Telegram verification codes are used to confirm a sign-in or account action. They are not passwords to share with another person. If you are trying to sign in, use only the code presented through Telegram’s current flow, and keep it private even if someone claims to be a friend, Telegram employee or support agent.
Look for a code in your existing Telegram app
When an account already has an active session, Telegram may send a sign-in code inside the Telegram app rather than as a text message. Check the apps on your own signed-in devices, including a phone, tablet or computer you control. The delivery method shown in your current sign-in screen takes precedence over instructions from an old tutorial.
Do not accept a code forwarded by another person as a substitute for signing in yourself. A message that says “send me the code so I can verify you” is a warning sign. Codes are meant for the sign-in attempt you initiated, not for a conversation.
Keep codes separate from other credentials
A one-time login code, a two-step verification password and a recovery email code are different things. Telegram may request more than one of them during an account flow. Enter credentials only in the Telegram app or a sign-in page you reached intentionally.
Never post a code in a screenshot or public support forum. If a support request asks for it, redact the code before sharing any diagnostic information. Telegram’s FAQ says login codes should be kept private.
Understand the QR sign-in flow
Telegram may offer QR login for a desktop or web session. Scan or approve the code only when you opened the sign-in flow yourself and intend to connect that device. An unexpected QR code can be used to authorize a session, so do not scan one from a chat, advertisement or unsolicited support message.
After signing in, review Settings → Devices from a trusted app. End any session you do not recognize. The account security guide explains the device review and related protections.
If a code does not arrive
Check your own active Telegram sessions first, confirm the country code and number you entered, then follow the delivery options and timer visible in the app. Do not repeatedly request a new code or use unofficial code-receiving websites. They may expose account access to someone else.
For the step-by-step troubleshooting path, see Telegram login code not arriving. That page focuses on diagnosis; this guide explains the credentials and sign-in flow.
If Telegram asks for a two-step verification password
The password prompt comes after the sign-in code and is a separate security check. Use the password configured for your account or follow Telegram’s current in-app recovery path. Reinstalling an app or asking a stranger to remove the protection does not safely recover access.
Set up a recovery email only if you can secure that email account. Read the account security guide for two-step verification and recovery considerations.
If you shared a code by mistake
From a trusted active session, review the device list and terminate sessions you did not initiate. Secure two-step verification and the email associated with account recovery. If you cannot access an active session, use only the recovery options Telegram currently provides.
Do not pay an account-recovery service or install remote-control software for someone who says they can retrieve your account. A website outside Telegram’s sign-in flow cannot override its account requirements.
Related Telegram guides
Sources and editorial note
For current sign-in behavior, use Telegram’s FAQ, QR login documentation and the instructions shown in the app. Delivery options can vary by account and app version. A webpage outside the sign-in flow cannot retrieve or issue a Telegram code.