Passkey Notifications

Adding a crucial behavior that was absent at the launch of the feature, when a new passkey is added to your account, Telegram now sends out a notification to all your signed in devices — just like the one you get when you add a new device.

Previously, the lack of these notifications posed a security threat: attackers could silently add their passkeys to anyone's account.

The notifications will include the following information:

• Passkey provider (for example: Apple Passwords).
• Device details: app version, phone model, and OS.
• Location from which the passkey was added.
• Instructions for listing active sessions.

Important security considerations

• Also when deleting a passkey, the user will receive a notification to all its signed in devices.
• When all active sessions are terminated via «Settings › Devices», recently created access keys are automatically deleted along with the sessions. A notification about their deletions is sent afterwards.
• It's only possible to add passkeys 24 hours after signing in.

#security #authorization #passkey