Signing up
Create an account
In the Blah tweb or Telegram-iOS client, choose your home DC, then Create Account. Choose a hosted name or a domain you publish yourself. Save the 24 recovery words in order and verify the three requested words. They are your only identity backup; keep them private. The client creates a local device and publishes your signed profile before asking the DC to create the account. After signup it publishes your allocated account number too.
A DC may ask for an email address and a mailed code before signup. That address is stored
for future verification; an email code alone cannot sign you in. A DC’s /signup web page
can direct you to the right home, but account creation happens in the Blah client.
Sign in or add a device
Choose your home DC, then Sign In with Recovery Words. Enter your identity domain and
24 words; pasting the phrase fills the fields. The client checks the domain’s profile and
enrolls a fresh device. On iOS, Continue as domain can use an optional iCloud Keychain
copy instead. A DC may also ask for a mailed sign-in code. If you enabled Two-Step
Verification, enter that password when asked; its recovery email cannot replace your words
or device authority.
For Sign In with QR Code, approve the QR from a device that holds your recovery words in Settings → Devices. Allow this device to approve sign-ins defaults to off. Enable it to give the new device seed custody; otherwise it can use the account but cannot approve sign-ins, renew the profile or terminate other sessions. QR approval satisfies the mailed sign-in code; Two-Step Verification still applies.
Manage your identity
Settings → Blah Identity shows your account’s domains, publication and renewal settings.
A device holding the seed can show the words again after confirmation in the browser or
Face ID/device passcode on iOS. Remove Recovery Words from This Device keeps the session
without management authority. Enter Recovery Words restores it without changing the
device. A manually exported public profile.cbor is for publication, not identity recovery.
Devices lets seed holders terminate other sessions by publishing their device removal first. Devices without the seed offer Enter Recovery Words instead. Any device can log itself out; logout deletes its local device key and seed. An optional iCloud copy remains until you remove it. telegram-tt is not migrated to these recovery-word flows.
Browser sign-in
When another application offers Sign in with Blah, approve the request with your listed device or an authorized Blah session. That application’s browser page never asks for your recovery words, device keys or an email login code.