In this article
A Secret Chat is encrypted between two specific devices. Telegram's servers carry the messages and cannot read them, and that is a real and meaningful guarantee.
It is also the most oversold feature in the app. Almost everything people expect it to prevent, it does not prevent — and being precise about the boundary is what makes it useful rather than falsely reassuring.
What you will be able to do after this step
- check_circle Start a Secret Chat and verify it with the person you are talking to.
- check_circle State exactly what it protects against, in one sentence.
- check_circle Say why screenshot blocking is a deterrent rather than a guarantee.
- check_circle Decide, per conversation, whether the trade is worth making.
lock Two different arrangements, on purpose
Everything up to now has described cloud chats: encrypted between your devices and Telegram's servers, stored there, and therefore available everywhere you sign in. That storage is what Step 024 was about, and it is what makes a lost phone a shopping problem rather than a disaster.
A Secret Chat inverts it. The two devices agree a key directly, and the servers only ever relay material they cannot read. Nothing is stored in your account, so nothing follows you to a second device — the conversation exists on the two handsets that created it and nowhere else.
Those are not better and worse. They answer different questions. A cloud chat is the right default for a conversation you want to keep and be able to reach; a Secret Chat is right when the point is that no copy should exist anywhere else, and you accept everything that follows from having no copy.
rule The comparison, honestly
The last column is the one worth reading twice, because it is where the expectations are.
| Cloud chat | Secret Chat | What that means for you | |
|---|---|---|---|
| Who can read it in transit | You, them, and Telegram's servers. | You and them. The servers carry ciphertext. | This is the actual guarantee, and it is a real one. |
| Other devices | Every client you sign in to. | Neither. It is on these two handsets only. | No laptop, no tablet, no web. Not a bug — the point. |
| Losing the device | Sign in elsewhere; nothing is lost. | The conversation is gone permanently. | There is no backup, no export, and no recovery of any kind. |
| Forwarding | Anything can be forwarded onward. | Blocked within the app. | Stops the easy route. Does not stop a determined one. |
| Screenshots | Permitted, unrecorded. | Blocked or reported, depending on the platform. | A second phone pointed at the screen defeats both. |
| Self-destruct timer | Available as chat-wide auto-delete. | Per message, starting when it is read. | Removes the copy on both devices. Not what was remembered. |
Read the whole table and the summary is short. A Secret Chat protects the conversation against the line and against the service. It does not protect it against the person you are talking to. Everything people are disappointed by lives in that second sentence.
fingerprint Verifying that nobody is in the middle
Encryption between two devices only helps if the device on the other end is the one you think it is. That is the problem key verification solves, and it takes about fifteen seconds.
Each Secret Chat has a key visualisation — a picture generated from the shared key, shown in the chat's settings. If you and the other person are looking at the same picture, no third party sat in the middle of the exchange. If they differ, something is wrong and you should stop using that chat.
The comparison has to happen outside the chat you are verifying, which is the part people skip. Screenshotting the picture and sending it through the same conversation proves nothing, because that is exactly the channel you are trying to check. Compare it on a call, in person, or over something else entirely.
One point of confusion worth clearing up: voice and video calls use four emoji for the same purpose, and Secret Chats use an image. They are the same idea in different clothes — a short fingerprint of the key that two humans can compare aloud or by eye.
timer The self-destruct timer, and what it is really for
Inside a Secret Chat each message can carry a timer, and the timer starts when the message is read rather than when it is sent. Once it elapses, the copy goes from both devices.
That is genuinely useful for a narrow thing: not leaving material sitting in a conversation for years. It is a tidying mechanism, and it is a good one.
What it is not is a recall. The other person read it — that is what started the clock. They may have photographed the screen, written it down, or simply remembered. A timer removes the artefact, and the artefact was never the sensitive part.
