How to Set a Passcode Lock on Telegram

To lock Telegram with a passcode, open Settings, go to Privacy and Security and choose Passcode Lock (Passcode & Face ID or Touch ID on iPhone, Local passcode on Telegram Desktop), then set a code and an auto-lock time. From then on, opening Telegram on that device asks for the code before showing any chats. The passcode only protects the device you set it on; it is not your account password and it is not shared with your other devices.

This guide shows the setup on Android, iPhone, Desktop and Web, explains every option on the passcode screen, and covers the one thing to know before you start: what happens if you forget it.

What the passcode lock does, and what it does not

The passcode lock is a door in front of the Telegram app on one device. It is useful and simple, and it is often confused with other security features. Getting the difference clear first avoids false confidence.

What it protects against

• Someone picking up your unlocked phone or using your computer. They open Telegram and see a lock screen instead of your chats.
• Children or family members on a shared device. Your chats stay out of sight even if the device itself is shared.
• A glance at the app switcher. With the right setting, the preview of Telegram in your recent apps is hidden.

What it does not protect against

• Someone logging in to your account on another device. That is what two-step verification is for. A passcode on your phone does nothing to stop a login elsewhere. See our guide to two-step verification.
• Notification previews. Messages can still appear on your lock screen unless you change notification settings.
• Malware on the device. A lock screen inside an app cannot stop software that already controls the device.
• Your other devices. A passcode on your phone does not lock Telegram Desktop on your laptop. Each device needs its own.

Passcode lock, two-step verification and phone lock: how they fit together

Think of three layers:

1. Your phone's own screen lock protects everything on the phone.
2. Telegram's passcode lock protects Telegram on that device, even when the phone is unlocked and handed to someone.
3. Two-step verification is a password stored in the cloud that protects your account when someone tries to log in on a new device.

The first two are local. The third is about your account everywhere. A well-protected account uses all three.

Before you start

1. Choose a code you will remember. There is no "forgot passcode" recovery. If you forget it, you have to reinstall Telegram or log out and log back in on that device.
2. Understand what you would lose. Logging back in restores all cloud chats, groups, channels and contacts. Secret chats on that device are lost, because they only exist there. Media you never saved may need to download again.
3. Make sure you can log back in. You need access to your phone number for a login code, or another logged-in device to receive it, plus your two-step verification password if you have one.
4. Do not reuse your phone's PIN. If someone already knows your phone's unlock code, a matching Telegram passcode adds no protection.

Choosing a good passcode

A lock is only as good as the code behind it. The passcode protects against people physically near you, so think about who those people are and what they could guess or see.

PIN or password?

• A numeric PIN is fast to type and fine for keeping a curious child or a colleague out, especially with biometrics doing most of the unlocking.
• A password with letters and numbers is much harder to guess and better if the threat is someone determined, such as a person who knows you well and has time alone with your device.

If biometrics handle everyday unlocking, a longer password costs you little, because you only type it occasionally.

What to avoid

• Your phone's unlock code, for the reason already given.
• Birthdays, anniversaries and years, which people close to you know.
• Simple patterns such as repeated or sequential digits.
• Your bank card PIN, so one leak does not expose both.

Shoulder surfing

Codes are most often learned by watching someone type them. If you unlock Telegram in public or in front of family, use biometrics, or angle the screen. A long password typed in front of the same person every day is weaker than a short PIN they have never seen.

Remembering it

Because a forgotten passcode means logging in again, store it somewhere you trust, such as a password manager. Do not keep it in Telegram's own Saved Messages, which you cannot open while locked.

Setting a passcode on Android

1. Open the menu and tap Settings.
2. Tap Privacy and Security.
3. Tap Passcode Lock.
4. Turn on Enable Passcode (or tap the option to set one).
5. Choose the type: a short numeric PIN or a longer password with letters and numbers. A password is stronger.
6. Enter the code, then enter it again to confirm.
7. Adjust the options that now appear on the screen (explained below).

After you enable it, a small padlock appears near the top of the chat list. Tap it to lock Telegram immediately.

Setting a passcode on iPhone

1. Tap Settings in Telegram.
2. Tap Privacy and Security.
3. Tap Passcode & Face ID (or Passcode & Touch ID on iPhones with a fingerprint sensor).
4. Tap Turn Passcode On.
5. If you want a different format, look for passcode options on the entry screen and choose the type you prefer.
6. Enter the code and confirm it.
7. Set Auto-Lock and decide whether to allow unlocking with Face ID or Touch ID.

