Telegram is encrypted, but only its Secret Chats are end-to-end encrypted. Your everyday chats are encrypted between your app and Telegram's servers, which is how they open on every device you log into, so for anything sensitive you'd use a Secret Chat and lock your account with 2-Step Verification and a passcode.
That's the whole answer in two sentences. The rest of this page is the detail behind it, taken from Telegram's own FAQ as of Nov 2026. Every safety claim here is Telegram's claim about itself, so I've written it that way: Telegram says, not it's been proven.
Encrypted is not the same as end-to-end
This is the bit most people miss. Telegram says all messages are always securely encrypted. True, but there are two different kinds of encryption doing the work, and you only get the stronger one if you ask for it.
- Cloud Chats are your normal private chats and groups. Telegram says they use server-client encryption and are stored encrypted in the Telegram Cloud. Your messages are protected on the way to Telegram, and Telegram holds them so you can open them anywhere.
- Secret Chats add a second layer on top: client-client encryption, better known as end-to-end. Telegram says only you and the other person can read those messages, and that includes Telegram itself.
Telegram says the same encryption covers text, media and files alike. It's based on 256-bit symmetric AES encryption, 2048-bit RSA encryption and Diffie-Hellman secure key exchange. Telegram also says the data you send can't be deciphered if it's intercepted by your internet provider or the owner of a Wi-Fi router you connect to.
So if someone asks you whether Telegram is encrypted, the honest reply is yes. If they ask whether it's end-to-end encrypted by default, the honest reply is no. Only Secret Chats are.
Cloud chats and Secret Chats side by side
| Chat type | How Telegram says it's encrypted | Opens on your other devices | Good for |
|---|---|---|---|
| Cloud Chat (private chat) | Server-client, stored encrypted in the Telegram Cloud | Yes, syncs to every device you log into | Everyday business and personal chat |
| Cloud Chat (group) | Server-client, stored encrypted in the Telegram Cloud | Yes | Teams, communities, customer groups |
| Secret Chat (one to one) | End-to-end, on top of server-client | No, only on the device that started it | Anything sensitive |
Secret Chats come with extras. Telegram says they leave no trace on its servers, can't be forwarded, support self-destructing messages, and when you delete a message on your side, the other person's app is told to delete it too. Secret Chats are one to one: start them with a single contact, not a group.
Why doesn't Telegram make every chat secret? Its answer is that cloud chats let you get your history back on a new device if you lose your phone, and end-to-end encryption has no tidy fix for that. That trade-off is the real choice you're making each time you open a chat.
The catch with Secret Chats
Secret Chats are device-specific. Telegram says they aren't part of the Telegram cloud, so you can only read them on the device where they started. Start one on your phone and it won't appear on your laptop. And if you log out, you lose all your Secret Chats. There's no cloud copy to restore.
That makes them brilliant for one sensitive conversation and a poor fit for anything you'll need to look up later, like a supplier agreement or a client brief. For records you want to keep, a cloud chat is the practical choice. For a password, a bank detail or a private matter, go secret.
Two more details from the FAQ. The self-destruct timer is available for all messages in Secret Chats and for media in private cloud chats. The clock starts when the message shows two check marks, meaning it's been read, and in a Secret Chat it only applies to messages sent after you set it. And Telegram says it'll try to warn you if someone screenshots a Secret Chat, but there's no bulletproof way to detect screenshots on some systems. More on that in whether Telegram tells you about screenshots.
If you want to check nobody's sitting in the middle of a Secret Chat, Telegram generates a picture of the encryption key for that chat. Compare it with the one on your contact's screen, ideally in person. If the two images match, Telegram says the chat is secure.
How to start a Secret Chat
- Open the profile of the person you want to message.
- Tap the three dots menu.
- Tap Start Secret Chat.
- Optional: tap the clock icon to set a self-destruct timer before you send anything. It's in the input field on iOS and the top bar on Android.
That's the quick version. For managing, ending and timing them, see my full walkthrough of Telegram Secret Chats.
Three settings that close the real gaps
Telegram is frank about where the danger sits, and it isn't the encryption. In its FAQ it says it can't protect you if someone picks up your unlocked phone without a passcode, if your IT department can get into your work computer, or if anyone gets physical or root access to a device running Telegram. It also warns that rooted or jailbroken devices make it easier for an attacker to take full control, and at that point no app is safe, however strong the encryption.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
The other weak spot is your login. Signing in with an SMS code is the industry standard, but Telegram itself suggests a password on top if you have reason to doubt your mobile carrier. These are the three settings it recommends, all under Settings, then Privacy and Security:
- Switch on 2-Step Verification. Go to Settings, then Privacy and Security, then 2-Step Verification. After that you'll need both the SMS code and your password to log in.
- Add a recovery email. You'll be offered this while setting up 2-Step Verification. Telegram's advice is to protect that email account with a strong password and 2-Step Verification too, because it becomes a way into Telegram.
- Set a passcode lock. In the same Privacy and Security menu, set a strong passcode so nobody can open the app on an unlocked phone.
Telegram also lets you set up a Passkey, so you log in with your device's PIN, fingerprint or face scan instead of an SMS code at all. While you're in that menu, check Phone Number. By default your number is only visible to people who've saved you as a contact, and you can narrow that further; here's how to hide your number on Telegram.
What Telegram says about data requests
Telegram says that for Secret Chats it has nothing to disclose, because of end-to-end encryption. For cloud chats, it says the data is stored in several data centres run by different legal entities in different jurisdictions, and the decryption keys are split into parts and never kept with the data. Its claim is that several court orders from different jurisdictions would be needed to force it to hand anything over.
Telegram also says anyone can check its source code, protocol and API, that it supports verifiable builds so experts can confirm the published code matches the apps in the stores, and that it runs a bug bounty programme. Again, those are Telegram's own statements. Read them as such.
So, is Telegram safe for a business?
For everyday chat with customers, suppliers and your team, I'd use normal cloud chats and not worry, as long as the three settings above are switched on. I'd move anything sensitive into a Secret Chat with a timer, on a device that isn't rooted or jailbroken. Skip Secret Chats for anything you'll need to find again: they vanish when you log out. If you're weighing Telegram against other apps, my Signal vs Telegram comparison covers that ground.
If your business runs a Telegram channel or community, setting up the privacy and login side sensibly is a small part of the social media work I help teams with. I run AI training and workshops for teams, and help businesses with AI enablement and workflow automation, so the busywork runs itself and people get time back. Most of that work is with SaaS marketing teams and small businesses. Here's how we can work together.
Frequently asked questions
Is Telegram end-to-end encrypted?
Only Secret Chats are end-to-end encrypted. Telegram says ordinary cloud chats use server-client encryption and are stored encrypted in the Telegram Cloud, so they can sync across your devices.
Can Telegram read my messages?
Telegram says nobody but you and the recipient can read Secret Chat messages, Telegram included. Cloud chats are stored encrypted on Telegram's servers, with the keys split up and kept apart from the data.
Are Telegram group chats end-to-end encrypted?
No. Groups are cloud chats. Secret Chats are one to one, with a single contact.
What happens to Secret Chats if I log out?
You lose them. Telegram says Secret Chats are device-specific and aren't part of the Telegram cloud, so there's nothing to restore.
What's the most useful Telegram safety setting?
Telegram recommends 2-Step Verification and a strong passcode lock, both found in Settings, then Privacy and Security.
