Threema

What Is Threema?

Threema is the most private mainstream messenger you can use. That is not marketing language — it is a structural claim backed by engineering decisions that no other major messaging app has been willing to make.

When you install Threema, you are assigned a random eight-character Threema ID. No phone number. No email address. No name. The app does not upload your contacts, does not access your address book, and does not ask for any personal information whatsoever. You are identified by a string of characters, and your messages are end-to-end encrypted using the NaCl cryptography library. Messages are deleted from Threema's servers the moment they are delivered. The servers — located in Switzerland — store no conversation history, no metadata logs, and no social graph of who talks to whom.

This is not the same as what WhatsApp or even Signal offers. WhatsApp encrypts message content but collects extensive metadata (who you talk to, when, how often) and requires a phone number. Signal encrypts messages and minimises metadata collection but still requires a phone number for registration. Threema requires nothing. The app does not know who you are unless you choose to tell it.

Founded in 2012 in Pfaeffikon, Switzerland, Threema GmbH is a small, bootstrapped company that has deliberately avoided venture capital funding. The consumer app is sold as a one-time purchase (CHF 5.99) with no subscription, no ads, and no data monetisation. The business model is clean: you pay once, you own the app, and the company sustains itself through enterprise licensing (Threema Work) and the consumer app revenue.

All client apps are open source and published on GitHub. Independent security audits are conducted regularly, with results published publicly. The Swiss Federal Administration and the Swiss Army have adopted Threema for official communication — a meaningful endorsement of its security model from an institution that takes operational security seriously.

Key Features

End-to-End Encryption

Threema uses the NaCl (Networking and Cryptography library) for end-to-end encryption of all messages, voice calls, video calls, group chats, file transfers, and status messages. Encryption keys are generated locally on the device and never leave it. The encryption is applied not just to message content but to all payloads including file names, media types, and group membership.

Every Threema contact has a verification level indicated by coloured dots: red (unverified, found by ID only), orange (matched via phone number or email), and green (verified in person via QR code scan). This verification model is more transparent than most messengers, making it easy to assess whether you are actually talking to who you think you are.

Anonymous Registration

This is Threema's most distinctive feature and its most important philosophical statement. By generating a random ID at installation, Threema breaks the link between your real-world identity and your messaging identity. You can share your Threema ID on a business card, a website, or in person — without ever revealing your phone number or email address.

For journalists communicating with sources, activists in sensitive environments, or professionals who want to separate their work communication from personal identifiers, this is not a convenience feature. It is a security feature with material consequences.

Group Chats and Polls

Group chats support up to 256 members with the same end-to-end encryption applied to one-on-one conversations. A useful addition is the built-in poll feature, allowing group members to create polls and vote directly within the chat. This is a small but practical feature that eliminates the need for external polling tools for simple group decisions.

Voice and Video Calls

Threema supports end-to-end encrypted voice and video calls with quality comparable to other messaging platforms. Group voice calls are available for up to 16 participants. Call quality depends on network conditions, as with any VoIP service, but the encryption overhead is not perceptibly disruptive.

Multi-Device and Threema Safe

Threema supports multi-device use, allowing you to use the messenger on multiple phones or tablets linked to the same ID. Threema Safe provides encrypted backup of your ID, contacts, and settings — stored on Threema's server or a custom server of your choice. Chat history backup is handled separately through local encrypted exports.

The multi-device implementation was a long-requested feature and has improved significantly. However, it remains less seamless than WhatsApp's multi-device support, which automatically syncs across devices without manual setup.

Hidden Chats

Individual conversations can be hidden behind a PIN or fingerprint lock, removing them from the main chat list. This is useful for sensitive conversations that should not be visible to anyone glancing at your phone screen.

Pricing

Threema's consumer app is a one-time purchase at CHF 5.99 (approximately EUR 6). There is no subscription, no in-app purchases, and no ads. You pay once and receive all future updates. This pricing model is vanishingly rare among messaging apps and reflects Threema's commitment to avoiding revenue models that create incentives to collect or monetise data.

Threema Work, the enterprise version, is priced at CHF 2 per user per month (billed annually) and includes an admin dashboard, pre-configuration of app settings, MDM integration, and compliance features. For organisations that need managed deployment of a secure messenger, Threema Work provides the control and oversight that IT departments require.

