PrivacyTools.io
Molly logo
Official website molly.im
Screenshot of the Molly website

Hardened fork of Signal for Android that adds an encrypted local database, automatic RAM wiping on lock, and Tor/SOCKS proxy support via Orbot. Ships in two variants: one with FCM push and one fully FOSS without Google.

Our take

Molly is the right choice if you already use Signal and want stronger local security without abandoning your contacts. The encrypted database and RAM wiper meaningfully raise the bar against device-seizure attacks that Signal’s own app leaves unaddressed. The catch is dependency: Molly tracks Signal’s upstream on a two-week lag, so you are always slightly behind, and server compatibility means Signal’s own infrastructure still handles your messages. Android only, no iOS path. For most people Signal is fine; for activists or journalists who worry about physical device compromise, Molly is the better build.

GitHub at a glance
mollyim/mollyim-android
Stars
3,471
+ 3 this week
Last commit
21d ago
healthy
License
AGPL-3.0
Latest release
v8.7.3-2
2mo ago
Stars, last 10d

Listed in

Molly alternatives

Molly license, in plain English
AGPL-3.0
Strong copyleft · network

Free to use, even commercially. Changes must be published under the same license, and running a modified version as a network service counts as distributing it.

Permits

  • Commercial use
  • Modification
  • Distribution
  • Patent use
  • Private use

Requires

  • Disclose source
  • Network use is distribution
  • Same license
  • State changes
  • License and copyright notice

Does not provide

  • Liability cover
  • Warranty

Why it matters: The network clause is the point. Anyone who runs a modified version as a hosted service has to publish those changes, so the code handling your data stays inspectable. This is why privacy-first projects reach for AGPL.

Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.