Table of Contents
What Are Passkeys and How Do They Work?
How Telegram Passkeys Solve the Problem of Lost Phone Numbers
Difference Between Passkeys and Traditional Two-Step Verification
How to Set Up and Bind Passkeys in Telegram
Security Analysis of Passkeys
Steps to Log In to Telegram Using Passkeys
Complete Account Recovery Process
Frequently Asked Questions
Recommended Fully-Featured Telegram Clients
The latest passkey feature launched by Telegram brings a brand-new way for users to secure and recover their accounts. This innovative feature allows users to successfully log in and recover their accounts even if they lose their phone number, fundamentally changing the authentication method that traditionally relies on mobile numbers. Passkeys are based on biometric and cryptographic principles, offering stronger account protection while simplifying the login process. For users who frequently change phone numbers or worry about their numbers being stolen, this is a significant security upgrade.
What Are Passkeys and How Do They Work?
Passkeys are a modern authentication technology used to replace traditional passwords and one-time verification codes. This technology uses public-key cryptography combined with your device's biometric features (such as fingerprint or facial recognition) or device passcode. When you set up a passkey in Telegram, the system generates a pair of keys on your device—a public key and a private key. The public key is stored on the Telegram server, while the private key is securely kept on your device.
When logging in, the system verifies your identity by matching a public key and a private key, rather than sending an SMS verification code or requiring a password. This method eliminates the risk of traditional verification codes being intercepted and avoids the possibility of passwords being cracked. The design of passkeys follows the WebAuthn standard, which is an international security standard jointly established by the World Wide Web Consortium and the FIDO Alliance.
How Telegram Passkeys Solve the Problem of Lost Phone Numbers
Traditional Telegram account recovery relies entirely on the phone number used at registration. When users lose their phone number or cannot receive verification codes, they find themselves in a position where they cannot access their account. The new passkey feature from Telegram breaks through this bottleneck. Even if your phone number is deactivated, transferred to someone else, or you have changed to a new number, as long as you have previously set up a passkey, you can log in to your account using fingerprint, facial recognition, or your device passcode.
This solution is particularly suitable for the following scenarios: accidentally losing an old phone number, numbers being recycled by carriers, moving across borders and needing a new number, or SIM cards being stolen due to phone theft. With passkeys, you possess account access that is independent of your phone number, significantly increasing the accessibility and security of your account.
Difference Between Passkeys and Traditional Two-Step Verification
Two-step verification is an existing security feature of Telegram that requires users to enter two factors: a phone number and a password. However, this method still relies on the phone number as the initial verification method. Passkeys are completely different; they are a multi-factor authentication technology that does not require any passwords or SMS verification codes.
Features of traditional two-step verification: Requires a phone number to receive verification codes; easily prone to delays in verification code delivery due to network latency or carrier issues; passwords can be stolen by keyloggers or phishing attacks; the recovery process still requires an email address or phone number.
Advantages of passkeys: Does not rely on phone numbers or networks; uses device biometric features to provide strong authentication; the private key never leaves the device and will not be leaked by the server; even if a device is lost, the account can be recovered on other authorized devices; cannot be compromised by man-in-the-middle attacks or phishing.
Both security measures can be enabled simultaneously. It is recommended that users keep two-step verification as a backup option while enabling passkeys, which creates multiple layers of protection.
How to Set Up and Bind Passkeys in Telegram
The process of setting up a Telegram passkey is simple and intuitive. First, open the Telegram app and enter the "Settings" menu. Find the "Privacy and Security" option and scroll down to the new "Passkeys" section. Tap the "Add Passkey" or "Create Passkey" button.
The system will ask you to confirm your identity, usually requiring you to enter your current login password or verify through biometric authentication. Once confirmed, Telegram will prompt you to choose which device to store the passkey on. You can choose to create the passkey on your current device or use a cross-platform key manager, such as iCloud Keychain (for Apple users) or Google Password Manager (for Android users).
After selecting the storage location, the system will require biometric authentication (fingerprint or facial recognition) or for you to enter your device passcode. After completing this step, the passkey is successfully bound to your account. You will see a confirmation screen where you can name the passkey, such as "iPhone 14" or "Primary Device," for easy future management.
It is recommended to set up passkeys on at least two different devices. This way, even if you lose or damage one device, you can still recover your account using the other. Telegram allows users to bind different passkeys for multiple devices.
Security Analysis of Passkeys
Passkeys use the most advanced cryptographic technology available today. Key security features include asymmetric encryption, biometric protection, and device binding. Asymmetric encryption means that even if Telegram's servers are hacked, attackers will only obtain the public key and cannot derive the private key from it. The mathematical properties of the public key ensure one-way security, which is cryptographically absolute.
Biometric protection adds an extra layer of security. Even if someone obtains your phone, they cannot use the passkey to log in without your fingerprint or facial information. This is safer than setting a complex password because biological traits are unique and difficult to replicate. Device binding ensures that passkeys can only be used on specific trusted devices. When you attempt to log in on a new device, Telegram will recognize it as an unfamiliar device, so even if an attacker knows your passkey ID, they cannot use it directly.
Compared to SMS verification codes, passkeys completely avoid the risk of SIM swapping fraud. Hackers cannot receive verification codes by deceiving carriers into transferring your number. Passkeys also cannot be stolen by phishing attacks because they are not text codes, but rather a cryptographic verification process on the device.
However, security also depends on the user's habits. It is important to protect your device passcode, avoid accessing sensitive accounts on public networks, and regularly check your list of logged-in devices.
