App Review

Telegram Review (2026): The 900-Million-User Choice — with a Crypto Footgun

Fastest messenger with the biggest groups

7.5
/ 10
★ 3.8 / 5

Telegram is the most user-friendly cloud messenger for very large groups, channels, and bots. But its default chats are not end-to-end encrypted — and you have to remember to start a Secret Chat for true privacy. We rate 7.5 / 10: the clear winner for broadcasting at scale, but the wrong choice if you want encryption by default.

Reviewed by the xchat.directory editorial team · Last reviewed

Telegram at a glance

Price Free + paid tiers
Encryption Optional in select chats
Owner Commercial · United Arab Emirates
Phone required Yes
Open source Clients only (server closed)
Platforms iOS / Android / Web / Desktop
Group size 200,000 members
Founded 2013

What Is Telegram?

Telegram is a cloud-first messenger founded in 2013 by brothers Pavel and Nikolai Durov, the founders of VKontakte (Russia's largest social network). It's the second-largest messenger globally with about 900 million monthly active users, behind only WhatsApp. Telegram's UX is the fastest and most polished of any messenger on the market, and its cloud-sync design means your chats are available on every device simultaneously — phone, tablet, laptop, web — without any setup.

Telegram's killer feature is scale: its Channels feature supports up to 200,000 subscribers per channel, far beyond any competitor. Its bot platform is unmatched. Its broadcast audio (Voice Rooms) is genuinely well-built. For public broadcasting, tech community announcements, crypto project coordination, and massive group chats, Telegram is the obvious choice.

The privacy tradeoff is significant: most Telegram chats are not end-to-end encrypted. Understanding this — and how Secret Chats work — is the most important part of using Telegram safely.

Privacy & Security — The Footgun Most Users Miss

Telegram's encryption design is unique and confusing for users coming from WhatsApp or Signal. Two modes exist:

Cloud Chats (default)

When you open a new chat in Telegram, you're in a Cloud Chat. Cloud Chats are encrypted between your device and Telegram's servers (so a network observer can't see them), but Telegram's servers can read the contents because they hold the encryption keys. Cloud Chats are stored in Telegram's cloud and synchronized across all your devices.

This design is what enables Telegram's UX wins — search across all history, unlimited devices, links that open in the web preview. But it means Telegram itself can read your messages, and is in principle obligated to comply with lawful access requests in the jurisdictions where it operates.

Secret Chats (opt-in)

Secret Chats are Telegram's end-to-end encrypted mode, using a variant of the MTProto protocol. Critical differences from Cloud Chats:

  • Telegram's servers cannot read Secret Chat contents.
  • Messages can self-destruct after a custom timer.
  • Secret Chats are device-specific — they don't sync to your other devices.
  • Secret Chats cannot be used in group chats — only 1:1.
  • You have to deliberately start one (tap the user's profile → "Start Secret Chat").

The critical user-experience issue: forgetting to start a Secret Chat means your "private" conversation is in Cloud Chat mode. There is no warning, no default, no in-chat indicator. Telegram's privacy defaults actively work against its users in 2026.

MTProto — Telegram's custom crypto

Telegram uses its own MTProto protocol, designed in-house, not the Signal Protocol that WhatsApp, Signal, Google Messages, and Skype use. MTProto has been audited and criticized by cryptographers over the years — some components of its initial design were later modified in response to academic critique. For 1:1 Secret Chats the current implementation is widely considered secure by working cryptographers, but it has less long-term peer review than the Signal Protocol.

Server location and jurisdiction

Telegram is officially operated by Telegram Messenger LLP, registered in the United Arab Emirates. Its servers are distributed globally. This is a different jurisdiction than either the EU or the US — UAE has its own lawful-access framework, and Telegram has publicly clashed with some governments (Russia, briefly Iran) while cooperating with others. For European users, GDPR applies to Telegram's user-data handling.

Features — The Ecosystem Wins

  • Up to 200,000-member groups and Channels — far beyond any competitor
  • Cloud sync across unlimited devices — your chats are on every device simultaneously
  • Telegram Bots — the most extensive bot platform in any messenger
  • Channels — broadcast to unlimited followers, with comment control
  • Voice Chats — drop-in audio rooms, like Clubhouse or Discord, but in any chat
  • Video messages, voice notes, file sharing up to 2GB per file
  • Telegram Premium — paid tier for larger uploads, faster downloads, custom stickers, exclusive reactions (still free for non-Premium users)
  • Custom themes, animated backgrounds
  • Stories — Telegram's version of Stories, on Cloud Chats (server-readable)

For most users, Telegram feels fastest of any messenger. Polling is near-instant on good networks; media uploads are fast because Telegram operates its own CDN.

Cost — Freemium, With Telegram Premium

Telegram itself is free with no advertising in private chats. Telegram Premium (around USD 4.99/month) unlocks larger uploads (4GB per file), faster download speeds, custom emoji status, exclusive stickers, and a few other niceties. The bulk of Telegram's funding reportedly comes from Durov and a small set of investors, with monetization aimed at Premium subscriptions and select business advertising in public channels.

Who Should Use Telegram?

Telegram is the right choice if:

  • You need to broadcast to a large public channel (news, tech announcements, crypto projects, communities of 10k+)
  • You depend on Telegram Bots for workflow automation
  • You want the cleanest cross-device cloud sync of any messenger
  • You want free file sharing up to 2GB (or 4GB on Premium)
  • You mostly communicate in unencrypted environments (public groups, broadcast announcements)

Telegram is the wrong choice if you assume default chats are end-to-end encrypted — they aren't. If you want every message encrypted by default with no opt-in, choose Signal or Threema. If you depend on the meta-ecosystem and want E2EE by default, WhatsApp remains the practical choice.

