Telegram Privacy Settings Guide: Phone Number, Last Seen, Read Receipts, Group Invites (2026)
Many people use Telegram for years without opening the privacy panel—leaving phone number, last seen, and photo visible to everyone, and staying open to random group adds. You can tighten this in a few minutes without breaking chats with people you already know.
Controls live under Settings → Privacy and Security. Change four items first: phone visibility Nobody, find-by-number My Contacts, last seen Contacts or Nobody, group invites My Contacts—and keep two-step verification on. The goal is making number-based discovery and forced group adds hard, not making your own account unusable.
How to read the panel
| Setting | Controls | Recommended |
|---|---|---|
| Phone Number | Who sees / finds you by number | See Nobody; Find My Contacts |
| Last Seen & Online | Who sees online/last seen | Contacts or Nobody |
| Profile Photo | Who sees your photo | Everybody or Contacts |
| Forwarded Messages | Whether forwards link back to you | My Contacts is safer |
| Groups & Channels | Who can add you | My Contacts |
| Calls | Who can call | My Contacts |
Five-minute pass: phone options → last seen → group invites → calls → confirm two-step + recovery email → optional passkeys and a Devices check. Sensitive threads belong in secret chats.
Phone number: tighten this first
The number is both a login credential and a social-engineering handle. Path: Settings → Privacy and Security → Phone Number. After hiding visibility, share a @username—see hide phone number. Hiding the number is not invisibility: usernames, member lists, and invite links can still surface you.
Last seen, groups, and calls
Last seen is reciprocal: set Nobody and you also lose precise last seen on others. Prefer Exceptions when you only need to hide from some people. Set group invites to My Contacts so strangers send links you choose to open; set Calls the same way to cut most cold calls.
Already being harassed: block and report
Privacy prevents; block cuts off. Block User from the profile or chat menu stops messages and calls; report scams or harassment too. Blocked people rarely get a toast, but their messages stop delivering. Blocking one pest does not fix a stolen login—use account recovery if sessions look wrong.
Myths, and pairing with account security
| Myth | Reality |
|---|---|
| Hidden number means unfindable | Username, groups, invite links still work |
| Hidden last seen = full stealth | Reciprocity cuts your view of others too |
| Normal chats can disable read receipts | Generally no; stronger control needs other modes |
| Privacy alone is enough | Still need two-step + Devices checks |
Privacy governs who can see and contact you; account security governs who can sign in. After tightening privacy, run account security settings; for fake-support links use the phishing guide. Recheck after number changes, new groups, or harassment—not every day.
| Goal | Change first | Do not ignore |
|---|---|---|
| Fewer number searches | Both phone options + username publicly | Posting the raw number in groups |
| Less activity leakage | Last seen + Exceptions | Turning off every social signal at once |
| Fewer spam adds | Group invites = Contacts | Leaving public invite links forever |
| Stop takeovers | Two-step + Devices | Privacy-only hardening |
FAQ
How do I stop people finding me by phone number on Telegram?
Go to Settings → Privacy and Security → Phone Number. Set “Who can see my phone number” to “Nobody” and “Who can find me by my number” to “My Contacts”. Strangers who have your number then cannot search and add you directly; share a @username instead if you want to be reachable.
How do I hide my last seen on Telegram?
Go to Settings → Privacy and Security → Last Seen & Online and set it to “Nobody”. Note Telegram’s reciprocity rule: if you hide yours, you also stop seeing other people’s last seen. Use “Exceptions” to reveal it to specific contacts.
Can I turn off read receipts on Telegram?
In standard one-to-one chats, read receipts cannot be fully disabled — both sides see whether a message was read. Only Secret Chats and some paid features offer stronger control. If it matters to you, use a Secret Chat or manage “Last Seen” to reduce behavioral exposure.
How do I stop strangers adding me to Telegram groups?
Go to Settings → Privacy and Security → Groups & Channels and set “Who can add me” to “My Contacts”. Strangers then cannot drag you into groups; they can only send an invite link you choose to accept, which cuts down spam and scam groups.
How should I use Exceptions without creating holes?
Exceptions are for “strict globally, open for a few”: e.g. hide last seen from everyone, then allow family. Or the reverse: open globally, block a few. Review the lists when contacts change — don’t leave untrusted people on an allow list forever.
Is tightening privacy enough, or do I still need two-step verification?
Not enough alone. Privacy controls who can see/contact you; two-step verification controls who can log in. Tight privacy without two-step still leaves SMS-code takeover possible. Use the combo: core privacy four + two-step + regular Devices checks.
If I set a username, do I still need to hide my phone number?
Yes. A username makes you reachable; the phone number is still a login and social-engineering entry. Prefer @username publicly, set number visibility to Nobody and find-by-number to My Contacts — same top priority as in the article.
After I block someone, can they keep harassing me from another account?
Blocking only stops that account. A new number can still try, so keep group invites and calls on My Contacts, and keep reporting. For repeat abuse, block+report again and check whether your username or invite links were leaked.
If Last Seen is Nobody, will friends think I deleted them?
Most people only see that you hid Last Seen — it isn’t the same as deleting a chat. Add Exceptions for close contacts if you worry about misunderstandings. Prioritize hiding the phone number and group invites; tune Last Seen to your social comfort.
Privacy is tightened — do I still need two-step verification?
Yes. Privacy controls who finds you and what they see; two-step controls who can sign in. They complement each other — the article already notes privacy alone isn’t enough against takeover.
Need the installer or platform notes?
The download page lists versions, requirements, and install entry points.
Open download page