Steps to Log In to Telegram Using Passkeys
After setting up passkeys, logging in to Telegram becomes even more streamlined. Open the Telegram app or web version, and enter your phone number on the login screen. The system will automatically detect the passkey associated with the account and prompt a "Log in with passkey" or similar option. Tap this option, and you will be asked to perform biometric authentication or enter your device passcode.
On Apple devices, you will see a prompt to "Use Face ID" or "Use Touch ID." After tapping it, the camera or fingerprint sensor will activate. Once recognition is complete, the login process is finished immediately. On Android devices, the process is similar, and the system will call the device's biometric API. This entire process usually takes only two to three seconds.
If you are logging in on an unfamiliar device, such as temporarily accessing your account on a friend's phone, you can choose the "Log in with password" option. Enter the two-step verification password you previously set, and then follow the prompts to confirm your login via email. This ensures that you still have a backup option even if you are not carrying the device with the passkey.
Complete Account Recovery Process
When you have lost your phone number but possess a passkey, account recovery becomes straightforward and reliable. Suppose your old number has been deactivated, a new number has not yet been activated, or you are unable to receive a verification code by any means. You can still log in to Telegram on any device, as long as you have one of the following: a device with the passkey, access to your recovery email, or another device that is already logged in.
If you have a device with a passkey, the login steps are very simple. Install or open Telegram, select "Use passkey" on the login screen, and complete biometric verification. The system will automatically identify your account without the need to enter any phone number.
After logging in, you need to update your account information immediately. Go to "Settings" → "Privacy and Security" and update your registered phone number to the new one. Telegram will send a verification code to the new number, and upon successful verification, your account will be fully recovered. At this point, even if someone knows your old number, they will no longer be able to access your account through it.
Telegram officially recommends updating your phone number through an already logged-in device when you change your number, rather than waiting until you can no longer log in. If your device containing the passkey is also lost, but you have previously logged in to Telegram on other devices, you can change your registered number on that device. Telegram will synchronize this change across all logged-in devices.
For the worst-case scenario—all devices are lost and you cannot access your recovery email—contacting the Telegram support team is the only solution. Be prepared to provide proof of your account information, such as contact lists, group names, and screenshots of important conversations. Telegram will verify your identity and then assist you in recovering your account. This process usually takes anywhere from a few days to a week.
Frequently Asked Questions
Q: Can passkeys be used on multiple devices?
A: Yes. You can create independent passkeys on multiple devices, such as one on your iPhone, one on your iPad, and one on your Android phone. Each passkey is independent and does not affect the others. If the passkey on one device is compromised, you can delete it without affecting the other devices.
Q: What if my biometric authentication fails?
A: Every device allows you to set up backup authentication methods. If fingerprint recognition fails, you can use your device passcode or facial recognition. Additionally, passkeys on your other devices will still work.
Q: How should I handle it if my passkey is stolen?
A: First, passkeys involve biometric or device passcode protection, so merely obtaining the private key file is not enough to use it. Second, if you suspect theft, immediately log in to Telegram on a secure device, delete the stolen passkey, and disable the passkey feature on that device. Then check the "Devices" option and terminate all login sessions on that device.
Q: Does the Telegram web version support passkeys?
A: The Telegram web version and desktop client have started to support passkeys. If you are logging in to Telegram Web on a computer, you can choose to use the passkey on your phone to scan the QR code to log in.
Q: How do I transfer passkeys when switching to a new device?
A: Passkeys are usually bound to specific devices. After installing Telegram on your new device, you can use the passkey on your old device to log in, and then create a new passkey on the new device. There is no need to "transfer" the old key because it remains on the old device.
Recommended Fully-Featured Telegram Client
Although the official Telegram app is powerful, some third-party clients provide a richer and more convenient user experience. Turrit is an enhanced Telegram client worth recommending, fully compatible with the passkey feature while providing many innovative features.
Turrit supports logging in to up to 10 Telegram accounts, which is very convenient for users managing multiple accounts. You can set individual passkeys for each account and switch between them seamlessly within Turrit. Additionally, Turrit introduces a real-time translation feature with an accuracy rate of up to 99%, supporting translation of messages before sending or translating entire chat histories in real-time. This feature uses AI translation models, including Claude and Gemini, to ensure translation quality.
Turrit also includes built-in channel and video stream features, letting you scroll through the latest updates just like browsing TikTok. Video playback supports gesture control, allowing you to adjust volume and brightness by sliding up and down, and control playback progress by sliding left and right, for a fully immersive viewing experience.
In terms of privacy protection, Turrit provides a privacy check feature that can assess your account's privacy score and enhance it with one click. Keyword blocking and channel ad filtering features give you a cleaner chat environment. The group note feature is displayed locally and will not be seen by others, making it easier for classified management.
Turrit offers unlimited cloud storage, with upload and download speeds up to 20 times faster than the official app. Considering passkey security, Turrit fully supports the passkey login and recovery process, and provides a clear device management interface, allowing you to keep track of your account security status at any time.
Regarding the interface design, Turrit adopts a simplified design language while retaining all core features. You can switch between side navigation and bottom navigation, and customize the layout according to your personal habits. App icons can also be customized, with a choice of various colors and styles to match your home screen theme.
For Telegram users who need high security and rich features, Turrit is an alternative worth trying. It not only fully supports the latest security features of Telegram, including passkeys and two-step verification, but also expands the user experience through features like translation, cloud storage, and media playback.