With the passcode on, you can lock the app by tapping the padlock that appears at the top of the chat list.

Setting a passcode on Telegram Desktop

On Windows, macOS and Linux, the feature is called a local passcode.

1. Open the menu and choose Settings.
2. Click Privacy and Security.
3. Find Local passcode and click to turn it on.
4. Enter a passcode and confirm it.
5. Choose an auto-lock period, such as after a set time away.

To lock manually, look for the lock option in the main menu or near the search field. Telegram Desktop also supports a keyboard shortcut for locking (Ctrl+L on Windows and Linux in many versions); if it does nothing, use the menu.

On Desktop, the local passcode is also used to protect the data Telegram keeps on the computer, which is one more reason nobody can recover it for you. When Telegram Desktop is locked, the window shows only a passcode field. Nothing about your chats is visible.

What about Telegram Web?

Telegram Web runs in your browser, and its options are different from the installed apps. Some versions offer a passcode under Privacy and Security; if yours does, the setup is similar to Desktop. If not, protect a web session another way:

• Log out of Telegram Web when you leave the computer.
• Use a separate browser profile with its own password, or your operating system's user accounts, so others cannot open your browser.
• Lock the computer itself when you step away.

Our guide to Telegram Desktop vs Web vs mobile explains other differences between the versions.

Every passcode option explained

Once a passcode is on, the passcode screen shows several settings. Names vary a little between platforms, but the ideas are the same.

Auto-lock

This decides how long Telegram waits after you leave the app before it locks itself. Short periods, such as a minute, are the most secure: the app locks almost every time you switch away. Longer periods, such as an hour, are more convenient but leave a window where someone could open it.

A practical way to choose:

• Shared family device or work phone that others handle: the shortest period.
• Personal phone that rarely leaves you: a few minutes to an hour.
• Desktop at home: match it to your computer's own screen lock, so both lock together.

Unlock with fingerprint, Face ID or Touch ID

On devices with biometrics, you can let your fingerprint or face unlock Telegram instead of typing the code each time. This makes a short auto-lock period comfortable to live with.

The passcode is still the master key. If biometrics fail, or the device asks for the code after a restart, you will need to type it. Biometrics on the device are controlled by your phone, so anyone whose fingerprint or face is enrolled on the phone may be able to unlock Telegram too. If you share a phone with someone who has a fingerprint enrolled, turn this option off.

Show app content in the task switcher

When you switch apps, your phone shows a preview of each recent app. With a passcode on, Telegram can hide its preview so your last open chat is not visible there.

• On Android, look for an option like Show App Content in Task Switcher and turn it off to hide the preview. On many versions this also stops screenshots and screen recordings inside Telegram on that device, which some people find inconvenient. Turn it back on if you need screenshots.
• On iPhone, Telegram hides or blurs its content in the app switcher when the passcode is enabled.

Manual lock

The padlock icon at the top of the chat list (mobile) or the lock option in the menu (Desktop) locks the app immediately, regardless of the auto-lock timer. It is the quickest way to hand your phone to someone after showing them something.

What happens if you forget your passcode

There is no reset by email and no way for Telegram support to unlock it, because the passcode never leaves your device. The way back is to remove Telegram's local data and log in again.

Forgotten passcode on Android

1. Uninstall Telegram, or clear the app's storage and data in your phone's app settings.
2. Install Telegram again if you uninstalled it.
3. Log in with your phone number and the code Telegram sends.
4. Enter your two-step verification password if you have one.

Forgotten passcode on iPhone

1. Delete the Telegram app from your iPhone.
2. Install it again from the App Store.
3. Log in with your phone number, the login code and your two-step password if set.

Forgotten passcode on Desktop

The lock screen of Telegram Desktop offers a way to log out of the app. Use it, then log in again by phone number or QR code. If your version does not offer that, uninstalling and reinstalling Telegram Desktop has the same effect.

What comes back and what does not

• Comes back: all cloud chats, groups, channels, contacts, Saved Messages, settings stored in the cloud.
• Does not come back: secret chats from that device, and the passcode itself (set a new one).
• May need re-downloading: cached media that was only in Telegram's cache.
• Not affected: photos and files you saved to your phone's gallery or downloads folder.

The login code arrives in Telegram on your other logged-in devices if you have any, or by SMS. Do not give that code to anyone. See never share your Telegram login code for why.

Changing or turning off the passcode

To change it

1. Open Telegram (you will need the current passcode).
2. Go to Settings, then Privacy and Security, then the passcode section.
3. Choose Change Passcode and enter a new one twice.

