How to Delete a Session in Telegram and Cut Off Access From Other Devices

Every login — phone, laptop, web version — creates its own session, and it stays active until you end it yourself. An old tablet, a work computer, a borrowed laptop from a trip: all of them still hold access to your chats. Clearing them out takes about a minute.

The short answer

Open Settings → Devices, tap the session you want in the active list and choose Terminate Session. To cut off everything except the device in your hands, use Terminate All Other Sessions.

On desktop and web the same list usually sits under Settings → Privacy and Security → Active Sessions. The wording differs between versions and platforms, but the logic doesn't: device list → pick a session → terminate.

A word on the term itself: a session is a stored authorization on Telegram's servers that grants one device access to your account. Deleting a session revokes that authorization — it isn't the same as deleting the app or the account.

Where the session list lives on each platform

• Android: side menu → Settings → Devices.
• iPhone and iPad: Settings tab at the bottom → Devices.
• Telegram Desktop: Settings → Privacy and Security → Show All Sessions.
• Telegram Web: menu → Settings → Privacy and Security → Active Sessions.
• macOS: Settings → Privacy and Security → active sessions.

If the entry isn't where you expect it, use the search box inside Settings — recent builds have one, and it finds the section by "session" or "devices".

Terminating a single session, step by step

1. Open the devices section using the path for your platform.
2. Find the right row in the active list: it shows the app, the device model, a city based on the IP address and the time of the last activity.
3. Tap the session to open its details card.
4. Choose "Terminate Session" and confirm.

Access ends immediately. The device drops to the phone-number screen, and the locally cached chat data on it is wiped.

Terminating every session at once

The same screen has a button that ends all other sessions. It disconnects every device except the one you're pressing it from — the right move when you can't remember where you logged in, or when you suspect someone else has access.

Your current session appears in the list but can't be ended with that button. To sign out of the device you're actually using, use the normal log-out option in settings.

How to read the active sessions list

Telegram gives you four reference points per session:

• App and version — Telegram for Android, Telegram Web and so on. If you've never used the web version and it's sitting in the list, that's worth looking into.
• Device — a phone model, or a browser with its operating system. These names come from the client itself, so unofficial apps often report something odd.
• Location — derived from the IP address, which makes it approximate. A neighbouring city, your provider's regional hub or another country entirely on a VPN are all normal, not evidence of a breach.
• Last active — "online" means the device is connected right now.

Judge a session on the combination: an unfamiliar app, plus a city you've never been to, plus a time when you definitely weren't using Telegram. That's enough to terminate it on the spot.

Limits worth knowing before you start

• A new session can't terminate others for about 24 hours. Telegram restricts fresh logins on purpose, so that someone with one-time access to your number can't lock you out instantly. The flip side: if you've just signed in on a new phone, cleaning the list has to wait a day or be done from an older device.
• Secret chats live on the device. They aren't stored in the cloud, so ending a session destroys that conversation for good.
• Connected websites are a separate list. Logins to third-party services via Telegram aren't covered by the terminate button; they have their own section nearby.
• Bots stay. Permissions granted to bots don't depend on sessions — you revoke those through privacy settings or by blocking the bot.
• You need at least one signed-in device. There's no way to manage sessions remotely through a website or support request; you have to log in with your number and code first.

What to do if there's a stranger's device in the list

1. Terminate all other sessions rather than picking through them one by one — it's faster.
2. Turn on the cloud password (two-step verification) if you didn't have one. Without it, the account is protected only by a login code, and codes can be intercepted.
3. If a password was already set, change it and check the recovery email attached to it. Someone else's address there is more dangerous than the rogue session itself.
4. Open the connected websites section and revoke anything you don't recognise.
5. Check your channels and groups for new admins, and your chats for messages you didn't send.
6. Verify that your phone number, username and privacy settings haven't been changed.

Also scroll through the service messages from Telegram: the account sends a notice for every new login, naming the device and region. That tells you when the intruder's session appeared.

Automatically ending old sessions

The same screen has a setting that disconnects devices which haven't been in touch for longer than a chosen period. The intervals run from a week to several months; the default is on the long side, and shortening it is a sensible habit.

It doesn't replace checking the list yourself, but it does stop dead sessions from piling up on hardware you sold or gave away long ago.

How to avoid collecting sessions in the first place

• Log out properly instead of closing the tab. The web version stays authorized after the browser is shut.
• End the session from your phone after using someone else's computer. Do it the moment you get home rather than later.
• Check the device list before selling hardware. A factory reset doesn't always revoke the authorization on the server side.
• Keep work and personal apart. When one account runs channels, tests bots and handles conversations with friends, every extra device in the list puts all of it at risk at once. A separate profile on its own number is simply easier to manage — the Telegram accounts available on Fire Accs cover that, and your projects stay out of your personal chats.

Common mistakes

• Reading an unfamiliar city as proof of a hack. IP geolocation often points at a provider node or a VPN server.
• Ending sessions without setting a cloud password. Skip that step and the same thing happens the next time a code is intercepted.
• Deleting the app instead of the session. Removing the client doesn't revoke anything — the session stays active on the server.
• Confusing logging out with deleting the account. The first disconnects a device; the second erases your profile and chats.
• Trusting third-party "session managers". Sessions can only be managed inside the official apps; any service asking for your login code is taking the account.

FAQ

Will the other person know I ended their session?

They get no notification, but the device drops to the login screen, which is hard to miss.

Do I lose my chats when a session is terminated?

Regular chats are stored in the cloud and come back at the next login. Secret chats are tied to the device and disappear with the session.

Why doesn't the terminate button work on my new phone?

A session roughly a day old can't disconnect others. Do it from a device you signed in on earlier, or wait it out.

Can I end a session if my phone is lost?

Yes, from any other device where you're logged in. If you have none, you'll need to sign in again with your number and code first.

How many devices can stay signed in at once?

Telegram allows several parallel sessions, and the exact number depends on the app version. The practical rule is simpler: keep only the devices you actually use.

Will terminating everything remove me from channels and groups?

No. Subscriptions, chats and admin rights belong to the account, not to a device.

What if unfamiliar sessions keep reappearing?

That means someone has access to your number or your login codes. Set a cloud password, change the recovery email, and check with your carrier that SMS isn't being forwarded elsewhere.

The takeaway

The active sessions list is the fastest way to see who can reach your account. A one-off cleanup takes a minute: Devices, pick the session, terminate. What actually settles the question afterwards is three things — a cloud password, a short auto-termination period for stale sessions, and the habit of glancing at that list now and then.