Android features

This article discusses the Android features that are supported in Secure Mail.

Drafts folder auto-sync

In Secure Mail for Android, the drafts folder is automatically synced and your drafts are available across all your devices.

This feature is available on devices running Office 365 or Exchange Server 2016 and later.


If your Secure Mail draft contains attachments, the attachments are not synced to the server.

The following one-minute video demonstrates how this feature works:

Image of Drafts folder video on YouTube

Manage your feeds

In Secure Mail for Android, you can now organize your Feed card based on your requirements. For user help documentation on this feature, see the Citrix User Help Center article, Organize your email.

Viewing attachments

In Secure Mail for Android, viewing mail and calendar attachments is easy. For user help documentation on this feature, see the Citrix User Help Center article, View and attach files.

In Secure Mail for Android, you can print emails and calendar events from your Android device. This print functionality uses Android Print framework.


  • Ensure that an administrator has set the Block Printing policy to OFF in the Citrix Endpoint Management console. For information about this policy for Android, see Block Printing policy.
  • If an email is IRM protected, ensure you enable the Allow viewers to print option in the email.

You cannot print an email or a calendar event if these policies are set inappropriately.


This print capability has the following known limitations:

  • Inline images prints only if you have downloaded images by tapping Show Pictures. If you don’t tap Show Pictures, only the image placeholders print.
  • In Secure Mail, large-sized emails are truncated. Before printing, tap Download complete message to print the complete email. If the complete message doesn’t download, a truncated email prints.
  • No metadata from an email or event is added while printing these items.

To print an email

  1. Open the email that you want to print.
  2. Tap the More icon on the top left of the screen. The following options appear:
    • Move
    • Print

    Print emails screen


On tablets, you can directly use the print icon on the top left of the screen to print an email.

Print on tablets screen

  1. Tap Print. A preview of your email appears.

  2. Tap the list and the following options appear:
    • Save as PDF
    • All printers

    printing options screen

  3. Tap Save as PDF to save your email in a PDF format.
  4. Tap All printers. Install the printer as per your requirement.
  5. Once the printer is installed, tap Select Printer to select a printer. The Printer screen appears.


    Print options vary based on the printer selected. The following image is from a Canon E480 printer and is used for representational purpose only.

    Image of the printer option

  6. Select the printer you want to print to. Use the following print options:
    • Manually enter the number of copies you want to print.
    • Select the paper size from the list.
    • Select the color from the list.
    • Choose the page orientation as required.
    • Select a page or a range of pages and manually enter the page range.
  7. After setting up the print options, tap the Print icon on the screen.

To print an inline image

  • Tap Show pictures within the email and follow the instructions as mentioned in the preceding section To print an email.

To print a calendar event

  1. Navigate to calendar and tap an event.

    Calendar event

  2. Tap the Print icon and then follow the same instructions as mentioned in the preceding section To print an email.

    Print Calendar event

Report phishing emails with ActiveSync headers

In Secure Mail for Android, when a user reports a phishing mail, an EML file is generated as an attachment corresponding to that mail. Admins receive this mail and can view the ActiveSync headers associated with the reported mail.

To enable this feature, an admin must configure the Report Phishing Email Address policy and set the Report Phishing Mechanism as Report Via Attachment in the Citrix Endpoint Management console. For details, see Report phishing email (as an attachment).

Subfolder notifications

In Secure Mail for Android, you can receive mail notifications from subfolders of your mail account.


  • Ensure that the FCM-based push notification is enabled in the Endpoint Management console to get notifications for subfolders. For steps to configure FCM-based push notifications, see Push notifications for Secure Mail.
  • The subfolder notification feature is not available for Lotus Notes Server.

To enable notifications for subfolders

  1. Go to Settings and then under General, tap Notifications.

    Subfolder notifications settings

  2. In the Notifications screen, tap Mail folders. A list of subfolders within the inbox appears.

    Selecting mail folder

  3. Tap to select the subfolders you want to receive notifications from. Inbox is selected by default.


    Enabling notifications for subfolders enables auto sync.

    Selecting subfolders

To disable subfolder notifications, clear the check boxes for subfolders you do not want to receive notifications from.

Notification channels

On devices running Android O or later, you can use the notifications channel settings to manage how your email and calendar notifications are handled. This feature allows you to customize and manage your notifications.

To configure notifications for mail or calendar reminders, open Secure Mail and navigate to Settings > Notifications and select the desired notification option. Secure Mail Notifications settings

You can then navigate to either Manage mail notifications or Manage calendar notifications to manage your email or calendar notifications respectively.

Mail notification channel settings

Calendar Notification channel settings

Alternatively, you can long press on the Secure Mail app icon on your device, select App info and then tap Notifications.

If your Vibrate setting was previously set to Only when silent, the Vibrate setting will change to the default vibrate setting (Off) with this feature.


The notifications on the lock screen are available based on how your admin has configured the Control locked screen notifications MDX policy.

In Secure Mail versions 10.3.5 and later, users can’t attach images directly from the Gallery app if the Inbound document exchange (Open-in) policy is set to Restricted. If you want to keep this policy set to Restricted, but allow users to add photos from the Gallery, follow these steps in the Endpoint Management console.

  1. Set Block gallery to Off.

  2. Get the Gallery package ID for devices. Some examples:

    • LG Nexus 5:,
    • Samsung Galaxy Note 3:,,
    • Sony Expire: com.sonyericsson.album,
    • HTC:,
    • Huawei:,
  3. Make the hidden policy InboundDocumentExchangeWhitelist visible:

    • Download the WorxMail APK file and wrap the file with the MDX Toolkit.
    • Find the .mdx file on your computer and change the file suffix to .zip.
    • Open the .zip file and find the policy_metadata.xml file
    • Search for and change InboundDocumentExchangeWhitelist from PolicyHidden>true</PolicyHidden> to <PolicyHidden>false</PolicyHidden>.
    • Save the policy_metadata.xml file.
    • Select all the files in that folder and compress to create the .zip file.


