App Configuration
Threema Work allows to remotely edit app settings. You can control the app’s configuration, disable specific features, and the end user is relieved from setting up the app manually.
Threema Work allows to remotely edit app settings. You can control the app’s configuration, disable specific features, and the end user is relieved from setting up the app manually.
If you don’t use an MDM system for the app’s deployment, the app configuration (previously called “Threema MDM”) in the management cockpit is a convenient way of controlling the app’s settings. In the management cockpit, the same settings that are available when using a regular MDM system can be configured. Learn more…
On Android and iOS, apps can be installed in a Managed Profile to separate personal and professional use. Apps that are installed this way can be remotely configured using an MDM system.
Threema Work supports the following platforms and profile types:
Platform | System Requirement | Supported Profile Types |
Android | Android 5.0+ | Android Enterprise / Managed Configurations |
iOS | iOS 7+ | Managed App Configuration |
To ensure compatibility, please contact the developer of your MDM system.
| Name | Type | Min | Max | OS | Renewable¹ | User-editable² | Default value |
|---|---|---|---|---|---|---|---|
| Chat contents | |||||||
| Chat export th_disable_export | bool | - | - | Android, iOS | Yes | No | - |
| Define whether users can export chats. | |||||||
| Auto-save to gallery th_disable_save_to_gallery | bool | - | - |
Android iOS (2.7.3k) |
Yes | No | - |
| Define whether media can be auto-saved to the device’s local gallery or camera roll. | |||||||
| Screenshots and app switcher previews th_disable_screenshots | bool | - | - | Android | Yes | No | - |
| Define whether taking screenshots and showing the app-switcher thumbnail is allowed. | |||||||
| Push notification preview th_disable_message_preview | bool | - | - |
Android (3.02k) iOS (2.9.1k) |
Yes | No | - |
| Define whether message previews are shown in push notifications. | |||||||
| External saving and sharing th_disable_share_media | bool | - | - |
Android (4.2k) iOS (4.4k) |
Yes | No | - |
| Define whether users can save or share media and other files outside of the app. On Android, the setting only applies to images, videos, and voice messages. The setting doesn’t apply to the desktop app and web client unless desktop/web is disabled. | |||||||
| Message retention (auto-delete) th_keep_messages_days | int | 7 | 3650 |
Android (5.2k) iOS (5.7k) |
Yes | No | 7 |
| Define a time span after which chat messages will be automatically deleted. Messages in notes groups, open polls, and starred messages are excluded from this setting (7–3650 days). | |||||||
| Communication | |||||||
| Group creation th_disable_create_group | bool | - | - |
Android (3.3k) iOS (3.0.4k) |
Yes | No | - |
| Define whether users can create groups. | |||||||
| Desktop/web and device linking th_disable_web | bool | - | - |
Android (3.551k) iOS (4.0.3k) |
Yes | No | - |
| Define whether the desktop app, the web client, and the possibility to link devices are available. | |||||||
| Multi-device linking th_disable_multidevice | bool | - | - |
Android (6.0k) iOS (6.4.1k) |
Yes | No | - |
| Define whether users can link additional devices. | |||||||
| All calls th_disable_calls | bool | - | - |
Android (3.2k) iOS (3.0k) |
Yes | No | - |
| Define whether starting and joining voice, video, and group calls is available. | |||||||
| Group calls th_disable_group_calls | bool | - | - |
Android (5.0k) iOS (5.6k) |
Yes | No | - |
| Define whether group calls are available. | |||||||
| Video in 1:1 calls th_disable_video_calls | bool | - | - |
Android (4.41k) iOS (4.6.1k) |
Yes | No | - |
| Define whether the video functionality is available in one-to-one calls. This setting does not apply to group calls; to block video in group calls, prevent group calls. | |||||||
| Allowed web servers th_web_hosts | string | - | - |
Android (4.1k) iOS (4.4k) |
Yes | No | - |
| Define which servers web clients can connect to (comma-separated list of hostnames; prefix enables suffix matching; otherwise exact match). Example: signaling.threema.com,*-signaling-test.threema.com | |||||||