Threema OnPrem offers self-hosted deployment of the entire Threema infrastructure on an organisation's own servers. Pricing is custom and typically suited to government agencies, military organisations, and large enterprises with strict data sovereignty requirements.

The one-time purchase model for consumers is a double-edged sword. It removes the ongoing cost that subscription fatigue creates — but it also creates a friction point. Asking someone to pay CHF 5.99 for a messenger when WhatsApp and Signal are free is a genuine barrier to adoption, particularly for network-effect-dependent communication tools where you need your contacts to use the same app.

EU Compliance & Privacy

Threema is a Swiss company under Swiss data protection law, which is recognised as providing an adequate level of protection by the European Commission. Switzerland is not an EU member but is part of the European data protection framework through adequacy decisions.

Threema's privacy model goes well beyond GDPR compliance. No personal data is required to use the service. Messages are deleted from servers after delivery. No metadata is logged. The company cannot identify users by their Threema ID. In response to law enforcement requests, Threema can provide only the creation date of a Threema ID, the last login date, and a hash of a linked phone number or email (if voluntarily provided by the user). It cannot provide message content, contact lists, group memberships, or conversation history — because this data does not exist on its servers.

For organisations subject to Swiss FINMA regulations, EU GDPR, or sector-specific confidentiality requirements (legal, medical, government), Threema's architecture provides structural compliance rather than policy-based compliance. The data simply does not exist to be breached or subpoenaed.

Who It's Best For

Privacy-conscious individuals who want a messenger that does not require a phone number, does not collect metadata, and does not monetise their data.

Government and military organisations that need an audited, encrypted messenger with enterprise management capabilities and, optionally, self-hosted infrastructure.

Journalists and activists who need to communicate with sources without revealing personal identifiers or creating a traceable communication record.

Swiss and DACH-region businesses where Threema already has significant market penetration and the network effect works in its favour.

The Verdict

Threema's biggest challenge is not its technology — it is the network effect. A messenger is only as useful as the number of your contacts who use it. WhatsApp has two billion users. Signal has tens of millions. Threema has approximately 12 million, concentrated heavily in the DACH region. For many users, the privacy of their messenger matters less than whether their friends are on it.

But for users and organisations where privacy is not a preference but a requirement — where anonymous communication is a professional necessity, where metadata minimisation matters, where Swiss jurisdiction provides meaningful protection — Threema is the best option available. It costs CHF 5.99 once. It asks for nothing in return. In a messaging market built on surveillance economics, that remains a radical proposition.

Frequently Asked Questions

Why does Threema cost money when Signal is free?

Threema's one-time purchase price funds the company directly, ensuring sustainability without reliance on donations, grants, or external funding that could create conflicts of interest. Signal is funded by the Signal Foundation and individual donations. Threema's paid model also eliminates the need for phone number verification, since there is no SMS verification cost to absorb.

Is Threema truly anonymous?

Yes, to a degree unmatched by other mainstream messengers. Registration requires no phone number, email, or name. You receive a random Threema ID. You can optionally link a phone number or email for contact discovery, but this is not required. Messages are deleted from servers after delivery, and no metadata logs are maintained.

Can Threema be used for business communication?

Yes. Threema Work provides enterprise-grade features including an admin dashboard, MDM integration, pre-configured app settings, and compliance controls. Threema OnPrem allows full self-hosting. The Swiss Federal Administration, the Swiss Army, and various German government agencies use Threema for official secure communication.

How does Threema's encryption compare to Signal's?

Both use strong end-to-end encryption — Threema uses NaCl, Signal uses the Signal Protocol. Both are open source and independently audited. The practical difference lies not in encryption quality but in metadata handling: Signal requires a phone number and stores some metadata (though it minimises this aggressively); Threema requires no identifiers and deletes messages from servers immediately after delivery.

Will Threema work if my contacts do not use it?

Threema can only communicate with other Threema users. There is no SMS fallback or cross-platform messaging bridge. This is the fundamental trade-off of any privacy-focused messenger. In the DACH region (Germany, Austria, Switzerland), Threema has meaningful adoption, making it practical for daily use. Elsewhere, adoption is more limited.