Account security notes

After registration or import, lock down each Telegram account before business use.

Checklist

1. Confirm session_string is saved and account status is active
2. Change the 2FA password away from the seller’s default
3. Bind a recovery email you control
4. Assign a dedicated residential proxy (“account-owned proxy”)
5. Put the account in warming before high-risk APIs (create channel, invite, mass DM)

In the console

• Modules → Account security (保号) — security score / 2FA / email workflows
  Chinese module doc: account-security
• Modules → PRO registration — post-register loop can import + set 2FA + bind email + start warming
  Chinese module doc: auto-register

Ops rules (summary)

• Never drive Telethon scripts against production sessions outside the TG2AI UI / secure_client
• One sticky residential IP per account where possible
• Follow warming schedules in the import skill before bulk actions

See also: Getting started, Chinese Account management.