Passcode

The passcode is a local lock of the app on the device; it is not sent to the server. It encrypts the saved sessions and protects the device key: in hardware key storage, the passcode serves as the PIN; without such storage, it encrypts the key file. One passcode covers all accounts in the app; creating it cannot be skipped.

Format: at least 6 characters, digits or letters of any alphabet. Simple ones are not accepted: repeats (000000, 121212), sequences (123456, abcdef), keyboard rows (qwerty, йцукен), mirrored ones (123321) and common words.

When it is asked for:

• at every start and restart of the app — switching or adding an account, changing the language or the scale, an update;
• via the lock icon next to the theme switch — "Lock the app";
• after the device has been inactive — see below;
• for every signature: a connection, saving the signed fields of a bundle or "Sign", archiving, deleting a connection with this device's key, approving and disconnecting devices.

The lock hides the screen, not the session: the connection to the server and trading continue. While the app is locked, notifications show only the type of event.

Attempts. 10 wrong entries in a row; the counter survives a restart. The tenth error signs you out of all accounts on this device, resets the passcode and deletes the device key.

Forgot your passcode — "Sign out" on the passcode screen: signing out of all accounts on this device and deleting the device key. Then sign in through Telegram again and create a new passcode. The passcode cannot be reset through the server or support.

Inactivity. "Lock after inactivity": 5, 10, 15, 20, 30, 40, 60 or 120 minutes, 60 by default; inactivity is counted across the whole device.

Changing it — "Change passcode" in the "Security" window: the current one, the new one, the new one again. The PIN of the key in hardware key storage changes along with it.

The passcode and sessions are stored in the app's data folder and survive updating, uninstalling and reinstalling the app.