TLSecret

TLSecret allows you to grant access to your Telegram account in other Telegram Tools apps, which may require logging in two users (TLMerger and TLImporter as of now). This is known as "Secret Mode" in all of my apps. Compatible Telegram Tools can be indetified by the Compatible with Secret Mode label, like the one used below the logo in this page.

How to use?

When using TLSecret, we will be using two different apps at the same time. Some concepts:

• The listener app: The Telegram Tools' app where you want to be logged in (TLImporter, TLMerger, TLRevert...)
• TLSecret, which will help to grant access to a Telegram account in any of the listener apps.

The instructions below considers that you will be the person using TLSecret, while your partner will be using any of the listener apps. The listener app can be running in a remote computer, no physical presence is required to authenticate you succesfully!

Preparation

Before you can do anything with TLSecret, your partner must prepare the listener app:

• All listeners app will prompt the user, at any point, whether using the "Secret Mode" or not. Your partner should agree to use it
• Your partner's chat list will be displayed in the window. He must choose you from the list.
• The app will display Waiting for a response....

Once the app of your partner is in a Waiting for a response... state, you are can continue.

Granting access

Once your partner's listener app state is Waiting for a response..., open TLSecret and perform these simple steps:

• Log in to Telegram as you would normally do: Input your phone number, verification code and password.
• (TLSecret will encrypt your Telegram session at this point, so it might take a few seconds to continue)
• Your chat list will be printed inside the window. Choose your partner from the list.
• Wait until the authentication is done succesfully in your partner's computer. You will be inmmediately informed

You are done! At this point, you will have full control over your authorization in Telegram. Just by pressing ENTER, you will be able to revoke the authorization and discard that session. If you have closed the app after authenticating, you will be able to revoke the session by opening it again and pressing ENTER.

You can also control the access to your account using Telegram Desktop or the Telegram app in your phone, in Settings > Privacy and Security > Active Sessions

What if something else goes wrong?

As stated in the app's disclaimer, there is no perfect encryption and the 100% security doesn't exist. In fact, there are many security flaws in the app: The password for decrypting the file could be easily obtained from the binaries, after decrypting the session file, it could be read before it's processed by the listener app, the Telegram's AuthKey is stored in the RAM's of your partner's computer, which can also be read if he has the proper knowledge. Although I consider that TLSecret is really safe to use and has proper security, you need to know that nothing is perfect and I don't suggest you to use this app with completely unknown people, but at least, with some people you trust a little. Remember that you also will be able to revoke any session if everything fails, using other Telegram apps: Go to Settings - Privacy and Security - Active Sessions and revoke any session you don't know.

Download

You can always grab the latest version heading over the releases tab. I built binaries for Windows (64 bits), Linux amd64 and Linux armhf

• On Windows: Simply double click on the .exe file
• On Linux: Download the binary, cd to the folder where the download is located and do chmod +x TLSecret-xxx && ./TLSecret-xxx

If you're running other systems (like MacOS), you will need to build the files from source.

Build from sources

Make sure that you replace the api_id and api_hash variables in the TLSecret.py file. Read instructions here for getting your own from Telegram.

You can't use Secret Mode if one of the sides is still using the binaries: I'm the only holder of the encryption key, so it's more difficult for malicious people to compromise them. If you want to use the Secret Mode, you must build both the listener app and TLSecret from sources using the same password for it to work. You can specify the password used for encryption/decryption in the password variable.

Credits

Huge thanks to Telethon, and his great creator, Lonami, who always was up to answering questions and helping in development. I'm so grateful for his patience :). Also, huge thanks to pyAESCrypt, which simplified a lot the process of encrypting/decrypting the session files. Thanks to the PyInstaller team for their great tool, which I used to build the binaries.

Also, huge acknowledgements to Telegram for making such a great messenger!

Give always credits to all the original authors and owners when using some parts of their hard work in your own projects