Molly is an independent fork of the Signal messaging protocol specifically tailored for Android devices. It was developed primarily to provide functionality that some users find lacking or restricted in the official client, such as support for 'UnifiedPush.' This allows users to receive push notifications on de-Googled mobile operating systems (like LineageOS) without relying on Google Play Services. Additionally, it has historically offered unique configurations regarding multi-device account syncing.
However, recent reports indicate a significant maintenance gap in the project. The latest release of Molly was recorded as Version v8.19.2-4, dated July 31. Because the software has not received updates since then, it remains susceptible to known exploits. For instance, specific attacks disclosed in October were addressed in version 8.27 of the mainline Signal app but remain present in older versions of Molly. Security researchers and community members recommend transitioning back to the official Signal app until the Molly developers resume regular maintenance cycles.
Users who chose Molly for its specific feature set may now face trade-offs between privacy features and active security patching. While many originally used Molly to avoid Google's ecosystem entirely, the lack of ongoing updates creates a risk profile where specialized features come at the cost of protection against new vulnerabilities. Furthermore, some functionalities previously exclusive to Molly—such as linking an Android phone with a secondary tablet—have recently been integrated into the official Signal infrastructure, potentially reducing the practical need for using unmaintained forks.