Telegram pros & cons.
+ Pros
End-to-end (E2E) encryption;
Encryption algorithms: MTProto, a custom protocol;
Open-source apps and Telegram Database Library;
Self-destructing messages;
Users can be logged in on multiple devices simultaneously;
Supports Two-Step Verification;
GDPR-compliant.
– Cons
Registration requires a phone number;
E2E encryption only for Secret Chats;
Servers are not open source;
Logs IP Address and other user data.
Now we’ll briefly touch on the main features of Telegram messenger.
Telegram messenger features
Here are some key features to consider when deciding whether Telegram is right for you:
Code for the open source parts is available on GitHub;
Telegram apps for Android, iOS, Windows Phone, macOS, Windows, Linux, popular browsers;
Exceeding 500,000 active users.
Where is your Telegram data stored?
Telegram has a hybrid system for storing your data. By default, all your message data is stored on your devices. However, you can remove data from this local cache, and store it on Telegram’s servers. This allows you to balance your desire for privacy against the need for data storage space.
Those Telegram servers are located throughout the world as part of a distributed network.
Telegram third-party testing and audits.
No data available.
How secure and private is Telegram.
Telegram has taken a beating over the years due to doubts about its security model. The concerns target two main areas: E2E encryption, and MTProto security. Let’s examine each of these areas.
E2E encryption.
The concern about Telegram’s E2E encryption is that it is not applied by default. Most chats (Cloud chats) on Telegram are securely encrypted while in transit between your devices and Telegram’s servers. Once chat messages arrive at the Telegram servers, they are encrypted using MTProto while at rest on the servers. However, Telegram can read chat data since it handles the encryption/decryption of messages at the servers.
Other secure messaging services, such as Signal, apply E2E encryption on all communications by default. The service cannot read those messages. Only the sender and the recipient can read E2E encrypted messages. In other words, any service that uses E2E encryption for all their messages will be more secure than Telegram.
Telegram does support E2E encryption for two types of communications: Secret Chats, and voice calls. Secret Chats are chats that are not stored on Telegram servers, and are only accessible to the devices involved in the chat. Secret Chats should be as secure as MTProto, but users need to remember to turn them on.
MTProto security.
MTProto is the custom mobile protocol designed by the Telegram team. Check out this Wikipedia link to get a better sense of the flak this protocol has taken over the years.
Telegram logs IP address and metadata.
On the privacy front, Telegram can collect a decent amount of personal information, which it can keep for up to 12 months. According to their Privacy Policy, they,
may collect metadata such as your IP address, devices and Telegram apps you’ve used, history of username changes, etc.
They may use aggregated metadata from you to help them create new features for the service.
Finally, the company can read any of your Cloud Chat messages to investigate spam and other violations of their Terms of Service. They may share some of your personal data with other Telegram users you choose to communicate with and companies within the Telegram Group. If forced by a court order, they may provide your IP address and mobile number to the appropriate authorities.
It would be wise to use Secret Chats and voice calls whenever you wish to share private information on Telegram.
There is also a section of the Privacy Policy titled, “Law Enforcement Authorities” that reads as follows:
If Telegram receives a court order that confirms you’re a terror suspect, we may disclose your IP address and phone number to the relevant authorities. So far, this has never happened. When it does, we will include it in a semiannual transparency report published at: https://t.me/transparency.
This is important to keep in mind when using Telegram.
Using Telegram without your real phone number.
While we’re on the topic of privacy, it’s also important to note that Telegram requires a phone number to create an account. This is a verification step to prevent bots and spammers from mass-registering.
Verification happens via a text message or phone call, and then you enter the verification code to begin using the service. But here’s the essential privacy tip: you don’t have to use your phone number.
There are many anonymous SMS services you can find online that allow you to receive text messages to digital numbers. There are both free and paid SMS services available that you can find with a bit of research (enter a search term like disposable SMS into your browser). You may have to try with a few different services and numbers before you can get a Telegram verification code to come through and work, but it will ensure your real phone number stays safe.
Registering with a disposable SMS number, and using a good VPN/TOR when you use Telegram, will significantly increase your privacy.
Last edited by a moderator:
