Telegram Active Sessions: End Old Logins and the 24-Hour Wait

If an unfamiliar phone, laptop or browser has access to your account, the screen that fixes it is the same one in every Telegram app: the list of Telegram active sessions, shown under Settings as Devices. It names every login that can currently read your chats, and it lets you close them one at a time or all at once. This guide covers where the list lives on each platform, how to read an entry, how to end logins, and why a device you only just signed in on may not be allowed to close the older ones yet.

Where Telegram active sessions are listed

The list has had two names over the years, and both still appear in Telegram’s own material.

Phone apps: Settings > Devices

On the current iPhone and Android apps, open Settings and look for the row labeled Devices. Telegram’s FAQ gives the path in its answer about a stolen phone: “Go to Settings > Devices (or Privacy & Security > Active Sessions) and terminate your Telegram session on the old device.”

That one sentence is worth keeping in mind, because it tells you the two labels point at the same screen.

Telegram Desktop and the web versions

On Telegram Desktop, the list is reached through the settings section that Telegram’s own interface text calls Privacy and Security, where the heading above the list reads Active sessions. Both strings are published on Telegram’s translation platform, which carries the exact English wording each app ships with, one key at a time.

The browser clients at web.telegram.org are covered by the same FAQ instruction rather than a separate one. Telegram publishes one path for ending a session, Settings > Devices (or Privacy & Security > Active Sessions), without splitting it by client, so open the settings menu in the browser and look for whichever of those two names your build shows.

Why older guides still say Privacy and Security > Active Sessions

The screen was introduced in 2015, when Telegram announced it alongside two-step verification. It lived under Privacy and Security for years before the shorter Devices label appeared in the mobile apps, and the iOS interface still carries the Active Sessions string internally. Older articles are not wrong, just one rename behind.

What each entry in the Devices list tells you

Every row describes one login. Reading it properly is what separates “someone is in my account” from “that is my own tablet.”

App, platform and version

The first line of an entry names the Telegram client and the operating system it runs on, usually with a version number, and often the device or browser name beside it. This is the most useful field when you are scanning for something foreign. An entry naming a platform you have never owned deserves attention. An entry naming a browser you used once at work is probably yours.

IP and location details

Telegram’s 2015 announcement describes the screen plainly: “This screen shows all your logged in devices with IP info.” The IP address remains the firmest identifier on the row.

Some entries also show a place name. Telegram has not published how that place is worked out or how precise it is meant to be, so treat a city that sits a short distance from where you actually were as unremarkable, and judge the entry on the app, the platform and the timing instead. If you cannot place an entry with confidence, end it rather than reasoning about the city name; signing a device of your own back in costs a minute.

Last active time and the device you’re holding

Each row carries a last-active time. The session you are reading the list from is pulled out and shown separately at the top; on iOS that block is headed THIS DEVICE. Telegram does not let you end that one from inside the list, because signing yourself out is what the Log Out control is for.

Ending one login or every other session

Two actions cover almost every case.

Ending a single session

Tap the entry you want gone. The app opens it and offers a control whose English wording is Terminate session. Confirm, and that login loses access. Use this when one entry looks wrong and the rest are clearly yours.

Ending all other sessions at once

Above the individual entries sits a single control. In Telegram’s English interface text it reads Terminate all other sessions. It closes every login except the one you are using, so you do not lock yourself out.

This is the right move when you cannot account for several entries, when a phone has gone missing, or when an account has just been handed over to you by its previous holder. Do not try to work out which unfamiliar row is the bad one. Close them all and sign your own devices back in afterwards.

Checking the list again afterwards

Reopen Devices once you are done. The list should hold only entries you can name. If a row you closed is back, skip ahead to the section on sessions that reappear, because that is a password problem rather than a terminating problem.

Why a new device can’t end older sessions for up to 24 hours

This restriction is not a bug, and the app does not explain it well.

What Telegram’s team says about the wait

On Telegram’s official bug tracker, under the report Can’t close older sessions after logging in from a new device, the team answered that for security reasons you cannot end older sessions straight after signing in on a new device, and that you should use an older session or wait for up to 24 hours.

The app itself puts it more loosely. Telegram’s published interface string reads: “For security reasons, you can’t terminate older sessions from a device that you’ve just connected. Please use an earlier connection or wait for a few hours.”

Both are Telegram’s own words, and they disagree about how long. Read 24 hours as the ceiling and a few hours as the likely wait. There is no visible timer, so do not go looking for one.

Ending the new session from a device that has been logged in longer

The practical answer is in Telegram’s reply: use an older session. If you still have access to a phone or desktop that signed in days or weeks ago, open the Devices list there. That device is past the waiting period and can close anything on the list, including the login you just made.

The login notification your older devices receive

Telegram’s answer on the same report notes that the older session receives a login notification carrying the details of the new login. That message is a useful cross-check. If you get one and it describes a sign-in you did not make, treat the account as compromised and act from the device that received the notice, not from a fresh login.

Telegram active sessions disappeared? Automatic cleanup explained

A shrinking list is usually housekeeping, not an intrusion. Three mechanisms remove entries without you touching anything.

The setting that ends sessions after a period of inactivity

Telegram ships a setting for this. On iOS its English label is Automatically Terminate Old Sessions, with a picker underneath labeled If Inactive For; the Android string is the same words in sentence case. You choose a period from the list your app offers, and a session that has not come online within it is closed for you.

Periods differ between app versions, so open the picker and read the options in front of you rather than trusting a number from an article. Anyone who signs in on borrowed hardware should turn this on and pick the shortest period they can live with.

Sessions Telegram’s servers close after 180 days without activity

Separately from that setting, Telegram’s servers do their own cleanup. Asked why older inactive sessions were closed, the team answered that the server terminates sessions inactive for more than 180 days. A tablet you have not opened since last year falling off the list is the system working as intended.

Sessions ended from another of your devices

The third cause is the most human one. Anyone holding one of your signed-in devices can open Devices and close the rest. If a family tablet or a work laptop is on the list, someone using it can end your other logins. That cuts both ways, and it is a reason to keep the list short.

Telegram can’t terminate sessions: what to check

If the controls above are not doing anything, work through these in order.

You’re on a device that logged in recently

The error message names this cause directly. Either move to a device that has been signed in longer, or wait and try again later in the day.

The session is the device you’re using

The entry at the top of the screen is your current login, and it has no Terminate control by design. Ending it means logging out, which is a separate action in Settings.

A session keeps coming back after you end it

If a row reappears, something is signing in again with credentials it already has. Terminating harder will not help. Set a two-step verification password, add a recovery email, confirm you control the phone number that receives login codes, and then clear the list again.

Locking the account once the list is clean

A clean Devices list is a snapshot. These three things keep it that way.

Two-step verification password and recovery email

Telegram’s FAQ states that once two-step verification is enabled, “you will need both an SMS code and a password to log in,” and that you can set up a recovery email address that helps regain access if you forget the password. Without that password, anyone who can read an SMS code can sign in. With it, a code alone is not enough.

Telegram’s 2015 announcement adds a warning worth taking seriously: forget the password and you lose access from other devices, which is exactly what the recovery email exists to prevent.

A phone number you will keep

Login codes go to the number on the account. If that number lapses or moves to someone else, whoever holds it next receives the login codes, and without a two-step verification password a code is all anyone needs to sign in. Keep the number, or change the account’s number before you let the old one go.

It is also worth knowing that inactivity eventually reaches the account itself. Telegram’s FAQ states that if you stop using Telegram and do not come online for at least 18 months, the account will be deleted, and the period is adjustable in Settings.

If an account was handed over to you by someone else

When an account is handed over to you, assume the previous holder still has a live login until the Devices list proves otherwise. End every session you do not control, allow for the waiting period on the login you just made, then set your own two-step verification password and recovery email.

One thing does not change when an account changes hands: it stays registered to the phone number it was created with, and that is almost certainly not a number you hold. Login codes go to whoever does hold it. Telegram’s FAQ is explicit that with two-step verification on you need both an SMS code and a password, so that password is the only thing standing between someone else’s SIM and a fresh login on your account. Set it, with a recovery email, before you do anything else.

If you are weighing a purchase, the Telegram account grades PVAVRT lists run from new accounts to aged ones, credentials arrive in the Telegram chat, and there is a page on how PVAVRT orders and replacements work. Be clear-eyed about the risk: buying accounts runs against the terms of most platforms, and any account can be closed at any time. Telegram’s terms do not address account sales either way, but they do bar using the service to send spam or scam users, and the same page states, in its Telegram Premium terms, that failure to comply with the Telegram Terms of Service “may result in a temporary or a permanent ban from Telegram or some of its services.” Questions about the grades themselves can go to @pvavrt on Telegram, or to WhatsApp +1 (310) 460-9890.