| Contacts | |||||||
| Contact synchronization th_contact_sync | bool | - | - | Android, iOS | Yes | No | - |
| Define whether the app synchronizes with the device’s address book. On Android and early app versions (<4.5k) for iOS, changes to this setting after setup require a reinstallation or a new ID. | |||||||
| Visibility of inactive/revoked IDs th_hide_inactive_ids | bool | - | - |
Android (4.2k) iOS (4.4k) |
Yes | No | - |
| Define whether inactive and revoked IDs are displayed in the contact list (see our FAQ for more info). | |||||||
| Unknown contacts th_block_unknown | bool | - | - | All | Yes | No | - |
| Define whether unknown contacts (i.e., not contained in the Threema contact list) can message users. | |||||||
| Manual contact addition th_disable_add_contact | bool | - | - |
Android (2.82k) iOS (2.7.3k) |
Yes | No | - |
| Define whether users can add contacts by entering their ID or scanning their QR code; contacts can still be added via contact synchronization, the company directory, or by receiving messages (if not blocked). | |||||||
| Company directory access th_disable_work_directory | bool | - | - |
Android (4.55k) iOS (4.6.9k) |
Yes | No | - |
| Define whether users can access the internal company directory. | |||||||
| Backups | |||||||
| Threema Safe backup th_safe_enable | bool | - | - |
Android (3.62k) iOS (4.2.1k) |
Yes | No | - |
| Define whether Threema Safe must be used, cannot be used, or is optional. | |||||||
| Backups (all types) th_disable_backups | bool | - | - | All | Yes | No | - |
| Define whether any type of backup can be created. This setting overrides Threema Safe, ID export, and other backup settings. | |||||||
| iOS system backups th_disable_system_backups | bool | - | - | iOS (4.2.1k) | Yes | No | - |
| Define whether Threema data is included in iTunes/iCloud backups. | |||||||
| Android data backups th_disable_data_backups | bool | - | - | Android (3.7k) | Yes | No | - |
| Define whether users can create data backups. | |||||||
| ID export th_disable_id_export | bool | - | - |
Android (3.7k) iOS (4.2.1k) |
Yes | No | - |
| Define whether users can export their Threema ID. | |||||||
| th_safe_restore_id - | string | 8 | 8 |
Android (3.62k) iOS (4.2.1k) |
No | No | - |
| Threema ID to restore from Threema Safe if th_safe_restore_enable is true. If th_safe_password is also set, the ID is restored without user interaction. | |||||||
| Restore Threema Safe during app setup th_safe_restore_enable | bool | - | - |
Android (3.62k) iOS (4.2.1k) |
No | No | - |
| Define whether restoring a Threema Safe backup in the setup wizard is allowed, required (when an ID is preset), or prevented | |||||||
| Threema Safe password error text th_safe_password_message | string | - | - |
Android (4.2k) iOS (4.4k) |
Yes | No | - |
| Define the error message shown when a user’s Threema Safe password doesn’t meet the Threema Safe password policy. | |||||||
| Threema Safe password policy (regex) th_safe_password_pattern | string | - | - |
Android (4.2k) iOS (4.4k) |
Yes | No | - |
| Define the password format requirements for Threema Safe (default: minimum length 8 characters; regex must work on Android and iOS). | |||||||
| Threema Safe server auth password th_safe_server_password | string | - | - |
Android (3.62k) iOS (4.2.1k) |
Yes | No | - |
| Define the HTTPS password for a custom Threema Safe server (if required). | |||||||
| Custom Threema Safe server URL th_safe_server_url | string | - | - |
Android (3.62k) iOS (4.2.1k) |
Yes | No | - |
| Define the URL of a custom Threema Safe server. | |||||||
| Threema Safe server auth username th_safe_server_username | string | - | - |
Android (3.62k) iOS (4.2.1k) |
Yes | No | - |
| Define the HTTPS username for a custom Threema Safe server (if required). | |||||||
| th_id_backup - | string | 99 | 99 | Android, iOS | No | No | - |
| This setting is used to provide precalculated key pairs (Threema IDs) and restore ID backups (also called “ID exports” in newer app versions). Requires an external MDM system; not available in the app configuration. | |||||||
| th_id_backup_password - | string | 8 | - | Android, iOS | No | No | - |
| Password for ID backup/export in th_id_backup. Requires an external MDM system; not available in the app configuration. | |||||||
