Connecting Telegram

How Authentication Works

Conduits uses the official Telegram MTProto API — the same protocol used by official Telegram apps. When you connect:

1. Phone number — You enter the phone number linked to your Telegram account.
2. Verification code — Telegram sends a code to your Telegram app (not SMS by default).
3. 2FA password — If you have two-step verification enabled, you'll enter your cloud password.

After authentication, Conduits saves an encrypted session string. This session allows Conduits to read your messages without storing your password.

What Conduits Accesses

• Your dialog list — The list of conversations (DMs, groups if enabled) visible in your Telegram.
• Message text and metadata — Message content, timestamps, sender info, and reply structure.
• Media placeholders — Photos become [Photo], voice notes become [Voice message], etc. Conduits does not download or store media files.

What Conduits Does NOT Access

• Secret Chats — End-to-end encrypted chats are device-only. MTProto cannot access them.
• Other people's accounts — Conduits only reads conversations from your authenticated account.
• Password storage — Your Telegram password is used once during auth and never stored.

Session Security

Your Telegram session string is encrypted at rest using AES-256-GCM. The encryption key is derived uniquely for your account using HKDF, so even if the database were compromised, each user's session would require a separate key derivation attack.

Disconnecting

Go to Telegram in your dashboard and click Disconnect. This:

• Deactivates the session in our database
• Stops all future syncs
• Does NOT delete previously synced HubSpot notes

To fully revoke the session on Telegram's side, go to Telegram Settings → Devices → Active Sessions and terminate the "Conduits" session.

Session Expiration

Telegram sessions can expire if:

• You terminate the session from Telegram's settings
• Your account is inactive for an extended period
• Telegram detects unusual activity

If your session expires, Conduits will notify you. Re-authenticate from the Telegram page in your dashboard.