Molly is a hardened fork of Signal for Android that adds security-focused features while maintaining compatibility with Signal's messaging network.
The project addresses the removal of local database encryption from Signal by reintroducing passphrase protection for the message database alongside additional security hardening. It achieves this by forking Signal's Android codebase and layering on security enhancements including secure RAM wiping of sensitive data, automatic app locking under user-defined conditions, and optional debug logging. The tool connects to Signal's servers, allowing seamless communication with existing Signal users without requiring them to switch apps.
Molly suits users who prioritize security and privacy beyond Signal's defaults, particularly those concerned about physical device access or who operate in high-risk environments. The project offers two installation flavors: a standard version that includes proprietary components like Signal, and Molly-FOSS, a fully free and open-source variant without proprietary blobs. Beyond encryption at rest, distinctive capabilities include multi-device support for tablets, UnifiedPush integration for push notifications without Google Play Services, SOCKS proxy and Tor support for traffic tunneling, and granular backup scheduling. The README does not compare the tool to other Signal forks or alternative messaging applications.
The project maintains a two-week update cycle to incorporate Signal's latest features and security fixes, with security patches applied immediately upon availability. Development activity shows consistent engagement with the codebase through regular updates and maintenance of both app variants. The tool is distributed through GitHub Releases and the Molly F-Droid repository, with APK signature verification supported.