      Don’t zip the outer folder. Select all files inside the folder and compress the selected files.

    • Click the resulting compressed file.
    • Choose Get Info and change the file suffix back to .mdx.
  4. Upload the modified .mdx file to the Endpoint Management console and add the list of Gallery package IDs to the now-visible Inbound document exchange whitelist policy.

    Image of the Inbound document exchange whitelist

    Ensure that the package IDs are comma-separated:,,

  5. Save and deploy Secure Mail.

Android users can now attach an image from the Gallery app. For user help documentation on this feature, see the Citrix User Help Center article, View and attach files.

Supported file formats

An X indicates a file format that can be attached, viewed, and opened in Secure Mail.

Format iOS Android
Video: H.263 AMR NB codec_Mp4   X
Video: H.263 AMR NB codec_3gp   X
Video: H.264 AAC codec_3gp X X
Video: H.264 AAC codec_mp4 X X
Video: H.264 Acclc codec_mp4 X X
GTM recorded_wmv   X
Flac   X
TIF (single-page only) X  
WebP   X
.dot X X


Tap the Contacts icon in the tab bar, and then tap the hamburger icon on the top right of the screen. The Contacts screen displays the following items:

  • All Contacts: Displays all contacts from multiple email accounts. This option appears only if multiple email accounts are configured.
  • Individual email account: Displays contacts pertaining to the individual email account that are configured.
  • Categories: Displays contact categories that you may have created or selected from the predefined list to group contacts.

To view the contact folder


Contact subfolders are not supported on Secure Mail for Android. If you have created folders or subfolders for your contacts using Microsoft Outlook, you can’t view them in Secure Mail.

  1. In the contacts screen:
    • Tap on all contacts to view all the contacts from multiple email accounts.
    • Tap on individual email account to view contacts associated with a particular email account.

    Image of the Contacts list

  2. Tap on categories to view the contacts grouped under specific categories. You can choose to group contacts based on a category you create or group them under a category from a predefined list.

You can synchronize contacts pertaining to an individual account to your local contacts.

To sync with local contacts

  1. Open Secure Mail.
  2. Tap the Settings icon, and then navigate to Contacts > Sync with Local Contacts and then tap > to expand the menu.
  3. In the Sync Local Contacts screen, enable the account whose contacts you want to sync.
  4. Tap OK.
  5. When prompted to allow Secure Mail to access your contacts, tap OK.

You have now successfully exported contacts for the account. To undo this action, go to Settings > Contacts > Sync with Local Contacts and then tap on the switch next to the account to disable this feature. Tap OK to confirm your action.

Image of the Sync with local contacts confirmation


The calendar displays all events pertaining to the multiple accounts on your device. You can set colors to individual accounts to differentiate calendars events pertaining to individual accounts.


The Personal calendar feature is always associated with your primary or default account if enabled.

Image of the calendar associated with primary or default account

To set colors to calendar events

  1. Tap the Calendar icon in the footer bar and then tap the hamburger icon in the top left. The Calendars screen displays all the accounts you have configured.
  2. Tap on the default color displayed on the right of an Exchange account. The Colors screen displays the available colors for that account.
  3. Select a color of your choice and then tap Save.
  4. To return to the previous screen, tap Cancel. The selected color is set for all calendar events pertaining to that Exchange account.

    Image of the calendar color options

    Image of the colored accounts

    Image of the calendar with colors

When you are creating a calendar invitation or event, the Organizer field auto-populates with the email address of the default account. To change the mail account, tap this email address and select another account.

Image of the organizer field

Image of the organizer selection

You can perform a global search from the Mailboxes or the All Contacts view. This action displays the appropriate results after searching all the accounts in the app.

All searches from within an individual account displays results pertaining to that account only.

Android Enterprise in Secure Mail

Secure Mail and Secure Web for Android is compatible with Android Enterprise, formerly known as Android for Work.


  • To be able to use this feature, ensure that your device is running Android 5.0 or later.
  • For on-premises deployments, the afw.accounts Endpoint Management property must be set to TRUE.

After you have set up Android Enterprise in Endpoint Management, the mobile productivity apps are available on your device. The Android Enterprise icon identifies the apps, as highlighted in the following image.

Image of Android Enterprise icon

Features that are compatible with Android Enterprise

The following table lists the Secure Mail features that are compatible with Android Enterprise.

Feature Support
Exchange Server auto discovery X
Secure Ticket Authority (STA) X
Export contacts X
Microsoft Information Rights Management X
Lock-screen notifications X
Mail sync X
Email classification X
S/MIME signing and encryption X
Firebase Cloud Messaging (FCM) service X
Modern authentication (OAuth)  
Multiple Exchange accounts X
Personal calendar  
Export mail settings X
Shared devices  
Endpoint Management integration with Microsoft Intune/EMS  
Office 365 X
LDAP Exchange Server 2010, 2013, and 2016 X
Certificate based authentication (CBA)  
Go ToMeeting X
Skype for Business  
Personal distribution list X
Citrix Files compatibility X
Email enrollment with single sign-on X

The following table below lists the Secure Web features that are compatible with Android Enterprise.

Feature Support
Secure Browse mode X
Full VPN mode X
All app features X
Compatibility with Secure Mail X


  • If Allow use of the status bar device restrictions policy is set ON for Android Enterprise in Work profile mode then calendar export progress and push notifications in Secure Mail for Android is not displayed in the status bar. However, these notifications are seen on the locked screen when allowed. For more information, see Android Enterprise settings.