The related setting outside Secret Chats is worth knowing since it covers most people's actual need: ordinary chats support an auto-delete period applying to the whole conversation, without any of the device restrictions on this page. Step 026 goes through both, including the ways people expect deletion to work and are wrong.
psychology_alt When to actually use one
Here is the recommendation stated plainly, because a page about encryption that does not give one is not much use.
Most of your conversations should stay cloud chats. Searchable, available on every device, and recoverable when hardware fails — those are not conveniences to be embarrassed about, they are the reasons the app is pleasant to use, and giving them up buys nothing for a conversation about dinner.
A Secret Chat earns its cost when the existence of a stored copy is itself the risk. That is a narrower set than people assume: material that would be damaging if the account were ever compromised, a conversation somebody might later be compelled to produce, work with a source. In those cases the trade is correct and the inconveniences are the point.
And there is a third category worth naming, because it is where people go wrong in both directions: conversations that feel sensitive but whose real risk is the other person. A Secret Chat does nothing there. What helps is deciding what to put in writing at all — which is not a setting, and is the more reliable control.
touch_app Setting one up properly
Four steps. The third is the one that is almost always skipped, and it is the one that turns encryption into something you can rely on.
- Start it from the other person's profile On a phone, open their profile and choose to start a Secret Chat. It appears as a separate conversation with a lock beside the name — not as a mode inside the chat you already had.
- Wait for them to open it Nothing is encrypted until their device has taken part in agreeing the key. Until then the chat sits there looking half-made, which is exactly what it is.
- Compare the key picture — somewhere else Open the chat's settings, find the key visualisation, and check it against theirs on a call or in person. Comparing it inside the chat you are verifying proves nothing.
- Set a timer only if you want the copy gone It is a tidying tool, not a recall. And decide now what you would lose if that phone died tonight, because that is the whole of the backup plan.
help Common questions at this stage
Are my ordinary chats not encrypted, then?
They are — between your device and Telegram's servers, and stored encrypted there. What differs is who holds keys: in a cloud chat the service can access the content, which is what lets it deliver your history to a new laptop. "Encrypted" and "end-to-end encrypted" are two different statements, and the first is true of everything here while the second is true only of Secret Chats and calls.
Why can I not start a Secret Chat in a group?
Because the guarantee is between two devices. Adding a third participant means agreeing keys with another party and keeping every device in step, which is a substantially harder problem — and any member could still repeat what was said. Secret Chats are one-to-one by design. Group voice calls do have their own end-to-end encryption with the same kind of verification, which is a separate feature.
What happens if I log out or reinstall?
Every Secret Chat on that device ends permanently. There is no export, no backup, and no way to restore one — the keys were on the device and you removed them. This catches people out when they switch phones, so it is worth deciding in advance: anything in a Secret Chat that you will want next year is in the wrong place, by definition.
Does the other person need to do anything?
They need to be on a client that supports Secret Chats and to open the invitation — the chat is not live until their device has taken part in agreeing the key. If nothing seems to happen, the usual reason is that they have not opened it yet, or they are on a client that does not have the feature. Then verify the key picture with them, which is the step that turns encryption into confidence.
Will I be told if they screenshot it?
On some platforms, yes, a notice appears in the chat. Do not build anything on it. It tells you about one particular method on one particular operating system, and says nothing about a photograph taken with another device, a screen recording on a system that permits it, or somebody simply reading it aloud. If a notification would change what you are willing to send, the thing to change is what you send.
Is there any way to search or back up a Secret Chat?
No to both, and the two answers have the same cause. There is no server-side copy to search and nothing for the export tool in Step 048 to read. If you need a record of a conversation, a Secret Chat is the wrong container — and noticing that tension early is useful, because it usually means what you actually wanted was a cloud chat with an auto-delete timer.
At a glance
- 1Start and verify
Open a Secret Chat and compare the key image with the other person.
- 2What it protects
The network and the server cannot read it; the person you talk to can.
- 3Screenshots
Blocking is a deterrent, not a guarantee; a second phone defeats it.
Updated
