.
FIDO Alliance played an important role in this effort. The alliance brings together hundreds of companies and organizations worldwide to develop and promote passwordless authentication standards. Passkeys are based on the FIDO 2 standard, ensuring compatibility and interoperability across vendors.
Recommended Telegram Clients
Although the official Telegram app offers a complete feature set, some users may prefer third-party clients with additional customization. Turrit is a popular third-party Telegram client that remains fully compatible with the official app while offering many enhanced features.
One notable feature of Turrit is support for up to 10 accounts, which is especially useful for people managing multiple Telegram accounts. For example, content creators or business users may manage personal and work accounts at the same time. Turrit makes it easy to switch between them without repeatedly signing out and back in.
Turrit also has a powerful built-in AI translator that supports message translation with 99% accuracy. Users can translate messages into other languages before sending them or translate entire chats in real time. In addition, Turrit supports real-time page translation, automatically translating websites and Instant View articles opened in the in-app browser.
For people who consume content, Turrit offers a TikTok-style video browsing feature called Video Flow. Users can browse videos from Telegram channels like short-form videos, adjust volume and brightness with gestures, and enjoy a more immersive experience.
Turrit also supports unlimited cloud storage and upload/download speeds boosted by up to 20 times. This can save considerable time for people who frequently exchange large files on Telegram. The app also provides powerful privacy detection features, letting users check their account privacy score and improve their settings with one tap.
For interface design, Turrit offers both side and bottom navigation layouts, which users can choose according to preference. The app also supports custom icons, letting users select a color that matches their phone’s home-screen theme.
Turrit also offers group remarks, which users can customize and keep private to quickly identify and organize groups. The app also supports pinning up to 10 chats so frequently used groups and channels are always easy to access.
For users who want to block spam and advertising messages, Turrit provides keyword blocking settings and channel ad filtering. Users can choose words to block and automatically filter ads and spam containing those keywords. They can also filter messages from specific users in groups.
Downloading Turrit is simple. Visit the official website and select the iOS or Android version for your device. The app provides clear download instructions:
Overall, Turrit is an excellent alternative to the official Telegram app, especially for users who need advanced features and greater customization. It retains all core Telegram features and security protections, including full support for Passkey login, while adding many useful enhancements. Whether users need to manage multiple accounts, translate with AI, or enjoy enhanced video browsing, Turrit provides a richer experience.