Security & privacy: Telegram bots

Telegram's own official bot for checking whether your account is spam-restricted and appealing the limitation — run by Telegram itself, with roughly 34 million monthly users.

The genuine official bot of Doctor Web, a long-established Russian antivirus vendor — send it a file or link in a private chat or a group and it scans for malware and phishing using Dr.Web's own cloud engine.

Mirrors messages sent to you so you can still see them if the sender deletes or edits them — hugely popular (300k+ monthly users), but be aware it means everyone in a chat with this bot has their messages logged, not just yours.

A niche but genuinely useful scanner for website owners — drop a .php or .js file and it checks against 500+ known malicious-code patterns, built by Revisium, a company known for cleaning hacked websites.

A 2FA authenticator inside Telegram — generates time-based one-time codes (TOTP), the same kind Google Authenticator produces, so you don't need a separate app for two-factor login.

Creates self-destructing notes — write something, get a one-time link, and it disappears after being read, the Telegram-bot equivalent of Privnote. Its own profile calls it "the best bot for creating self-destructing notes."

The Telegram bot of LeakCheck.io, a commercial breach-data search company operating since 2018 — check your own email or phone for free against their database. Its parent company also sells broader paid lookups, so treat the free bot strictly as a self-check tool.

A straightforward random password generator — request a password and get one back instantly, generated fresh each time rather than pulled from a stored list.

A convenient chat front-end for urlscan.io's public URL-analysis engine — send a suspicious link and get back what the page actually does, not just a blocklist yes/no.

A password generator built by an individual developer (halltape) whose companion project on GitHub is a "Telegram bot for password generation and verification" — the code itself is publicly viewable.

An independent developer's bot that wraps VirusTotal's public multi-engine scanning for links and files. Not run by Google/VirusTotal itself — a convenient unofficial front-end, similar in spirit to third-party wrappers around other public APIs.

Generates strong passwords that are actually easy to remember and type — a different trade-off than pure random-character generators, useful when you'll need to type the password by hand occasionally.

Send your own email address and it tells you whether that address has surfaced in a known data breach — a simple, unofficial Telegram front-end for the "have I been pwned" checking model. Never enter your actual password into it.

A simple file-checking bot that also relies on VirusTotal's database under the hood — described plainly in its own profile as checking files "through the VirusTotal database."

Despite the "save" in its username, this bot is a plain password generator with a built-in /help command — tap a button, get a random password, nothing stored.