Loading page
About this tool
26-point Telegram privacy audit: number visibility, group adds, call IP leaks, forward links, sessions and secret chats, scored by risk profile.
The Telegram Privacy Settings Checklist scores your Telegram account against 26 real privacy and security controls — phone number visibility, who can find you by number, group and channel adds, peer-to-peer call routing, forward links, story audience, active sessions and two-step verification — and weights each one by how much exposure it actually closes rather than treating every toggle as equal. Pick a risk profile and the same checklist re-scores itself: a channel admin who must stay findable is graded on message and session controls, while someone leaving an unsafe situation is graded hardest on discoverability. Six controls are marked critical and cap the score at 69% while any of them is still open, because a hidden bio means nothing next to a number a stranger can search.
Open Telegram Privacy Settings Checklist on AltFTool — it loads instantly in your browser.
Pick your situation in the "Who are you locking this down for?" menu — from Private personal account to Channel or community admin — and set the Target score (%) field, which starts at 90.
Tick each of the 26 Telegram settings you have already applied in the grouped cards, or use Mark all applied and Clear all; every row shows its "Where" Settings path and its point weight.
Read the Protection score with Critical settings still open and Remaining exposure by area — the score is held at 69% while any critical setting is open — then press Copy result.
Each control carries a share of 100 points sized to the exposure it removes, so ticking easy toggles does not fake a good score.
Five risk profiles re-weight the five exposure axes, because a public admin and someone hiding need opposite settings.
The checklist runs entirely in your browser and never asks for a phone number, password or login code.
Only Secret Chats are. Ordinary cloud chats, group chats and channels are encrypted in transit and at rest, but Telegram holds the keys and can technically read them, which is why they can be restored on a new device. A Secret Chat has to be started manually from a contact's profile, works only one-to-one, and lives on the two devices rather than in the cloud.
Two settings, both under Settings > Privacy and Security > Phone Number. Set “Who can see my phone number” to Nobody so it is not shown on your profile, and set “Who can find me by my number” to My Contacts so someone who already has the number cannot pull up your profile. Changing only the first one leaves you findable.
Yes, if peer-to-peer calling is enabled for them. A P2P call connects the two devices directly, so each side sees the other's IP address and can derive an approximate city and the internet provider. Setting Settings > Privacy and Security > Calls > Peer-to-peer to Nobody routes every call through Telegram's servers instead, which costs a little latency and removes the leak.
Set Settings > Privacy and Security > Groups & Channels to My Contacts, and add named exceptions for anyone who genuinely needs to add you. Anyone outside that list then has to send you an invite link you can decline, which removes the main delivery route for investment and crypto spam on Telegram.