App configuration

Threema Work allows to remotely edit app settings. You can control the app’s configuration, disable specific features, and the end user is relieved from setting up the app manually.

Configuration via MDM software

On Android and iOS, apps can be installed in a Managed Profile to separate personal and professional use. Apps that are installed this way can be remotely configured using an MDM system.

Threema Work supports the following platforms and profile types:

Platform	System requirement	Supported profile type
Android	Android 5.0+	Android Enterprise / Managed Configurations
iOS	iOS 7+	Managed App Configuration
Windows Phone	WP 8.1+	Configuration using URL actions (Windows Phone)

To ensure compatibility, please contact the developer of your MDM system.

To learn more about rollout and deployment, please consult the documentation.

Configuration via management cockpit (Threema MDM)

If you don’t use an MDM system for the app’s deployment, Threema MDM is a convenient way of controlling the app’s settings in the management cockpit. With Threema MDM, the same parameters that are available when using a regular MDM system can be configured.

Configuration parameters

th_license_username

Username required to activate the app

Type: string
Min: 1
Max: 255
OS: All
Renewable¹: No
User-editable²: -
Threema MDM: No

th_license_password

Password required to activate the app

Type: string
Min: 1
OS: All
Renewable¹: No
User-editable²: -
Threema MDM: No

th_nickname

The nickname appears in the contact details (as well as in push notifications).

Type: string
Min: 0
Max: 32
OS: All
Renewable¹: No
User-editable²: Yes
Threema MDM: Yes

th_firstname

First name of the user; visible in Work cockpit and API.

Type: string
Max: 255
OS: android (3.43k), ios (3.0.9k), wp (2.3.0k)
Renewable¹: Yes
User-editable²: Yes
Threema MDM: Yes

th_lastname

Last name of the user; visible in Work cockpit and API.

Type: string
Max: 255
OS: android (3.43k), ios (3.0.9k), wp (2.3.0k)
Renewable¹: Yes
User-editable²: Yes
Threema MDM: Yes

th_csi

CSI (Customer Specific Identifier) can be any value (e.g., an internal employee reference); this value is only visible in the management cockpit, not in the app.

Type: string
Max: 255
OS: android (3.43k), ios (3.0.9k), wp (2.3.0k)
Renewable¹: Yes
User-editable²: Yes
Threema MDM: Yes

th_category

User category (e.g. group, department); visible in Work cockpit and API.

Type: string
Max: 255
OS: android (3.43k), ios (3.0.9k), wp (2.3.0k)
Renewable¹: Yes
User-editable²: Yes
Threema MDM: Yes

th_linked_email

The email address linked to a Threema ID is used for contact synchronization.

Type: string
OS: All
Renewable¹: No
User-editable²: Yes
Threema MDM: Yes

th_linked_phone

The phone number linked to a Threema ID is used for contact synchronization; it must be specified in international format, e.g., +41555114900.

Type: string
OS: All
Renewable¹: No
User-editable²: Yes
Threema MDM: Yes

th_id_backup

This parameter is used to pass precalculated key pairs (Threema IDs) and restore ID backups.

Type: string
Min: 99
Max: 99
OS: All
Renewable¹: No
User-editable²: -
Threema MDM: Yes

th_id_backup_password

Password for ID backup in th_id_backup

Type: string
Min: 8
OS: All
Renewable¹: No
User-editable²: -
Threema MDM: Yes

th_safe_enable

If set to true, Threema Safe must be used; if set to false, Threema Safe cannot be used. (If not set at all, Threema Safe can be used.)

Type: bool
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_safe_password

Password to encrypt (or restore, cf. th_safe_restore_id ) Threema Safe backup (not available in Threema MDM)

Type: string
Min: 8
Max: 4096
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: No

th_safe_server_url

URL for custom Threema Safe server, e.g., examplecompany.com/threemasafe

Type: string
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_safe_server_username

Username for HTTPS authentication of Threema Safe server defined in th_safe_server_url (if required)

Type: string
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_safe_server_password

Password for HTTPS authentication of Threema Safe server defined in th_safe_server_url (if required)

Type: string
OS: All
Renewable¹: Yes
User-editable²: -
Threema MDM: Yes

th_safe_restore_enable

If set to false, Threema Safe backups cannot be restored. If set to true, restoring a Threema Safe backup in the setup wizard is either optional (if th_safe_restore_id is not set) or mandatory (if th_safe_restore_id is set).

Type: bool
OS: All
Renewable¹: No
User-editable²: No
Threema MDM: Yes

th_safe_restore_id

Threema ID to restore from Threema Safe if th_safe_restore_enable is true

Type: string
Min: 8
Max: 8
OS: All
Renewable¹: No
User-editable²: No
Threema MDM: Yes

th_contact_sync

If set to true, synchronization with the local address book is enabled.

Type: bool
OS: All
Renewable¹: No
User-editable²: Yes
Threema MDM: Yes

th_readonly_profile

If set to true, the user can neither edit profile settings (nickname, profile picture, and linked email address and phone number) nor enable/disable contact synchronization.

Type: bool
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_block_unknown

If set to true, unknown contacts (i.e., contacts not contained in the device's address book) are blocked.

Type: bool
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_save_to_gallery

If set to true, media files will not be auto-saved to the local gallery.

Type: bool
OS: android, ios (2.7.3k)
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_screenshots

If set to true, the user cannot take screenshots on Android, and no thumbnail is displayed in Android’s app switcher.

Type: bool
OS: android, wp
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_add_contact

If set to true, the user cannot manually add contacts. Contacts can only be added via contact synchronization (if not disabled; see th_contact_sync) or by receiving messages from unknown contacts (if not disabled; see th_block_unknown).

Type: bool
OS: android (2.82k), ios (2.7.3k), wp
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_export

If set to true, the user cannot export chats.

Type: bool
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_backups

If set to true, the user cannot create ID backups, data backups, and cloud backups (including Threema Safe). On Android, setting an ID revocation password is also impossible since this requires an ID backup.

Type: bool
OS: All
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_message_preview

If set to true, the message preview in push notifications is disabled.

Type: bool
OS: android (3.02k), ios (2.9.1k)
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_send_profile_picture

If set to true, the user’s profile picture will not be shared with others.

Type: bool
OS: android (3.14k), ios (2.10.1k)
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_disable_calls

If set to true, Threema calls are disabled.

Type: bool
OS: android (3.2k), ios (3.0k)
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

th_skip_wizard

If set to true, the setup wizard that would show up on the first app launch is skipped.

Type: bool
OS: android (3.2k), ios (3.0.6k), wp (2.1.0k)
Renewable¹: Yes
User-editable²: -
Threema MDM: Yes

th_disable_create_group

If set to true, the user cannot create groups.

Type: bool
OS: android (3.3k), ios (3.0.4k), wp (2.2.0k)
Renewable¹: Yes
User-editable²: -
Threema MDM: Yes

th_disable_web

If set to true, Threema Web is disabled.

Type: bool
OS: android (3.551k), ios (4.0.3k)
Renewable¹: Yes
User-editable²: No
Threema MDM: Yes

Renewable

Yes: A change to this value is effective immediately.

No: This value is set when users license the app. For users who have completed the setup process, a change to this value will only become effective if they reinstall the app or generate a new ID.

User-editable

Yes: Unless th_readonly_profile is true, the setting corresponding to this value can be changed by users in the app.

No: The setting corresponding to this value cannot be changed by users in the app if a value is set via MDM.