Hardened fork of Signal for Android that adds an encrypted local database, automatic RAM wiping on lock, and Tor/SOCKS proxy support via Orbot. Ships in two variants: one with FCM push and one fully FOSS without Google.
Molly is the right choice if you already use Signal and want stronger local security without abandoning your contacts. The encrypted database and RAM wiper meaningfully raise the bar against device-seizure attacks that Signal’s own app leaves unaddressed. The catch is dependency: Molly tracks Signal’s upstream on a two-week lag, so you are always slightly behind, and server compatibility means Signal’s own infrastructure still handles your messages. Android only, no iOS path. For most people Signal is fine; for activists or journalists who worry about physical device compromise, Molly is the better build.
Listed in
Molly alternatives
Free to use, even commercially. Changes must be published under the same license, and running a modified version as a network service counts as distributing it.
Permits
- Commercial use
- Modification
- Distribution
- Patent use
- Private use
Requires
- Disclose source
- Network use is distribution
- Same license
- State changes
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: The network clause is the point. Anyone who runs a modified version as a hosted service has to publish those changes, so the code handling your data stays inspectable. This is why privacy-first projects reach for AGPL.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.