Is Telegram safe to use, and what does it actually protect?

Is Telegram safe to use in 2026?

Telegram is safe to use in 2026 for most people, with one caveat that matters: end-to-end encryption is off by default. Norton rates Telegram as fairly safe for the average user and notes that installing the app will not infect a phone with malware. Its criticism targets the default settings and the weak moderation of public spaces.

Private photos and sensitive talks are safe only inside a Secret Chat, where Telegram itself cannot read the messages. A second number on Telegram is safe only if you alone receive its messages, as our second account guide explains. Public free Telegram numbers suit tests, while a private number (coming soon) suits accounts you keep.

How secure is Telegram's encryption?

Telegram encrypts every message, but the type of chat decides who holds the keys. Cloud chats use client-server encryption, so Telegram can decrypt them to sync your devices, while Secret Chats add client-client encryption that only you and the recipient can read. The FAQ lists 256-bit AES, 2048-bit RSA and Diffie-Hellman key exchange as the building blocks.

Is Telegram a Russian app?

Telegram was founded in 2013 by Pavel and Nikolai Durov, and its development team is now based in Dubai. The FAQ says the team left Russia over local IT regulations and tried Berlin, London and Singapore before Dubai. ESET adds that Pavel Durov was arrested in France in 2024. He was later indicted on charges tied to the platform's alleged role in facilitating serious criminal activity.

Telegram says cloud data sits in several data centers run by different legal entities, with decryption keys split and stored apart from the data. ESET points to a 2025 IStories investigation that linked parts of the network infrastructure to companies with ties to Russian state bodies. Read both claims. Then decide how much to share.

Is Telegram safe from government requests?

Telegram says Secret Chats leave it nothing to hand over, and its cloud data sits in several jurisdictions with the keys stored apart. Under that design, Telegram argues, several court orders from different legal systems would be needed to force out any data. Telegram's FAQ states that 0 bytes of user messages have been disclosed to third parties.

ESET reads the same setup more cautiously. Because Telegram holds the keys to cloud chats, it could in principle be compelled to share them. Pressure on the company grew after the 2024 arrest of Pavel Durov. Use Secret Chats if a determined state is part of your risk.

Can people on Telegram track you?

Telegram is safe from casual tracking by other users, who see only what your privacy settings allow. By default your phone number is visible just to saved contacts. Peer-to-peer calls can reveal your IP address to the other side, and Security Alliance suggests limiting them to contacts or nobody. ESET notes the app shares your location only when you choose to.

Telegram itself sees more than other users do. ESET reports that Telegram may log IP addresses, device details and login metadata to fight spam. IP data can be kept for up to 12 months under its policy. For users in the UK and the European Economic Area, ESET says personal data is stored on servers in the Netherlands.

Is Telegram safe for sending private photos?

Telegram is safe enough for private photos only inside a Secret Chat or with a self-destruct timer, and even then a screenshot can slip through. The timer works for all messages in Secret Chats and for media in private cloud chats. It starts when the photo appears on the other screen, then removes it from both devices.

Telegram tries to warn you when someone takes a screenshot in a Secret Chat, but its FAQ admits some Android devices cannot be checked reliably. Nobody can stop a second phone from photographing the screen. Send private photos only to people you trust. Verify first.

For example, a photo sent with a 10-second timer in a Telegram Secret Chat disappears from both phones 10 seconds after it opens. A screenshot taken in time still keeps it.

How do you limit the risk in Telegram chats?

Keeping Telegram chats private comes down to choosing the right chat type. Secret Chats are the only place where the server cannot read your messages. Use them for anything sensitive. Nothing else comes close.

• Move sensitive conversations into a Secret Chat, with a self-destruct timer if needed.
• Compare the encryption key image with your contact in person before sharing anything sensitive.
• Keep public groups and unknown bots at arm's length, since moderation there is light.
• Treat any stranger who asks for money or a code as a scammer.

Start a Secret Chat in Telegram

1. Open the contactOpen the profile of the person you want to talk to privately.
2. Tap the menuTap the three-dot menu, then Start Secret Chat.
3. Set a timerOptionally set a self-destruct timer so messages disappear after they are read.
4. Compare the keyCheck that the encryption key image in the chat settings matches the one on your friend's device.
5. Stay on that deviceRemember that the Secret Chat exists only on this device and disappears if you log out.