Find and Protect the Telegram Bot Token
Obtain the current bot token through BotFather, enter it in Wemblo securely and revoke or regenerate it after exposure.
Overview
Search Aliases: Telegram API token, BotFather token, revoke bot, regenerate token
FIND THE TOKEN
- Open @BotFather.
- Select the bot from the BotFather menu or use the token-management command provided by Telegram.
- Request the current token or generate a replacement.
- Copy it once.
- Store it in an approved secret-management location.
- Enter it only in the protected Wemblo Telegram field.
- Delete any insecure temporary copy.
ROTATE OR REVOKE
- Open BotFather.
- Select the affected bot.
- Use the revoke or token-management action.
- Generate the replacement token.
- Update Wemblo.
- Test inbound and outbound behavior.
- Confirm the old token no longer works.
- Review logs for unexpected activity.
Security rules
- Do not put the token in browser-side code.
- Do not share it in chat or email.
- Restrict Wemblo integration settings to authorized users.
- Rotate after staff or supplier access changes.
- Keep test and production bots separate where practical.
COMMON ISSUES & SOLUTIONS
| Unauthorized error | Token is incorrect, revoked or copied with extra characters. |
|---|---|
| Old token still used | Confirm all systems were updated. |
| Bot identity is wrong | Check the token belongs to the selected bot. |
Last reviewed: