Your backup email

A backup email is optional. The app never requires one to deposit, send, or withdraw — you add it for exactly one reason: it’s how you reset a forgotten PIN.

What the email is for

If you forget your PIN, the app mails a one-time code to your backup email; entering it lets you set a new PIN. That is the email’s only power. Without a backup email there is no self-service way back from a forgotten PIN — which is why it’s worth binding one right after you set your PIN. See Changing or resetting your PIN.

The email does not confirm withdrawals (that’s your PIN or Face ID), and it doesn’t authorize other security changes — changing your PIN needs the current PIN, and Face ID is enrolled with your PIN.

Binding it

Open Security, add the address, and enter the one-time code the app mails you — the code proves you control that inbox. The code:

• is 6 digits,
• is valid for about 10 minutes,
• allows up to 5 attempts before you must request a new one,
• is replaced whenever you request a new code.

Changing your email

You change the address by verifying a code sent to the new inbox. To resist account hijacking, a changed email sits out a cooldown before it can authorize a PIN reset — so a stolen Telegram session can’t instantly point your recovery email somewhere else and take over. Your first email binding has no such wait.

You’re notified of every change

Every change to a security factor — including binding or changing your email — fires a critical Telegram message.

Didn’t get the code?

• Check your spam folder.
• Confirm you entered the right address.
• Request a new code — the old one stops working once you do.