DualLock is an extra layer of encryption in Threema OnPrem. This feature allows administrators to lock the app from the management cockpit if a mobile device is lost or stolen. This ensures that no one can gain unauthorized access to internal company chats.
DualLock can be activated in the management cockpit. It encrypts the local storage of the Threema OnPrem app with a user-specific key. Chat content can only be viewed if this DualLock key is retrieved from the server when the app is opened (for more details, please refer to the Cryptography Whitepaper). If there is no connection to the server or if the key has been revoked by the administrator (e.g., if a phone is stolen or lost, or if an employee leaves the company), the app cannot be opened. DualLock can be activated in the management cockpit either for all or only for individual users, and the app can also be temporarily locked.
To complete activation, existing iOS users must reinstall the app. On Android devices and in Threema OnPrem 2.0 for desktop (beta), activation is completed without reinstallation.
