Loading page
About this tool
26-point Telegram privacy audit: number visibility, group adds, call IP leaks, forward links, sessions and secret chats, scored by risk profile.
This checklist scores your Telegram account against 26 real privacy and security controls — phone number visibility, who can find you by number, group and channel adds, peer-to-peer call routing, forward links, story audience, active sessions and two-step verification — and weights each one by how much exposure it actually closes rather than treating every toggle as equal. Pick a risk profile and the same checklist re-scores itself: a channel admin who must stay findable is graded on message and session controls, while someone leaving an unsafe situation is graded hardest on discoverability. Six controls are marked critical and cap the score at 69% while any of them is still open, because a hidden bio means nothing next to a number a stranger can search.
Open Telegram Privacy Settings Checklist on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Each control carries a share of 100 points sized to the exposure it removes, so ticking easy toggles does not fake a good score.
Five risk profiles re-weight the five exposure axes, because a public admin and someone hiding need opposite settings.
The checklist runs entirely in your browser and never asks for a phone number, password or login code.
Only Secret Chats are. Ordinary cloud chats, group chats and channels are encrypted in transit and at rest, but Telegram holds the keys and can technically read them, which is why they can be restored on a new device. A Secret Chat has to be started manually from a contact's profile, works only one-to-one, and lives on the two devices rather than in the cloud.
Two settings, both under Settings > Privacy and Security > Phone Number. Set “Who can see my phone number” to Nobody so it is not shown on your profile, and set “Who can find me by my number” to My Contacts so someone who already has the number cannot pull up your profile. Changing only the first one leaves you findable.
Yes, if peer-to-peer calling is enabled for them. A P2P call connects the two devices directly, so each side sees the other's IP address and can derive an approximate city and the internet provider. Setting Settings > Privacy and Security > Calls > Peer-to-peer to Nobody routes every call through Telegram's servers instead, which costs a little latency and removes the leak.
Set Settings > Privacy and Security > Groups & Channels to My Contacts, and add named exceptions for anyone who genuinely needs to add you. Anyone outside that list then has to send you an invite link you can decline, which removes the main delivery route for investment and crypto spam on Telegram.