1. Enable Two-Step Verification
Two-Step Verification adds a password in addition to the login code. Find it under Settings → Privacy and Security → Two-Step Verification, then follow Telegram's prompts to set a recovery email. Protect that email account too.
Never share login codes, your Two-Step Verification password or recovery details with anyone.
2. Review phone-number visibility
Under Settings → Privacy and Security → Phone Number, review who can see your number and who can find you by it. A public username lets people contact you without first knowing your number, but it does not remove every privacy risk.
3. Check active sessions
Open Settings → Devices and review signed-in phones, computers and browsers. Terminate sessions you do not recognize or no longer use, especially after using a shared computer.
4. Protect the app and device
Set an app passcode and keep your phone's system screen lock enabled. An app lock does not replace operating-system updates or protection against access to an unlocked device.
5. Understand Secret Chats
Regular Cloud Chats are not end-to-end encrypted by default. Secret Chats use end-to-end encryption and remain available only on participating devices. If you need end-to-end encryption for a particular conversation, start a Secret Chat and keep both devices secure.
Official references
Independent educational guide, not an official Telegram page. Interfaces may change; verify current details with the linked sources.