To turn it off

1. Open the passcode section the same way.
2. Choose Turn Passcode Off or disable the switch.
3. Confirm.

Turning it off removes the lock immediately on that device. Other devices keep their own setting.

Passcode and notifications

A locked Telegram can still show message previews in notifications, because notifications are handled by the phone or computer, not by the locked app. If the goal is to keep messages private from people near your device, adjust notifications too:

1. In Telegram's notification settings, turn off message previews for private chats, groups and channels if you want notifications to say only that a message arrived.
2. On iPhone, set notification previews for Telegram to show only when unlocked, or never, in the system settings.
3. On Android, set the lock screen to hide sensitive notification content in the system settings.

Without this step, a passcode protects your chats from someone opening the app but not from someone reading your lock screen.

Passcode with multiple accounts

If you use more than one Telegram account in the same app, the passcode applies to the whole app on that device, not to a single account. Unlocking it opens all of your accounts there. If you need one account more private than another on the same phone, the passcode alone cannot do that; consider keeping the private account only on a device that others never use. Our guide to multiple accounts explains how accounts are separated.

Other ways to keep chats private on a shared device

The passcode is all-or-nothing: the app is either locked or open. If you share a device and want more control, combine it with other tools.

Separate user profiles on the device

Many Android phones and tablets, and every desktop operating system, support separate user profiles. Each profile has its own apps and data. If a tablet is shared by a family, giving each person their own profile with their own Telegram is cleaner than one Telegram behind one passcode.

Archive and folders

Archiving moves chats out of the main list, and folders let you choose which chats appear on the first screen. Neither is a security feature, because anyone with the app open can look in the archive. They are useful for keeping the screen tidy when you show someone a specific chat. Our guides to pinning, muting and archiving and folders explain both.

Auto-delete and secret chats

If the concern is that old messages exist at all, set an auto-delete timer on sensitive chats so they disappear after a period, or use a secret chat with a self-destruct timer. See auto-delete messages and secret chats explained. These reduce what anyone could find, passcode or not.

Saving media to the gallery

Telegram can save photos and videos to your phone's gallery automatically. Those copies are outside Telegram, so the passcode does not protect them. If you use a passcode for privacy, check Telegram's data and storage settings and turn off automatic saving to the gallery for the chats that matter. Our guide to stopping automatic downloads and saving covers the setting.

What a locked Telegram still does

Locking the app does not switch it off. Knowing what continues in the background helps you set the other options correctly.

• Messages keep arriving. Your account stays logged in, so new messages are received and stored. You see them after unlocking.
• Notifications still appear, following your notification settings. Tapping one takes you to the passcode screen first, not straight into the chat.
• Sharing into Telegram needs the code. If you share a photo or link from another app to Telegram, you will be asked to unlock before you can pick a chat.
• Your other devices are unaffected. You can keep chatting on your computer while your phone's Telegram is locked, and vice versa.
• Your status follows your privacy settings. A locked app on a phone in your pocket is not open, so it does not make you appear online.

In short, the lock controls who can look at Telegram on that screen. It does not change how your account behaves for the people you talk to.

A short security checklist

If you are setting a passcode because you want Telegram to be safer in general, these steps together cover the common risks:

1. Set a screen lock on the phone or computer itself.
2. Set Telegram's passcode lock on each device, with a short auto-lock and biometrics for convenience.
3. Turn on two-step verification and add a recovery email you control.
4. Hide notification previews on the lock screen if people around you could read them.
5. Review active sessions and end any you do not recognise.
6. Check your privacy settings, especially who can see your phone number and who can add you to groups. The privacy settings checklist goes through them.
7. Learn the common scams, because most account losses start with someone being tricked into sharing a code rather than with a stolen phone.

Moving to a new phone or reinstalling

The passcode is stored only on the device, so it does not travel with your account.

• A new phone starts with no passcode. Set one again after logging in.
• Reinstalling Telegram removes the passcode along with the local data.
• App updates keep the passcode; you do not need to set it again after updating.
• Each computer you use with Telegram Desktop needs its own local passcode.

A good habit is to add "set Telegram passcode" to the list of things you do on any new device, alongside your phone's own screen lock.

Worked examples

Example: a parent who lends their phone to a child

A parent sets a numeric PIN, turns on fingerprint unlock and sets auto-lock to one minute. They hand the phone over for games; when the child opens Telegram, it asks for the code. Because the child's fingerprint is not enrolled on the phone, biometrics do not help them. The parent also hides message previews on the lock screen.

