| Sign-up requirements | None — no phone number, no email, no account. Identity is a cryptographic key generated on your device; there's no ID string to manage or lose. | No phone number required: identity is a random 8-character Threema ID, and linking a phone or email is optional. Genuinely strong on this axis — but the ID is still a persistent, account-like identifier. |
| Price | Free. Funded by optional paid tiers — no ads, no token, no data monetization. | Paid — the mobile apps are a one-time purchase. |
| Browser / no-install use | Yes — persistent, full-featured client at app.sendant.io. Open a link, start messaging. This is how Sendant works on iPhone right now, in the browser. | No standalone browser client. Threema Web and the desktop app must be linked to the paid phone app. |
| Native apps | Android app. No native iOS app yet — iPhone users use the browser client. | Native iOS and Android apps, plus a desktop/web client that pairs with the phone app. |
| Independent audits | Not yet audited. An independent audit is planned; known limitations are documented rather than hidden. | Independently audited multiple times (including by Cure53). ETH Zurich researchers found protocol weaknesses in 2023, which Threema addressed with its newer Ibex protocol. |
| Encryption | X3DH + Double Ratchet — the same cryptographic primitives Signal uses — compiled to WASM so the browser runs the same crypto path as the native app. | Threema's own end-to-end protocol, strengthened with Ibex after the 2023 academic findings. |
| Metadata & hosting | The service never learns a phone number or email; servers see only ciphertext content. No independently verified metadata story yet. | Servers in Switzerland, a strong Swiss-privacy and GDPR posture, and a documented practice of minimizing stored metadata. |
| Bad-network behavior | Built for throttled, restricted, or intermittent networks: messages wait in an encrypted store-and-forward mailbox and deliver when your contact reconnects. Peer-to-peer and relay delivery paths are on the roadmap. | Centralized service; generally requires a working connection to Threema's servers. |
| Ownership | Independent, funded by its own optional paid tiers. | Long marketed on Swiss independence; acquired by the German private-equity firm Comitis Capital in January 2026 — a secondary buyout from AFINUM Management, the PE firm that had held Threema since 2020. Servers remain in Switzerland — weigh the change for yourself. |
| Maturity | Young product. Smaller feature surface and a much smaller user network. | A mature messenger refined over more than a decade, with an established user base. |