mollyim/mollyim-android
github.com
A fork of Signal for Android with passphrase lock. - mollyim/mollyim-android

Molly is a hardened version of the official Signal for Android app. It claims the following features,

  • Protects database with passphrase encryption
  • Locks down the app automatically after you go a certain time without unlocking your device
  • Securely shreds sensitive data from RAM
  • Allows you to delete contacts and stop sharing your profile
  • Clears call notifications together with expiring messages
  • Disables debug logs
  • No SMS integration

There are two flavors of it,

  • Molly - Similar to the official Signal app, plus the additional features
  • Molly-FOSS - Doesn’t rely on any Google components for location, push notifications & face blurring, plus all the additional features

Download it from here.

I’ve been using it for a couple of days & it is pretty decent so far.

Anyone here already tried or are using it? How’s the experience so far?

  • riccardo
    8·
    4 years ago

    What’s the difference between Molly and LibreSignal, for Signal as a company? Shouldn’t Moxie ask them to stop using their infrastructure like they did with LibreSignal? Maybe Signal is not aware of its existence?

    Anyway, looks promising. A really nice fork

    • cydactyl
      4·
      4 years ago

      As someone who has been using Signal, and previously TextSecure for almost 10 years, Moxie’s attitude is abhorrent and counter-intuitive. I wasn’t aware of how bad Signal’s privacy model was as it was worlds better than any other option back in 2015(in terms of security, not functionality) and I have not heard cries for an alternative until recently. I just downloaded Session and will promote it moving forward. Does anyone know an alternative to Signal for encrypted local storage of traditional SMS messages?

  • dengismceo
    3·
    4 years ago

    i’m confused by this statement in the readme:

    Back in 2018…But this option was removed with the introduction of full-disk encryption on Android.

    android doesn’t use FDE - it uses file-based encryption (FBE). it used to use FDE but hasn’t since android 9. my point being that FDE existed first and has been phased out so it already existed in 2018 and was introduced waaaay earlier. so is this a typo in the readme or am i totally missing something?

  • mrmanman
    1·
    4 years ago

    I prefer Session because it routes traffic through TOR.

    Edit: I stand corrected.

    • ghost_laptop
      4·
      4 years ago

      It doesn’t route traffic through Tor, but through their own similar network called LokiNet.

      • Chief36
        1·
        3 years ago

        Correction: Session hasn’t received Lokinet integration yet. It’s a general misconception.