Telegram has introduced an important security enhancement for passkeys: whenever a new passkey is added to your account, a notification is now sent to all devices where you are signed in, similar to alerts about new logins. Previously, the absence of such notifications created a risk, as attackers could silently add their own passkeys to a victim’s account.

The new alert includes the passkey provider (for example, Apple Passwords), device details such as app version, phone model and operating system, the location where the passkey was added, and instructions on how to view active sessions. Users also receive notifications when a passkey is deleted. If you terminate all active sessions via Settings › Devices, any recently created access keys are removed along with them, and a deletion alert is sent. For safety, passkeys can only be added 24 hours after sign‑in.

source: tginfo

Keep an eye on the daily Telegram news from OnlyTG.