Skip to content
This repository has been archived by the owner on May 13, 2024. It is now read-only.

Using Telegram Tools' Secret Mode

Jump to bottom
Fernando edited this page Apr 25, 2020 · 5 revisions

Since version 3.0, and inside all the future Telegram Tools apps going forward that require the authentication of two Telegram users, you will be able to use what I called the "Secret Mode". This enables the partner user to have a greater control over his Telegram's session and the authentication.

How to use it?

The user who is using TLImporter should say "yes" when he is asked about using the "Secret Mode" or not. Now, his chat list will be displayed in the app, and he must choose his partner. The app will start to listen to a response from the other side.

Your partner now must go to the TLSecret main's GitHub page and grab the latest release. He will be asked to put his phone number, code and password like he would do normally when logging in Telegram. After that, he will see his chat list displayed. He must choose you from the list. After doing that, your partner will be authenticated in your computer. He will be able to revoke your access to the session at any moment, just by pressing ENTER in the same window, giving him plenty control over his account. If he has already closed the app, he can open it and revoke the access by pressing ENTER again.

How does it work?

You can always check the source code of the apps to check how TLSecret is implemented. But here is how it works briefly:

  • When the partner is authenticated using TLRevert, his session file will be encrypted with a long, safe password, which all Telegram Tools apps have embedded, and nobody else knows but me (for security reasons, I only have that password. Imagine if everybody could know that password and decrypt every session file that he owns. The password is obfuscated and there is a risk that it leaks, but is better than giving it away in my source code. If you are building your own version of Telegram Importer or other Telegram Tools app which uses the "Secret Mode", you should also make your own version of TLRevert, defining the same password you defined in your own version).

  • That file is sent over the Telegram Chat with you. The "listening" app receives it, download it, and send a confirmation message, so your partner's TLRevert app will delete all traces of the file in your chat.

  • The file is decrypted by the "listening" app, and the AuthKey and server details are loaded into the RAM of your computer, so no traces are left in the disk. If you close the app, you will lose access to your partner's account.

  • After all the required data is loaded into the RAM, the connection can be established succesfully and you can continue as normal.

Demo

Here you have a live demonstration of the Secret Mode working with TLMerger:

Clone this wiki locally