Is Telegram Safe to Use in 2026?
Telegram markets itself as a secure messaging platform, but this reputation is largely undeserved from a technical perspective. Regular Telegram chats are not end-to-end encrypted. Messages are stored on Telegram servers in a format the company can access. Only Secret Chats offer end-to-end encryption, but they must be manually enabled for each conversation and do not work in group chats. Telegram uses its own custom encryption protocol MTProto rather than the widely audited Signal Protocol, which cryptography experts have criticized. The arrest of Telegram founder Pavel Durov and subsequent policy changes around data sharing with authorities have further complicated the privacy picture. Telegram deserves a caution rating because its security reputation exceeds its actual privacy protections.
What Telegram Collects
- All regular chat messages stored on Telegram cloud servers in an accessible format, not end-to-end encrypted by default
- Phone numbers required for registration, contact lists when synced, and usernames used across the platform
- IP addresses, device information, and metadata about message timing, recipients, and group memberships
- Files, photos, videos, and voice messages shared through the platform, stored on Telegram servers indefinitely
Who Sees Your Data
- Telegram employees who can access regular (non-Secret Chat) messages stored on their cloud infrastructure
- Law enforcement agencies in certain jurisdictions, following policy changes after the founder arrest and legal pressures
- Group administrators and bot operators who can access messages and member information within their groups
The Encryption Misconception
Most Telegram users believe their messages are fully encrypted, but this is not accurate. Regular one-on-one chats and all group chats use server-client encryption, meaning Telegram servers can read the content. Only Secret Chats provide end-to-end encryption, but they must be manually initiated, only work between two people on a single device, and do not support group conversations. This means the vast majority of Telegram communication is accessible to the company. The MTProto encryption protocol used by Telegram was developed in-house rather than using the extensively audited Signal Protocol. Cryptography experts have identified potential weaknesses in MTProto that do not exist in the Signal Protocol used by competitors like Signal and WhatsApp.
Legal Pressures and Policy Changes
The arrest of Telegram founder Pavel Durov in France in 2024 marked a turning point for the platform. Following legal pressure, Telegram updated its privacy policy to indicate greater willingness to share user data with law enforcement in response to valid legal orders. This shift undermined the platform image as a haven for privacy. Telegram now provides user data including IP addresses and phone numbers to authorities in certain circumstances. The legal landscape around Telegram continues to evolve, with multiple governments pressing for greater access to platform data. Users who relied on Telegram for privacy based on its previous reputation should reassess their threat model in light of these changes.
Groups Channels and Content Risks
Telegram large group capacity of up to 200,000 members and public channels create environments where privacy is inherently limited. Public channels are indexed by search engines and third-party Telegram search tools. Group messages are visible to all members, and administrators can see member information. Telegram has become a hub for pirated content, extremist material, and scam operations, which increases the risk of being exposed to harmful content or having your participation in groups used against you. Bots within groups can harvest member data including usernames and profile information. The permissive content moderation policy that attracts users seeking freedom also creates an environment where malicious actors operate more freely.
Recommended Privacy Settings
| Setting | Where | Recommended |
|---|---|---|
| Phone Number Visibility | Settings > Privacy and Security > Phone Number | Set phone number visibility to Nobody so your phone number is not exposed to people who find your account |
| Secret Chats | Contact profile > Start Secret Chat | Use Secret Chats for any sensitive one-on-one conversations to enable actual end-to-end encryption |
| Two-Factor Authentication | Settings > Privacy and Security > Two-Step Verification | Enable two-step verification with a strong password to prevent account takeover through SIM swapping attacks |
Safer Alternatives
Our Verdict
Telegram earns a caution rating because its privacy reputation significantly exceeds its actual security protections. The lack of default end-to-end encryption means most Telegram conversations are accessible to the company and potentially to authorities. The MTProto protocol has not received the same level of independent scrutiny as the Signal Protocol. Policy changes following legal pressure have reduced Telegram resistance to data requests. If you use Telegram, enable Secret Chats for sensitive conversations and understand that regular messages are not private from the platform operator. For genuine message privacy, Signal provides fundamentally stronger protections with less user effort required.
Related Safety Checks
Frequently Asked Questions
Are regular Telegram messages encrypted end-to-end?
No, regular Telegram messages are not end-to-end encrypted. They use server-client encryption, which means Telegram servers can access message content. Only manually initiated Secret Chats between two individuals provide end-to-end encryption. Group chats, channels, and standard one-on-one conversations are all accessible to Telegram. This is the most important privacy fact about Telegram that most users misunderstand. If your threat model requires that nobody except the intended recipient can read your messages, you must use Secret Chats or switch to Signal, which encrypts everything by default.
Did Telegram start sharing data with law enforcement?
Following the arrest of founder Pavel Durov in 2024, Telegram updated its policies to indicate greater cooperation with legal authorities. The platform now shares IP addresses and phone numbers in response to valid legal orders in certain jurisdictions. This represents a significant shift from Telegram previous position of minimal cooperation with authorities. The exact scope of data sharing and which jurisdictions receive cooperation remains somewhat opaque. Users who relied on Telegram as a platform resistant to government data requests should reassess their privacy assumptions and consider whether the current policy meets their needs.
Is Telegram safer than WhatsApp for private messaging?
For private messaging, WhatsApp actually provides better default encryption than Telegram because WhatsApp encrypts all messages end-to-end using the Signal Protocol. Telegram only encrypts Secret Chats end-to-end, and most users never enable this feature. However, WhatsApp shares metadata with Meta for advertising, which Telegram does not do. The choice depends on your priorities. If message content privacy is paramount, Signal surpasses both platforms. If you must choose between Telegram and WhatsApp, WhatsApp default encryption is technically stronger, but its Meta data sharing creates different privacy concerns.