In this article
Tap a link in Telegram and a web page opens without leaving the app. You can shrink it to a strip at the bottom, go back to your conversation, and pull it up again with the page exactly as you left it.
It is a good piece of design and it quietly became a second browser — one with its own logins, its own accumulated tabs, and none of the equipment your real browser has. Knowing where that boundary is matters more than knowing which setting to choose.
What you will be able to do after this step
- check_circle Switch link opening between Telegram and your own browser.
- check_circle Say which tasks should never happen inside the in-app browser.
- check_circle Explain why your password manager's silence is a warning you lose here.
- check_circle Clear the tabs and sessions that accumulate without anybody noticing.
menu_open What it is, and what the setting controls
The in-app browser is a web view that lives inside Telegram. It has a back control, an address it will show you if you ask, and on current versions it can be minimised to a bar so several pages stay open behind your chats.
A single switch in the settings decides whether links open there or in whatever browser your device uses by default. Turning it off sends every link out to that browser instead.
One thing is not covered by the switch, and it is worth separating now: mini apps are not web links. Something launched from a bot or an attachment menu runs in its own container regardless of this setting, and Step 088 is where that subject belongs. The setting here governs ordinary links to ordinary websites.
Read it here, or leave first
The question is never which browser is better in general. It is what you are about to do on that page.
preview Fine to open in Telegram
alt_route Leave before you do this
Reading is fine anywhere. Identity and money belong in the browser you chose, where your own protections are installed and where you can see what is signed in.
password The warning you stop receiving
This is the strongest argument in the step and it has nothing to do with encryption.
A password manager offers to fill in your details only on the exact site it saved them for. That behaviour is usually described as convenience, and it is quietly something else: when the manager stays silent, it is telling you that this is not the site you think it is. A convincing copy at a lookalike address gets no offer to autofill, and a great many people have been saved by noticing that nothing appeared.
Inside an in-app browser you generally do not get that signal. Extensions are not there, and integration with a manager is limited or absent depending on the platform. So the page looks right, nothing offers to fill in the password, and you type it manually — which is exactly the behaviour the silence was supposed to prevent.
None of that makes the in-app browser malicious. It makes it a browser without your equipment in it, which is a different and perfectly ordinary problem. The remedy is to move, not to worry.
devices The second browser nobody audits
Because pages persist, sessions persist. Sign into something in the in-app browser and that login stays there, in a place you never open deliberately and would not think to check.
That produces two habits worth adopting, neither of which takes long.
Close tabs you have finished with. The minimise bar makes leaving things open the default, and a dozen forgotten pages is both clutter and a set of live sessions.
Clear its data occasionally. There is an option to clear cookies and browsing data for the in-app browser in the settings beside the toggle. Doing it once in a while signs out anything lingering there, and costs you nothing you will miss.
This is the same reasoning as Step 028's device list, one level down. The account audit you do every few months covers Telegram sessions; the browser inside Telegram is not on that list, and nothing else is watching it.
touch_app Try it now — five minutes
Four steps, and the second one is a discovery for most people.
- Find the in-app browser setting In the chat settings, beside the other link options. Whether you turn it off is your choice; knowing the switch exists is the point.
- Look at how many pages you have minimised Open the bar and count. Most people who use recent versions have several they forgot about, including one they signed into.
- Clear the in-app browser data once Next to the same toggle. It signs out the strays and costs nothing.
- Adopt one rule for logins When a page asks who you are, open it in your real browser instead. That single rule captures nearly all of the value in this step.
library_books The third destination nobody mentions
Links do not open in only two places. Some pages have a reader version — a stripped-down rendering of the article itself, opened instantly, with the banners, consent dialogues, autoplaying video and tracking scripts absent.
When it is available you are offered it, and it is a genuinely good way to read something linked from a channel. It loads immediately even on a poor connection, it is legible on a phone without pinching, and it removes the modern experience of fighting a page for thirty seconds before reaching a paragraph.
It is also a reconstruction, and that is the part to know. The reader version contains what the parser could identify as the article, which means tables, charts, footnotes, embedded media and anything added to the page afterwards — including a correction published later — may simply not be there. Nothing tells you what is missing.
So the honest rule is the same shape as everything else in this step: read it here, and open the real page before you rely on it. For following a story, the reader version is better than the website. For quoting it, forwarding it as fact, acting on a number in it, or checking whether it has been updated, open the original.
help Common questions at this stage
Is the in-app browser less secure than my normal one?
Not in the sense of being unsafe to use. It is built on the operating system's own web engine, so the page is rendered the same way. What it lacks is everything you have added to your own browser — extensions, blocking, a password manager, and a settings screen you know. Calling it insecure is wrong; calling it unequipped is accurate, and that is enough to decide where logins should happen.
If I turn it off, what changes?
Links open in your default browser, which means an app switch each time and losing the minimise-and-return behaviour. Nothing breaks. People who rely on blocking extensions or a password manager usually find the trade worth it; people who mostly read articles from channels usually do not. It can be changed back at any time and neither choice is permanent.
Can a website tell that I came from Telegram?
A site can generally see something about the browser making the request, and links people share often carry tracking parameters added by whoever posted them. That is true of every browser and is not particular to this one. If you want less of it, the useful measures are the ones in your own browser — which is another reason the answer to "where should I open this" sometimes has an answer.
Why do some links refuse to open outside Telegram?
Addresses that are not ordinary web addresses — links into the app itself, mini apps, and certain blockchain-style names — are handled inside Telegram by design and the browser setting does not apply to them. It is worth noticing rather than fighting: something that will only open in one place is a signal about what it is, and warrants the same caution as any unexpected link.
Do my in-app browser tabs sync between devices?
No. They are local to the device, in the same way as the cache from Step 043 and the auto-download settings from Step 044. So a page you left open on your phone is not waiting on your laptop, and equally, clearing browser data on one device does not clear it on another. If you have signed into something on several devices this way, each one needs its own tidy.
What about links in channels I do not know?
The browser choice is secondary there; the question is whether to tap at all. Press and hold, read the domain, and decide. If you do open it, the in-app browser is arguably the better place precisely because it is not where your logins live — a page that tries something is talking to a browser with nothing in it. What it must never become is the place you then type a password to "check your account".
At a glance
- 1Choose the browser
Links can open inside Telegram or in your own browser.
- 2Keep logins outside
Sign in and pay in your own browser, where your password manager works.
- 3Clear the tabs
In-app tabs keep sessions open until you close them.
Updated