Telegram now lets users sign in without passwords or SMS codes

Telegram is the latest big app to ditch passwords and SMS codes — at least if you want it to.

With a new update rolling out this week, Telegram now supports passkey logins, letting users sign in using Face ID, Touch ID, or their device PIN instead of waiting for a one-time code to arrive by text.

Passkeys have been slowly spreading since Apple and Google backed the standard a few years ago, as tech companies look for ways to move beyond passwords that are easy to forget, reuse, or steal. Major platforms like Google, Apple, Microsoft, and Meta have all begun rolling them out across their apps and services, pitching passkeys as both more secure and less annoying for users.

Despite some initial confusion that might hit users when the first prompt to create a passkey appears, it makes managing accounts a bit easier. The idea is simple: fewer passwords to manage, faster logins, and far less exposure to phishing and account takeovers.

What are passkeys, and why are they safer?

They sign you in with Face ID or fingerprints instead of reusable passwords

Credit: Miker Rivero/DALL-E/MakeUseOf

Passkeys are essentially a password replacement designed to make logging in both easier and harder to compromise. Instead of typing a long, reusable password or waiting for a one-time SMS code, your device handles the sign-in for you. You enter your email or username, confirm with Face ID, Touch ID, or a device PIN, and you’re in.

Behind the scenes, passkeys rely on public-key cryptography. When you create one, your device generates two mathematically linked keys: a public key that’s shared with the service, and a private key that stays locked inside your device’s secure hardware. That private key never leaves your phone or computer. When you log in, your device simply proves it has the correct key, without sending any secret that could be reused or intercepted.

That’s what makes passkeys especially resistant to phishing. They only work on the exact site or app they were created for, so even a convincing fake login page can’t trick your device into handing anything over. If the domain doesn’t match, the login fails—there’s no password to steal.

Related

I stopped using passwords because I found a safer and simpler alternative

Passkeys are not only safer, they’re much faster to use, too.

How to enable passkeys on Telegram

You can change how you login with just a few taps

Credit: Telegram

Once enabled, logging in is basically instant. Open Telegram, authenticate with your face or fingerprint, and you’re in — no SMS required. Telegram says passkeys also work even if you’re traveling internationally or your carrier isn’t delivering messages.

Setting it up is straightforward. In the app, head to Settings, tap Privacy and Security, then Passkeys, and choose Create Passkey. Your device will handle the rest. The passkey can also be synced through password managers like iCloud Keychain or Google Password Manager, so it works across your devices.

There is one important caveat: Telegram still requires an active phone number on your account. Even with passkeys enabled, that number is still required for account recovery and other security checks.

Related

Telegram Scammers Will Have a Harder Time Fooling You Thanks to This Change

If it doesn’t have an official icon, don’t trust it.