Sessions

Telegram active sessions: find and read the device list

Short answer

Settings → Devices lists authorizations that currently have access to your Telegram account. It is not a complete historical record of every login: terminated sessions disappear. Compare the application, login time, last activity and network information with your own use. The device name is supplied by the client and location can shift with a VPN or mobile provider. Close confirmed unwanted sessions separately from securing two-step verification.

Author: Cerber Team · Reviewed by: Cerber Security Review

Updated: 2026-10-12

Where to find active sessions

  • iOS and Android: open Telegram Settings → Devices.
  • Telegram Desktop and the macOS client: open the application menu or settings and find Devices / Active Sessions. Labels vary by client version.
  • Older authorizations can remain listed for a long time if they have not been terminated.

What the fields mean

  • Application / Client: the application and its version, such as Telegram iOS, Desktop or Web. Use it to identify which client was authorized.
  • Device: the device or operating-system label reported by the client. Telegram does not independently verify the label.
  • IP / Location: the network address and inferred region. VPNs, proxies and mobile providers can make it differ from your physical location.
  • Login date: when the authorization was created. Check whether it matches a sign-in you remember.
  • Last active: the most recent activity associated with that session. It does not tell you which messages were read or actions performed.

Is it your login or someone else's?

A recognizable application, a login time matching your own sign-in and activity matching the device you use are useful signals together. A familiar device name or city on its own is not enough.

An application you never used, a login when you were not signing in, or a session appearing after a suspicious link deserves investigation. Confirm identity before removing a device you still need.

Investigate an unfamiliar device

Terminate one session or all other sessions

Terminating one selected session closes that authorization and leaves your other devices signed in.

Terminate All Other Sessions closes every authorization except the current one, including your own computers, tablets and browsers. If Cerber is connected, reconnect it afterward because its session is terminated too.

A session that is less than 24 hours old cannot terminate other sessions. Use an older trusted session if one is available.

Why Telegram refuses a fresh-session termination

The list and login notifications serve different purposes

The device list shows current authorizations when you open it. Telegram separately sends a service notification about a new login, including device and location details. Check such notifications and compare them with the device list; do not assume an unread notification means no warning was sent.

Sessions and two-step verification are separate

Two-step verification adds a password to new authorizations. Enabling or changing it does not automatically close sessions that are already authorized. Review existing sessions and connected access separately.

What two-step verification protects

Reviewing company accounts

Manual reviews depend on each employee noticing and checking their sessions. Cerber's account check brings sessions, two-step verification status and connected access into one result. Company protection helps a team monitor and respond within the product's access controls.

Cerber for business

Sources

Related guides

All Cerber Lab guides

Check your Telegram account for free

If you have access to the account, Cerber brings active sessions, two-step verification status and connected access into one result.

Questions and answers

Is the device list a full login history?
No. It lists current authorizations. Terminated sessions disappear, so it is not a complete historical log of every login.
Why is the city different from my location?
Location is inferred from the IP address. VPNs, proxies and mobile networks can change the apparent city or country. Use it as a clue alongside the client and login time.
How is Client different from Device?
Client identifies the application and version. Device is a label reported by the client and is not independently verified by Telegram.
Will changing my password remove old sessions?
No. The password affects new authorizations. Terminate existing unwanted sessions separately in the device list.