Default Telegram settings expose your phone number to anyone you message. Takes 2 minutes to fix. Here's exactly what to lock down before you start browsing profiles or messaging new people.

Why default settings are dangerous

Out of the box, Telegram exposes:

• Phone number: Visible to anyone you message
• Last seen: Shows when you're online (stalker's dream)
• Profile photo: Public to everyone
• Groups: Anyone can add you to spam groups
• Calls: Anyone can call you randomly

This makes you vulnerable to doxxing, spam, and unwanted contact. The good news: every setting is customizable and free.

The 2-minute privacy lockdown (step-by-step)

Follow these steps on iPhone or Android. Takes 2 minutes, protects you forever.

Setting 1: Phone number (CRITICAL)

Tap "Phone Number"

• Who can see my phone number: Set to "Nobody"
• Who can find me by my number: Set to "My Contacts"

What this does: Hides your phone number from everyone, including people you message via username. They can only contact you via @username.

Setting 2: Last seen & online

Tap "Last Seen & Online"

• Who can see my last seen time: Set to "Nobody" or "My Contacts"

What this does: Prevents people from tracking when you're online. No more "last seen today at 3:42 PM" stalking.

Trade-off: If you set to "Nobody," you won't see others' last seen either. Worth it for privacy.

Setting 3: Profile photo

Tap "Profile Photo"

• Who can see my profile photo: Set to "My Contacts" or "Nobody"

What this does: Controls who sees your profile picture. "Contacts" means only people you've saved can see it.

Recommendation: Use "My Contacts" if you want to appear friendly. Use "Nobody" for maximum privacy.

Setting 4: Groups and channels

Tap "Groups and Channels"

• Who can add me to groups and channels: Set to "My Contacts"

What this does: Stops strangers from adding you to spam groups. You'll still receive invite links, but they can't force-add you.

Setting 5: Calls

Tap "Calls"

• Who can call me: Set to "My Contacts"
• Peer-to-Peer: Set to "My Contacts" or "Nobody" (protects your IP address)

What this does: Blocks random calls from strangers. Peer-to-Peer setting prevents IP address exposure during calls.

Setting 6: Forwarded messages

Tap "Forwarded Messages"

• Who can add a link to my account when forwarding my messages: Set to "Nobody"

What this does: When someone forwards your message, your name won't appear as a link. Prevents people from finding you via forwarded messages.

Bonus privacy settings (advanced)

1. Two-step verification (highly recommended)

Settings → Privacy and Security → Two-Step Verification

Set a password that's required when logging into Telegram on a new device. Protects you if someone gets your phone number.

2. Active sessions

Settings → Privacy and Security → Active Sessions

See all devices logged into your Telegram. Terminate any sessions you don't recognize.

3. Passcode lock

Settings → Privacy and Security → Passcode Lock

Require a passcode to open Telegram on your device. Useful if someone has physical access to your phone.

4. Secret chats (for sensitive conversations)

How to start: Open any chat → Menu (three dots) → "Start Secret Chat"

Secret chats are end-to-end encrypted, device-specific (don't sync to cloud), and support self-destruct timers.

When to use: Discussing sensitive info, financial details, or anything you'd never want stored on a server.

5. Link previews (disable for unknown senders)

Settings → Privacy and Security → Disable link previews

Prevents automatic loading of link previews, which can contain tracking pixels or malicious content.

Username tips (stay anonymous)

Your username is how people find and message you. Keep it safe:

• Don't use your real name: @john_smith_nyc is doxxing yourself. Use @cityexplorer_nyc instead.
• Don't reuse usernames: If your Telegram username matches your Twitter or Instagram, people can link your accounts.
• Change it periodically: Settings → Edit Profile → Username. Change every few months to break old links.
• Keep it memorable: Short, simple usernames are easier for people to remember and type.

For more on sharing your username safely, read our guide on best first messages that work.

What about discovery platforms?

If you're using city-based discovery feeds, your username will be visible to people browsing. That's intentional—it's how they message you.

Key difference: Your username is visible, but with the settings above, your phone number, last seen, and other personal details stay hidden.

Control what's shared:

• Visible: Username, display name, bio, profile photo (if set to "Everyone")
• Hidden: Phone number, last seen, real name, exact location

iOS vs Android differences (none that matter)

Privacy settings are identical on iPhone and Android. The only difference is where to find Settings:

• iPhone: Bottom right icon
• Android: Menu (three lines) → Settings

Once you're in Settings → Privacy and Security, everything's the same.

Common mistakes (what not to do)

Mistake #1: Skipping phone number settings
Fix: This is the most important setting. Set to "Nobody" before messaging anyone.

Mistake #2: Using your real name as username
Fix: Choose a nickname or pseudonym that doesn't reveal your identity.

Mistake #3: Leaving groups/channels on "Everyone"
Fix: Set to "My Contacts" to stop spam group additions.

Mistake #4: Not enabling two-step verification
Fix: Takes 30 seconds. Protects you if someone gets your phone number.

Mistake #5: Ignoring active sessions
Fix: Check periodically. Terminate sessions you don't recognize.

How to verify your settings work

After configuring, test with a friend: