Threema makes source code apps available for encrypted chats

Threema reports that it has released the source code and documentation of its apps under an AGPLv3 license. According to the company, this allows anyone to check the security it offers with its chat app.

Threema has put the source code of its apps for Android and iOS, and the code of Threema Web, Push Relay, Compose Area and App Remote Protocol on Github. In the repositories, the company provides instructions on how to test and build the code, noting that Apple’s restrictions make it difficult to provide reproducible builds for iOS. Reproducible builds allow developers to verify that the source code actually corresponds to that final app.

Developers can make suggestions to contribute to the code. Threema also reports that users no longer have to believe the company’s claims about safety, nor rely on the findings of audits, but can verify them themselves.

Threema is a paid app that tries to distinguish itself as a chat service with encrypted communication. In the past, the company has conducted multiple audits to confirm its security claims, the latest of which was published in November.