| th_safe_password - | string | 8 | 4096 |
Android (3.62k) iOS (4.2.1k) |
Yes | No | - |
| Password to encrypt (or restore, cf. th_safe_restore_id) Threema Safe backup (requires an external MDM system and is not available in the app configuration) | |||||||
| Profile | |||||||
| th_license_username macghrwo | string | 1 | 255 | Android, iOS | No | No | - |
| Username required to activate the app (requires an external MDM system and is not available in the app configuration) | |||||||
| th_license_password macgitov | string | 1 | - | Android, iOS | No | No | - |
| Password required to activate the app (requires an external MDM system and is not available in the app configuration) | |||||||
| User last name th_lastname | string | - | 255 |
Android (3.43k) iOS (3.0.9k) |
Yes | No | - |
| Define the user’s last name (visible in the management cockpit, API, app contact list, and company directory, if active). | |||||||
| User first name th_firstname | string | - | 255 |
Android (3.43k) iOS (3.0.9k) |
Yes | No | - |
| Define the user’s first name (visible in the management cockpit, API, app contact list, and company directory, if active). | |||||||
| User category/tag th_category | string | - | 255 |
Android (3.43k) iOS (3.0.9k) |
Yes | No | - |
| Define a user category (e.g., group or department); appears as a tag in the user management and via the API. | |||||||
| Department th_department | string | - | 255 |
Android (5.6k) iOS (6.3k) |
Yes | No | - |
| Define the user’s department (visible in the management cockpit, contact list, and API). | |||||||
| Job title th_job_title | string | - | 255 |
Android (5.6k) iOS (6.3k) |
Yes | No | - |
| Define the user’s job title (visible in the management cockpit, contact list, and API). | |||||||
| Nickname th_nickname | string | 1 | 32 | Android, iOS | Yes | Yes | - |
| Define the user’s nickname (visible in the contact details and push notifications). | |||||||
| Linked email address th_linked_email | string | - | - | Android, iOS | No | Yes | - |
| Define the email address linked to the Threema ID for contact synchronization. | |||||||
| Linked phone number th_linked_phone | string | - | - | Android, iOS | No | Yes | - |
| Define the phone number (international format, e.g., +41555114900) linked to the Threema ID for contact synchronization. | |||||||
| Customer Specific Identifier (CSI) th_csi | string | - | 255 |
Android (3.43k) iOS (3.0.9k) |
Yes | No | - |
| Define an internal identifier to help identify users; visible in the management cockpit and company directory. | |||||||
| Restrict profile editing th_readonly_profile | bool | - | - | Android, iOS | Yes | No | - |
| Define whether users can edit profile settings (nickname, profile picture, linked email address / phone number, ID export, ID deletion, and revocation password). | |||||||
| Setup wizard th_skip_wizard | bool | - | - |
Android (3.2k) iOS (3.0.6k) |
Yes | No | - |
| Define whether the initial setup wizard is shown on first launch. The wizard allows configuration of a linked phone number / email address, the nickname, contact synchronization, and Threema Safe settings. | |||||||
| Profile picture sharing th_disable_send_profile_picture | bool | - | - |
Android (3.14k) iOS (2.10.1k) |
Yes | No | - |
| Define whether the user’s profile picture is shared with other contacts. |
1 Renewable
Yes: If you change this value, it will take up to 24 hours until the change becomes effective on the users’ end (users can pull down the contact list in the app to manually force a synchronization and get the most current values). Please note that in order for the parameters th_safe_password, th_safe_server_url, th_safe_server_username and th_safe_server_password to be renewed, the app must be restarted.
No: This value is set when users license the app. For users who have completed the setup process, a change to this value will only become effective if they reinstall the app or generate a new ID.
2 User-editable
Yes: Unless th_readonly_profile is true, the setting corresponding to this value can be changed by users in the app.
No: The setting corresponding to this value cannot be changed by users in the app if a value is set via MDM.
