Molly is a hardened version of the official Signal for Android app. It claims the following features,

  • Protects database with passphrase encryption
  • Locks down the app automatically after you go a certain time without unlocking your device
  • Securely shreds sensitive data from RAM
  • Allows you to delete contacts and stop sharing your profile
  • Clears call notifications together with expiring messages
  • Disables debug logs
  • No SMS integration

There are two flavors of it,

  • Molly - Similar to the official Signal app, plus the additional features
  • Molly-FOSS - Doesn’t rely on any Google components for location, push notifications & face blurring, plus all the additional features

Download it from here.

I’ve been using it for a couple of days & it is pretty decent so far.

Anyone here already tried or are using it? How’s the experience so far?

  • riccardo
    link
    8
    edit-2
    3 years ago

    What’s the difference between Molly and LibreSignal, for Signal as a company? Shouldn’t Moxie ask them to stop using their infrastructure like they did with LibreSignal? Maybe Signal is not aware of its existence?

    Anyway, looks promising. A really nice fork

    • @je_vv
      link
      5
      edit-2
      2 years ago

      deleted by creator

    • @cydactyl
      link
      43 years ago

      As someone who has been using Signal, and previously TextSecure for almost 10 years, Moxie’s attitude is abhorrent and counter-intuitive. I wasn’t aware of how bad Signal’s privacy model was as it was worlds better than any other option back in 2015(in terms of security, not functionality) and I have not heard cries for an alternative until recently. I just downloaded Session and will promote it moving forward. Does anyone know an alternative to Signal for encrypted local storage of traditional SMS messages?

    • Rugged RaccoonOP
      link
      43 years ago

      I had the same query as well. I don’t know if it has any direct relation to LibreSignal, since it was abandoned sometime back. But, both aims to remove dependency on Google components.

      https://github.com/mollyim/mollyim-android#disclaimer

      This project is NOT sponsored by Signal Messenger LLC or Signal Foundation.

      • @cydactyl
        link
        0
        edit-2
        3 years ago

        deleted by creator

  • @dengismceo
    link
    33 years ago

    i’m confused by this statement in the readme:

    Back in 2018…But this option was removed with the introduction of full-disk encryption on Android.

    android doesn’t use FDE - it uses file-based encryption (FBE). it used to use FDE but hasn’t since android 9. my point being that FDE existed first and has been phased out so it already existed in 2018 and was introduced waaaay earlier. so is this a typo in the readme or am i totally missing something?

    • Rugged RaccoonOP
      link
      13 years ago

      Yeah, that’s a bit bugging. Checking Signal commits could give a clear idea about this.

  • @mrmanman
    link
    1
    edit-2
    3 years ago

    I prefer Session because it routes traffic through TOR.

    Edit: I stand corrected.

    • ghost_laptop
      link
      43 years ago

      It doesn’t route traffic through Tor, but through their own similar network called LokiNet.

      • Chief36
        link
        12 years ago

        Correction: Session hasn’t received Lokinet integration yet. It’s a general misconception.