Back in 2018, Signal allowed the user to set a passphrase to secure the local message database. But this option was removed with the introduction of full-disk encryption on Android. Molly brings it back again with additional security features.
Molly is updated every two weeks to include the latest Signal changes and bug fixes.
You can download the app from GitHub's Releases page or install it from F-Droid.
Molly has unique features compared to Signal:
- Protects database with passphrase encryption
- Locks down the app automatically after you go a certain time without unlocking your device
- Securely shreds sensitive data from RAM
- Logging debug messages can be disabled
Besides that, you will find all the features of Signal plus some minor tweaks and improvements. The only exception is the SMS integration, that was removed for compatibility reasons.
Compatibility with Signal
Molly and Signal can be installed on the same device. If you need a 2nd number to chat, you can use Molly along with Signal.
However, you cannot use the same phone number on both apps at the same time. Only the last app to register will remain active, and the other will go offline. To solve this, remember that you are not limited to use only your main phone number, but also any number on you can receive SMS or phone calls at registration.
Backups are fully compatible. Signal backups can be restored in Molly and the other way around. To do that, simply rename the backup file and copy it into the expected path, so the app can find the backup to restore during installation.
The path within internal storage where backups are written by Signal:
Molly supports reproducible builds, so that anyone can run the build process again and reproduce the same APK as the original release.
See the Changelog to view recent changes.
License and legal notices in the original README.
This project is NOT sponsored by Signal Messenger LLC or Signal Foundation.
The software is produced independently of Signal and carries no guarantee about quality, security or anything else. Use at your own risk.