Threema is the strongest privacy choice if you don't want to give any phone number or email to a messenger. We score it 9.2 / 10: open-source clients and servers, Swiss jurisdiction, E2EE on every chat, group, and call. The two trade-offs are the one-time purchase price (~$4) and the small ~1M-user network. For privacy-pure use cases those trade-offs are worth it.
Reviewed by the xchat.directory editorial team · Last reviewed
Threema at a glance
What Is Threema?
Threema is a Swiss-made, open-source, end-to-end encrypted messenger that doesn't ask for a phone number or an email at signup. You buy the app once (~$4.49 on iOS and Android), generate a random Threema ID, and that ID is the only identifier anyone — including Threema — sees. It's been around since 2012 and is operated by Threema GmbH in Pfäffikon, Switzerland.
For users who value privacy above network effects, Threema is the obvious pick over Signal, WhatsApp, and Telegram. It also ships a strong Threema Work product for businesses (full E2EE team messaging with admin controls) and a free Threema Education edition for schools.
Privacy & Security — Why Threema Is Special
Three design choices give Threema the strongest anonymity story of any mainstream messenger:
- No phone, no email. Your Threema ID is generated locally on first launch. There is no central account identity Threema GmbH can be forced to hand over.
- Swiss jurisdiction. Servers run in two independent ISO 27001-certified Swiss data centers. Swiss privacy law operates independently of the US CLOUD Act, so lawful-access requests from US authorities have a much higher bar.
- Open-source everything. Threema publishes the full client source code for iOS, Android, and Desktop. Server-side, Threema Gateway is also published. Outside researchers can audit the cryptography end-to-end.
E2EE is on by default for chats, group chats, file transfers, and voice/video calls. The protocol uses NaCl (libsodium) primitives — well-tested and well-audited cryptography — wrapped in a Threema-specific messaging flow that has been independently audited multiple times.
What Threema still knows about you
Threema is honest about what is and isn't private. Phone number and email are optional — if you don't supply them, Threema has only your Threema ID. If you DO link a phone or email for contact discovery, that linkage is stored. The body of messages is fully encrypted end-to-end. Push notifications are routed through Threema-managed Apple/Google endpoints, which means those vendors can see metadata about which Threema user is active — a known limitation across all Apple/Google push-based messengers.
Features — Everything You'd Actually Use
- One-to-one and group chats up to 256 members, E2EE by default
- Voice and video calls with E2EE on the same protocol
- File sharing up to 50 MB per file, end-to-end encrypted
- Threema Work — separate business product with admin, SSO, and audit log features
- Threema Broadcast — opt-in channel for one-way broadcasting (e.g. company news)
- Polling — anonymous polls inside encrypted groups
- Web client that connects to your mobile device (no separate desktop-only login)
Where Threema doesn't compete: large public broadcast channels like Telegram (256-member group limit is hard-baked), bot platforms, Stories-style feeds, and consumer-facing stickers or themes. Threema is deliberately a focused, privacy-first messenger — not a "super-app".
Cost — One Price, Forever
Threema costs a one-time fee of ~$4.49 on iOS and Android. Threema Work and Threema Education have separate business / education licensing. There are no subscriptions, no ads, no in-app purchases, no data-sale incentives. Buying the app once funds ongoing development on an ongoing basis — a business model that maps cleanly onto privacy incentives.
Compared to a "free" messenger the upfront friction is real, but it filters out bot-accounts and makes the user base qualitatively more intentional. For people who take privacy seriously that is a feature, not a bug.
Who Should Use Threema?
Threema is the right pick if:
- You want to give no phone number and no email to a messenger
- You prefer a one-time payment to a "free" ad-supported model
- You need EU / Swiss data residency for regulatory or privacy reasons
- You want a serious encrypted messenger for business (Threema Work)
- You don't need massive public broadcast channels or a huge social graph
Use Signal instead if you want the largest privacy-aware network for free; use Session if you want free plus no identifiers; use Wire instead if you need team collaboration without Threema Work pricing.
Threema vs Signal vs Session — Quick Comparison
Vs Signal: Both are open source and audited. Signal is free and has a much larger user base, but requires a phone number at registration. Threema costs a one-time ~$4 fee but requires no phone or email.
Vs Session: Session is also free and anonymous, but its onion routing means voice/video calls are less reliable and groups are smaller. Threema is more reliable day-to-day, but Session's threat model is more aggressive (zero metadata, decentralized).
Vs Wire: Wire is also Swiss and open source, but uses email/phone identifiers and is positioned more for enterprise. Threema is the consumer-grade Swiss pick.
See our full Signal vs Threema side-by-side comparison for the long form.
The Honest Verdict
Threema is a privacy purist's messenger that has held up exceptionally well over a decade. The trade-offs — paid upfront, small user base, 256-member groups — are real, but every trade-off is a deliberate design decision to keep the product focused on private communication. In 2026, if you don't want to hand any identifier to a messenger and you want Swiss-jurisdiction server-side, Threema is the right answer.
What we like
- No phone, no email — register with a random Threema ID
- Swiss data centers, fully open-source clients (iOS, Android, Desktop)
- One-time payment — no subscription, no ad pressure, no user-data sale incentives
- E2E encrypted messages, files, calls, group chats
What we don't
- Smaller user base (~1M users) — your contacts probably don't have it
- Paid upfront (~$4), so no daily friction-free user onboarding
- Group limit of 256 (smaller than Signal's 1000)