Attention Required: Telegram Bot Secret SecurityTo use automatic wallet creation for Telegram, developers must create a Telegram bot configured with a bot secret, which serves as both the control mechanism for the bot and as a symmetric key for authentication. This key technically grants the developer an ability to sign authentication data and actions with a wallet. Any compromise of the bot secret internally or externally can expose users and their accounts to significant risk. Securing this symmetric key is critical to ensuring the integrity of all Telegram login sessions in your application.

​
Summary

This feature allows developers to obtain authentication credentials with Telegram so users can log in and link their Telegram username to their account. The Telegram handle will be added as a verified credential in the user’s profile.

​
Creating a new App

Here are the step-by-step instructions for obtaining OAuth credentials for Telegram:
  1. Open Telegram and search for the “BotFather” bot, or click here to start a conversation with it.
  2. Start a conversation with BotFather by typing /start.
  3. Type /newbot to create a new bot.
  4. Follow the prompts to name your bot and create a unique username for it. The username must end with “bot” (e.g., mycoolbot or my_cool_bot).
  5. After creating your bot, you will receive a message with the bot’s token. Copy this token as it will be needed for configuration.
  6. Navigate to the Dynamic Dashboard social section. (https://app.dynamic.xyz/dashboard/log-in-user-profile).
  7. Open the Telegram configuration module.
  8. Paste the token you received from BotFather into the “Bot Token” field.
  9. Paste the bot’s username in the “Bot Name” field.
  10. You also need to set up a domain URL for your bot. In the Dynamic Dashboard, find the “Bot Domain” field in the Telegram configuration section.
  11. Copy the URL provided by Dynamic.
  12. Return to your conversation with BotFather and type /setdomain.
  13. When prompted, paste the URL you copied in the previous step.
That’s it! You now have OAuth credentials for your Telegram application that you can use in Dynamic. If you need more help with configuring the Telegram OAuth App check their docs here.

​
Frequently Asked Questions

​
What is BotFather?

BotFather is an official bot on Telegram. It allows developers to create and manage their own Telegram bots and is required for obtaining the necessary credentials to interact with the Telegram API.

​
What username should I use?

We suggest using your brand or application name to avoid confusing users when they authenticate. Example: Dynamic_bot.