Urgent

Telegram will not terminate a session: the 24-hour restriction

Short answer

Telegram does not let a session terminate other sessions during the first 24 hours after that session's login. The restriction concerns the session performing the action, not the unfamiliar session you want to close. Use a trusted device where you were already signed in for longer, if one is available. If not, secure the settings Telegram makes available, warn affected contacts through another channel and return to the device list when the restriction expires.

Author: Cerber Team · Reviewed by: Cerber Security Review

Updated: 2026-10-12

Which session's age matters?

The clock starts when the session performing the termination was authorized. A brand-new session cannot terminate even a much older target session during its first 24 hours.

Telegram documents this as FRESH_RESET_AUTHORISATION_FORBIDDEN for account.resetAuthorization. It is a platform rule, not an error Cerber can bypass.

Use an older trusted device

Check your phone, tablet, work computer and browsers for a session that is already signed in. Use one whose login is older than 24 hours to open Settings → Devices and terminate confirmed unauthorized sessions. Keep access to that trusted session while you respond.

If only the new session is available

  1. Review the password and recovery settings the official Telegram app allows you to change. Follow any additional waiting periods it shows.
  2. Secure the recovery email and phone-number access through their own providers.
  3. Review separately connected services and channel permissions where you still have control.
  4. Warn affected contacts through another trusted channel if unauthorized messages are being sent.
  5. Return to Settings → Devices after the restriction expires, terminate the unwanted sessions and verify the result.

Signing in again does not remove the restriction

A new login creates another fresh session. Switching to a new client or device does not turn it into an older authorized session. Do not discard the trusted sessions you already have while trying to regain control.

If you cannot sign in at all

Use the official Telegram sign-in and recovery options. A recovery email may help with two-step verification when one was configured. If the phone number is no longer yours, contact your mobile provider. Cerber cannot recover account access or bypass Telegram's rules.

Recovery and incident response by access state

Verify that the action succeeded

A click is not proof that the session was terminated. Reopen the device list and confirm that the entry disappeared. Separately review connected websites and administrator permissions. Terminating all other sessions also closes Cerber's session, so reconnect protection if necessary.

Sources

Related guides

All Cerber Lab guides

Check your Telegram account for free

If you have access to the account, Cerber brings active sessions, two-step verification status and connected access into one result.

Questions and answers

Do I wait 24 hours after my login or the attacker's login?
The restriction is based on the login time of the session performing the termination. The target session's age does not determine it.
Can another Telegram client bypass the restriction?
No. It is a Telegram platform rule. A different newly authorized client is still a fresh session.
What can I do if I have an older authorized device?
Open Settings → Devices from that trusted session and terminate confirmed unfamiliar sessions there. Verify that the termination succeeded.
Does changing the password remove existing sessions?
No. Two-step verification protects new authorizations. Existing sessions need to be terminated separately.