diff --git a/source/administration-guide/configure/experimental-configuration-settings.rst b/source/administration-guide/configure/experimental-configuration-settings.rst index 632f704aed7..6bbe15f8d34 100644 --- a/source/administration-guide/configure/experimental-configuration-settings.rst +++ b/source/administration-guide/configure/experimental-configuration-settings.rst @@ -315,6 +315,34 @@ Changes made when hardened mode is enabled: | This feature's ``config.json`` setting is ``"ExperimentalEnableHardenedMode": false`` with options ``true`` and ``false``. | +----------------------------------------------------------------------------------------------------------------------------+ +.. config:setting:: enable-mobile-watermark + :displayname: Enable Mobile Watermark (Experimental) + :systemconsole: Experimental > Features + :configjson: ExperimentalSettings.EnableMobileWatermark + :environment: N/A + + - **true**: Authenticated Mattermost mobile sessions display a watermark overlay showing the user's username, the server domain, the current date (YYYY-MM-DD), and the current time (HH:mm) for data loss prevention (DLP) purposes. + - **false**: **(Default)** No watermark overlay is displayed in the Mattermost mobile app. + +Enable Mobile Watermark +~~~~~~~~~~~~~~~~~~~~~~~ + +Available on `Enterprise Advanced `__ from Mattermost v11.7 onward. + +**True**: Authenticated Mattermost mobile sessions display a watermark overlay showing the user's username, the server domain, the current date (YYYY-MM-DD), and the current time (HH:mm). This experimental capability is intended to support data loss prevention (DLP) workflows by helping identify the user, server, and time associated with mobile screenshots or shared screen captures. + +**False**: No watermark overlay is displayed in the Mattermost mobile app. + +.. note:: + + - This is an experimental setting. Behavior, defaults, and visual presentation may change in future releases. + - This setting only applies to the Mattermost mobile app. It does not add a watermark to the Mattermost web app or desktop apps. + - The watermark overlay is a visual aid and does not, by itself, prevent screenshots, screen recordings, file exports, or other forms of data extraction. Use it in combination with other mobile security controls, such as :ref:`screenshot and screen recording prevention `, where appropriate. + ++--------------------------------------------------------------------------------------------------------------------------------------+ +| This feature's ``config.json`` setting is ``"ExperimentalSettings.EnableMobileWatermark": false`` with options ``true`` and ``false``. | ++--------------------------------------------------------------------------------------------------------------------------------------+ + .. config:setting:: enable-theme-selection :displayname: Enable theme selection (Experimental) :systemconsole: Experimental > Features diff --git a/source/deployment-guide/mobile/mobile-security-features.rst b/source/deployment-guide/mobile/mobile-security-features.rst index 3845a23982b..b49273b76c2 100644 --- a/source/deployment-guide/mobile/mobile-security-features.rst +++ b/source/deployment-guide/mobile/mobile-security-features.rst @@ -53,6 +53,26 @@ Preventing file downloads protects sensitive information from being inadvertentl See the :ref:`secure file preview ` and :ref:`managing PDF link navigation ` configuration settings documentation for details on enabling these features. +Mobile watermarking +------------------- + +Mobile watermarking is an experimental Enterprise Advanced capability `__ from Mattermost v11.7 onward, that helps organizations attribute mobile screenshots and shared screen captures to a specific user, server, and point in time. When this setting is enabled by a system admin, authenticated Mattermost mobile sessions display a visible watermark overlay on top of the app interface that includes: + +- The user's username. +- The server domain. +- The current date in ``YYYY-MM-DD`` format. +- The current time in ``HH:mm`` format. + +The watermark is intended to support data loss prevention (DLP) workflows by making it easier to identify the source and timing of any image taken of the Mattermost mobile app. Mobile watermarking is disabled by default. + +See the :ref:`Enable Mobile Watermark ` configuration setting documentation for details on enabling this experimental feature. + +.. note:: + + - The mobile watermark is a visual overlay only. It does not prevent users from taking screenshots, recording the screen, exporting files, or sharing content through other means. For controls that block screen capture on the device itself, see :ref:`screenshot and screen recording prevention `. + - This feature applies only to the Mattermost mobile app. It does not add a watermark to the Mattermost web app or desktop apps. + - This is an experimental capability. Its behavior, defaults, and visual presentation may change in future releases based on customer feedback. + Microsoft Intune Mobile Application Management (MAM) ---------------------------------------------------- @@ -137,4 +157,4 @@ Security compliance - Device Protection Profiles (NIAP Evaluation) - Security Dependency & Code Analysis - - Code Complexity & Testing Standards \ No newline at end of file + - Code Complexity & Testing Standards diff --git a/source/security-guide/mobile-security.rst b/source/security-guide/mobile-security.rst index bf2c8cf2d9c..45f102fd9c5 100644 --- a/source/security-guide/mobile-security.rst +++ b/source/security-guide/mobile-security.rst @@ -87,6 +87,15 @@ Additionally, administrators can control link navigation within PDF files when s Learn more about :ref:`enabling secure file preview on mobile ` and :ref:`allow PDF link navigation on mobile ` in the Mattermost mobile app. +Mobile watermarking +------------------- + +Mobile watermarking is an experimental Enterprise Advanced capability available from Mattermost v11.7 onward that helps organizations identify the source and timing of mobile screenshots or shared screen captures. When enabled by a system admin, authenticated Mattermost mobile sessions display a visible watermark overlay that includes the user's username, the server domain, and the current date and time. This supports data loss prevention (DLP) workflows by attributing any image taken of the Mattermost mobile app to a specific user, server, and point in time. + +The mobile watermark is a visual overlay only. It does not prevent screenshots, screen recordings, file exports, or content sharing through other means, and it is not a substitute for screen capture prevention or other mobile security controls. Mobile watermarking is disabled by default. + +Learn more about Mattermost :ref:`mobile watermarking ` and how to :ref:`enable the experimental Mobile Watermark setting `. + Burn-on-read messages --------------------- @@ -94,4 +103,4 @@ Burn-on-read messages reduce the window of exposure for sensitive content by aut Administrators can enable burn-on-read messaging and set the burn-on-read duration to align with organizational policies. Learn more about :ref:`sending burn-on-read messages ` and :ref:`enabling burn-on-read messages `. -`Book a live demo `_ or `talk to a Mattermost expert `_ to explore tailored solutions for your organization's secure collaboration needs. Or try Mattermost yourself with a `1-hour preview `_ for instant access to a live sandbox environment. \ No newline at end of file +`Book a live demo `_ or `talk to a Mattermost expert `_ to explore tailored solutions for your organization's secure collaboration needs. Or try Mattermost yourself with a `1-hour preview `_ for instant access to a live sandbox environment.