Molly

Molly is a hardened version of Signal for Android, the fast, simple, yet secure messaging app from the Signal Foundation.

Introduction

Back in 2018, Signal allowed users to set a passphrase to secure the local message database. This option was removed with the introduction of file-based encryption on Android. Molly brings it back, along with additional security features.

Molly connects to Signal's servers, so you can chat seamlessly with your Signal contacts. Before signing up, please review the Signal Terms & Privacy Policy: https://signal.org/legal/

We update Molly every two weeks to include the latest Signal features and fixes. Security patches are applied as soon as they become available.

Features

Molly offers unique features not found in Signal:

- Data encryption at rest: Protect your app database with passphrase encryption. - Secure RAM wiper: Securely shred sensitive data from device memory. - Automatic lock: Lock the app automatically under user-defined conditions. - Multi-device support: Link multiple devices to a single Signal account, including Android tablets. - UnifiedPush: Receive push notifications without Google via the UnifiedPush protocol. - Block unknown contacts: Block messages and calls from unknown senders for security and anti-spam. - Disappearing call history: Clear call logs along with expiring messages. - Custom backup scheduling: Set daily or weekly intervals and the number of backups to retain. - SOCKS proxy and Tor support: Tunnel app network traffic via proxy and Orbot. - Optional debug logs: Disable Android logging entirely.

You'll also find all of Signal's features, plus some minor tweaks and improvements.

Free and Open-Source

Molly is open-source, just like Signal. However, Signal relies on proprietary Google software for some features.

From version 7.68.5-1, Molly and Molly-FOSS have been unified into a single fully FOSS app. All proprietary dependencies (including the Play Services SDK) have been removed, while FCM push notifications continue to work via a fully open-source implementation. The dual build variants are now consolidated into one FOSS build.

UnifiedPush

UnifiedPush is an open standard for delivering push notifications—a privacy-friendly alternative to Google's proprietary FCM service. It lets users choose their own notification distributor.

Important: To use UnifiedPush notifications, you need access to a MollySocket server to link your Signal account. We strongly recommend running MollySocket on a server you control, but you can use a public instance.

Compatibility with Signal

Molly and Signal can be installed on the same device. If you need a second number for messaging, register Molly with a different number while keeping Signal active. Any phone number capable of receiving SMS or calls works for registration.

To use the same phone number for both, register Molly as a linked device. Registering the same number independently on both apps will deactivate the older one, leaving only the most recent active.

For Signal users switching to Molly without changing their phone number, see the Migrating From Signal guide on the wiki: https://github.com/mollyim/mollyim-android/wiki/Migrating-From-Signal

Backups

Backups are fully compatible. You can restore Signal backups in Molly (and vice versa) by selecting the backup folder and file. To import from Signal, use a matching or newer version of Molly.

Legal Notice

This project is not affiliated with Signal Messenger or the Signal Foundation.

The software is developed independently and provided as-is, without warranties of any kind. Use at your own risk.

License

GNU Affero General Public License v3.0