Telegram vs Signal vs WhatsApp vs Threema — Quick Comparison

Vs Signal: Signal wins on default privacy; Telegram wins on ecosystem. Pick Signal for private 1:1 or small-group chat; pick Telegram for broadcasting at scale. We have a full Signal vs Telegram comparison.

Vs WhatsApp: WhatsApp turns on E2EE by default; Telegram does not. WhatsApp caps at 1,024 per group; Telegram goes to 200,000. Pick WhatsApp for encryption-everywhere messaging to people you know; pick Telegram for large public communities and cloud-synced cross-device reach.

Vs Threema: Threema turns on E2EE by default with no phone number needed, but it's a much smaller platform with fewer ecosystem features. Threema is the cleaner privacy pick; Telegram is the feature/broadcast pick.

The Honest Verdict

Telegram is one of the best consumer messaging products ever shipped, and the worst-at-marketing-encryption reality. The combination of "cloud-first speed and cross-device sync" with "opt-in encryption only, no per-conversation warning, no group Secret Chat mode" means that most Telegram users who think their chats are private are mistaken.

Our practical recommendation in 2026: install Telegram if you need the broadcast and ecosystem features, but route any conversation where privacy matters into Signal or WhatsApp. Don't use Telegram Cloud Chats for sensitive conversations, ever — set the privacy reminders in your head and reach for the right app per conversation. Telegram is a great product. It is not an end-to-end encrypted messenger by default, and that distinction matters.

What we like

  • Massive 200K-member channels for public broadcasting
  • Cloud sync across unlimited devices
  • Telegram Bots platform — unmatched extensibility
  • Fast even on slow networks; voice rooms and video notes

What we don't

  • Default chats are NOT end-to-end encrypted (server-encrypted only)
  • Secret Chats must be opted into per conversation
  • Closed source servers
  • Phone-number required for signup

Common questions

Is Telegram encrypted like WhatsApp?

No. WhatsApp uses end-to-end encryption by default for personal messages, calls, and groups, so WhatsApp cannot read their content. Telegram encrypts normal Cloud Chats only between your device and its servers and keeps decryptable copies in its cloud. Telegram provides end-to-end encryption only in manually started, one-to-one Secret Chats, not normal chats or groups.

Is Telegram encrypted and safe?

Telegram protects data in transit and offers useful account controls, but normal Cloud Chats are not end-to-end encrypted. They are suitable for public communities and ordinary, non-sensitive conversation, not for messages that must remain unreadable to the service. Use Secret Chats for sensitive one-to-one messages, enable two-step verification, review active sessions, and remember that malware or an unlocked phone can expose any chat.

Is Telegram encrypted from police?

Normal Telegram Cloud Chats are not protected from Telegram itself by end-to-end encryption, so stored content and account data may be available when the company responds to valid legal process under its policies and applicable law. Secret Chat content is end-to-end encrypted and is not stored in Telegram cloud history, but device seizures, screenshots, participant reports, phone records, and metadata can still expose information.

Is Telegram encrypted like Signal?

No. Signal end-to-end encrypts every supported conversation by default, including groups and calls. Telegram uses server-accessible Cloud Chats by default and reserves end-to-end encryption for optional, device-specific, one-to-one Secret Chats. Signal is the safer default for private messaging; Telegram prioritizes cloud sync, large groups, channels, and bots.

Is Telegram end-to-end encrypted by default?

No — and this is the most important fact about Telegram privacy. Telegram's default "Cloud Chats" are encrypted between your device and Telegram's servers, but Telegram itself can read them. Only "Secret Chats" are end-to-end encrypted, and you have to deliberately start one. WhatsApp and Signal both encrypt every chat by default; Telegram does not.

What is a Telegram Secret Chat?

Secret Chats are Telegram's end-to-end encrypted mode: encryption that Telegram's servers cannot read, self-destruct timers, and no cloud storage. They have limitations: Secret Chats are device-specific (not synced), cannot be used in groups, and you must remember to start one — forgetting leaves the conversation in default Cloud Chat mode.

Does Telegram sell user data?

Telegram has historically said no. The MTProto encryption does prevent casual reading by Telegram staff. However, Telegram's privacy policy permits sharing data in response to legal requests, and Telegram has been criticized for cooperating with some governments while resisting others. Telegram is registered in the UAE; in the EU, GDPR applies to user-data handling.

Is Telegram safer than WhatsApp?

For default privacy: no. WhatsApp turns on E2EE by default; Telegram does not. For broadcast reach: yes — Telegram's 200,000-member Channels far exceed WhatsApp's 1,024-group cap. If you want "every message I send is encrypted by default," pick WhatsApp. If you want to broadcast to a large public group, pick Telegram and remember to enable Secret Chat for private conversations.

How big can Telegram groups get?

Up to 200,000 members per group or Channel. Channels are one-to-many broadcast; groups are many-to-many conversation. Compare to WhatsApp's 1,024, Signal's 1,000, Threema's 256. Telegram is the choice for very large public communities.

Is Telegram open source?

Partially. The Telegram client apps (Android, iOS, macOS, Windows, Linux) are open source on GitHub, and the MTProto protocol specification is open. However, the server code is closed-source — the most security-critical part is not auditable. This is why researchers treat Signal as the more verifiable messenger.