Telegram bot

Your own bot for your app: customers claim keys, your team manages them, a buyers' group.

Each application can have its own Telegram bot, with your name and photo. Customers claim their key there, see the time left and move to a new PC; your team makes and manages keys from the chat; and a buyers' group can let in only people with a valid key. You make the bot yourself in @BotFather (free) and connect it on the Telegram bot page. This is not @pwfauthbot, the bot that guards your own panel sign-in (see Your account & security).

Connect a bot

  1. In Telegram open @BotFather and send /newbot. Pick a name (what people see) and a username ending in bot.
  2. BotFather answers with a token like 123456789:AAE…. Copy it.
  3. On the Telegram bot page pick the application (when you have more than one), paste the token and press Connect bot. The page checks the token, gets the bot ready and sets its command menus, and lists each step.
  4. Open the owner link that appears (button or QR code) and press Start: your Telegram account becomes the bot's owner. It works once, for 15 minutes; Owner link makes a new one.

The token is stored encrypted and never shown again. One bot works for one application, and a bot can be connected to one application only. Revoked the token in BotFather? Paste the new one under The bot → New token. Changed the bot's name or photo? Check again. Connecting a different bot to the same app replaces the old one.

Telegram sends your bot's messages straight to PWF Auth. If they ever cannot be read for a moment, the page says so; the messages wait in Telegram and arrive as soon as reading is back, so nothing is lost.

What customers can do

  • /redeem or simply sending the key: claims it for their Telegram account. A key claimed by one account can't be claimed by another; ten wrong keys in ten minutes pause them for a while.
  • /mykeys: their keys, the status and the time left, with a New PC button.
  • /resethwid: frees the key for a new PC, by your app's own self-service rules (on or off, and how often; see HWID resets).
  • /vip: the buyers' group link, for people with a valid claimed key.

Only keys of the bot's application are ever found. Answers are sent in the private chat only: a command typed in a group gets a short pointer to the private chat, and a warning when someone typed a key there.

Your team

Under Team, Staff link makes a one-time link (15 minutes) that adds whoever opens it; send it to a helper, or scan the QR code yourself. Up to 10 people. Make owner / Make staff change a role; removes someone at once.

CommandDoes
/create 30 5 2 noteFive 30-day keys for 2 PCs each, with a note (0 days = lifetime, up to 25 keys). /create alone asks with buttons. Your app's key format is used.
/info KEYStatus, time left, devices, logins, who claimed it, the reseller who sold it, with buttons to reset, ban, add 30 days or delete.
/resethwid KEYUnbinds every PC of the key.
/ban KEY reason · /unban KEYSame as in Licences: banned keys are signed out.
/addtime KEY 7 · /removetime KEY 7Same rules as Add time in Licences.
/delete KEYAsks first. A reseller who sold the key gets its credits back.
/stats · /statusThe app's keys and who is online; what the bot serves and who runs it.
/buyersgroup · /disconnectOwners only: pick the buyers' group; stop the bot.

Everything the team does goes through the same code as the panel and shows in the key's activity with telegram:@name as who did it.

Buyers' group

  1. Add your bot to a Telegram group or channel as an admin with Invite users via link and Ban users. It appears in the list by itself.
  2. Pick it under Buyers' group (or send /buyersgroup to the bot as an owner).

The bot makes an invite link that needs approval and approves only people holding a valid claimed key; others get a message telling them to claim their key first. Every 10 minutes it removes the people it let in once none of their keys is valid (expired, banned or deleted); they can come back after a renewal. People it did not let in are never touched.

Welcome, activity and disconnecting

  • Welcome message: the first thing customers read (up to 600 characters); the command list always follows.
  • Activity: the last 25 things people did with the bot, refused ones in red.
  • Disconnect: the bot stops answering at once; the team and the group choice are forgotten, keys and claims stay. Deleting the application, or handing it to another account, disconnects its bot too.

Something missing or unclear? Tell us on Telegram.