01
Enable Two-Step Verification
Two-step verification adds a password that will be required when logging in from a new device. This reduces the risk that one code from SMS or Telegram will be enough to take over an account.
It is important to specify a recovery email, otherwise password recovery may become painful.
Use a unique password.
Add recovery email.
Do not store your password in open chat.
02
Check active sessions
In the Devices settings, devices where the account is active are visible. If you see an unknown login, log out and change your 2FA password.
After purchasing Premium or Stars, no new devices should appear: account access is not required for such purchases.
03
Separate username and account access
The public username can be used as the recipient's address. But the login code, QR authorization, 2FA password and access to mail are already access to the account.
If the seller asks to “come in for a minute” or send a code, it is better to stop the purchase.
| Can be reported | Cannot be reported |
|---|---|
| Public username | Login code |
| Premium gift period | 2FA password |
| Order number | QR for authorization |
04
Stars and Premium: what to check before paying
It is important to Stars that the recipient is specified correctly. For Premium - the gift period and the recipient's account.
Telegram describes Stars as virtual items for digital goods, gifts, mini-apps and creator support.
Copy username from profile.
Check the Premium term.
Do not transmit login information.