Example: an office computer

An employee uses Telegram Desktop at work. They set a local passcode and auto-lock after a short time away, and press the lock shortcut when they leave the desk. If a colleague sits down at the unlocked computer, Telegram shows only the passcode field.

Example: a forgotten code

Someone sets a six-digit code late at night and cannot remember it the next day. They uninstall Telegram, reinstall it and log in with their number, the code sent to their laptop's Telegram Desktop and their two-step password. All their groups and chats reappear. One secret chat started on that phone is gone. They set a new passcode and write a hint somewhere safe.

Example: a shared shop phone

A small shop keeps one phone at the counter for customer orders over Telegram, and three staff use it. A passcode known to all three keeps customers who pick up the phone out, but it does not separate the staff from each other. The owner sets a passcode, hides lock-screen previews and keeps their personal Telegram account on their own phone instead of adding it to the shop phone, because a passcode on a shared device opens every account in the app.

Example: travelling with a laptop

Someone travelling for work uses Telegram Desktop on a laptop that goes through hotel rooms and airport lounges. They set a local passcode with a short auto-lock, lock the laptop's own screen whenever they step away, and before a trip check the active sessions list so they know which devices should appear there. If the laptop is lost, they end its session from their phone.

Example: someone worried about account takeover

A user sets a passcode because they are afraid of being hacked. That protects their phone from casual access, but the bigger risk to their account is someone logging in elsewhere with a stolen code. They also set two-step verification and add a recovery email, which is what actually blocks a remote login.

Troubleshooting

I cannot find the passcode option

Look under Privacy and Security in Telegram's settings. On iPhone it is named after Face ID or Touch ID. On Desktop it is called Local passcode. If none appears, update Telegram.

Fingerprint or Face ID does not unlock Telegram

Check that the biometric option is turned on inside Telegram's passcode settings and that biometrics are set up in the phone's own settings. After a restart, most devices require the code once before biometrics work again.

Telegram locks too often, or never

Check the auto-lock period. If it never locks, the period may be very long, or you may be switching away for less time than it allows. Locking manually with the padlock is always available.

The padlock icon is missing from the chat list

The padlock only appears while a passcode is enabled. If you turned the passcode on and still do not see it, scroll the chat list to the very top, because on some versions it sits beside the title and hides when you scroll. Updating the app usually restores it. You can always rely on the auto-lock timer instead.

I cannot take screenshots in Telegram any more

On Android, hiding app content in the task switcher can also block screenshots. Turn that option back on if you need screenshots, accepting that the app preview will be visible in recent apps.

The passcode works on my phone but not on my computer

Each device has its own passcode. Set one separately on the computer, or check whether you used a different code there.

Common mistakes

• Treating the passcode as account protection. It protects one device. Two-step verification protects the account.
• Using the same code as the phone. Anyone who can unlock the phone can then unlock Telegram.
• Forgetting the code with secret chats on the device. Reinstalling loses them.
• Leaving lock-screen previews on. Messages can still be read without opening the app.
• Allowing biometrics on a shared phone. Other enrolled fingers or faces may unlock Telegram.
• Assuming one passcode covers every device. Set it on each phone and computer.

FAQ

Is Telegram's passcode the same as the two-step verification password?

No. The passcode is local to one device and only locks the app. The two-step password is stored with your account and is asked for when you log in on a new device.

Can Telegram support reset my passcode?

No. The passcode never leaves your device, so nobody else can reset it. Reinstall the app or log out and back in.

Will I lose my chats if I forget my passcode?

Cloud chats are safe and return when you log in again. Secret chats on that device are lost.

Does the passcode lock each chat separately?

No. It locks the whole app on that device. Telegram does not offer a separate lock for individual chats; if you want to keep certain chats out of view, archiving or folders can help with clutter but not with security.

Does a passcode stop screenshots?

On Android, hiding the app content in the task switcher can also block screenshots inside Telegram. On other platforms the passcode does not stop screenshots.

Does the passcode protect Telegram if my phone is stolen?

It stops a thief from opening Telegram on the phone. You should still end that phone's session from another device; see logging out of all devices.

Summary

Telegram's passcode lock puts a code in front of the app on one device. Turn it on under Privacy and Security on each phone and computer, choose an auto-lock period that matches how the device is used, and add fingerprint or face unlock to make short periods painless. Hide app content in the switcher and lock-screen previews if people near you could see them. The passcode cannot be recovered, so a forgotten code means logging in again and losing that device's secret chats. For protection against someone logging in remotely, pair it with two-step verification.