mollyim/mollyim-android
Mollyim Android
Molly is a privacy-focused Android messenger and a client for the Matrix open standard. It functions as a decentralized, end-to-end encrypted communication tool that allows users to interact across federated networks without a central authority.
The application implements several security-centric features, including binary integrity verification to ensure the authenticity of the installed build and RAM-overwrite memory sanitization to prevent sensitive data leakage. It provides local database encryption secured by user-defined passphrases and supports routing network traffic through proxies or anonymity networks to mask the device IP address.
Additional capabilities include the automatic expiration of messages and call logs, scheduled encrypted backups, and the delivery of push notifications via open standards and third-party distributors. The client also supports multi-device synchronization, automated application locking, and filtering for unknown contacts.
Features
- End-to-End Encrypted Messengers - Provides a communication tool using strong end-to-end encryption to ensure only sender and receiver can read messages.
- Local Database Security - Protects the local message store and user preferences using passphrase-based database encryption.
- Encrypted Messengers - Provides a messaging application for Android that prioritizes end-to-end encryption and local data privacy.
- Matrix Protocol Clients - Implements a mobile client that communicates with Matrix homeservers using the standardized Matrix JSON API.
- Passphrase-Based Database Access - Secures the local message store and preferences using a key derived from a user passphrase.
- Secure Communication Clients - Integrates proxy tunneling and build integrity verification to protect user identity and application authenticity.
- Binary Integrity Verification - Verifies the authenticity of the installed binary by comparing it against official distributions to ensure code integrity.
- Volatile Memory Overwriting - Overwrites sensitive credentials and keys in RAM immediately after use to prevent forensic recovery.
- Federated Chat Interfaces - Functions as a client for a federated network, allowing communication across servers without central authority.
- Account Data Backups - Creates recurring encrypted backups of account information with set retention limits.
- Message Expiration - Automatically removes messages and related call logs after a defined time period.
- Network Traffic Proxying - Routes network traffic through external proxies or anonymity networks to mask the device IP address.
- Privacy-Preserving Notifications - Implements push notifications via open standards and third-party distributors to avoid dependence on proprietary vendor services.
- Call Log Purging - Clears call logs automatically when associated messages expire to protect user privacy.
- Traffic Tunneling - Routes network traffic through secure tunnels and relays to mask the device IP address.
- Automated Data Purging - Automatically deletes messages and call logs based on expiry timestamps to maintain data privacy.
- Encrypted Backups - Provides methods for creating and restoring encrypted backups of account state and chat history.
- Memory Sanitization - Erase sensitive information from device RAM to prevent the recovery of private data.
- Multi-Device Synchronization - Implements the synchronization of account identity and session state across multiple user devices.
- App Privacy Locks - Locks the application interface behind user-defined conditions to protect private conversations.
- Instant Messaging - Security-enhanced fork of a popular encrypted messaging client.
- Social Media - Hardened fork of Signal focusing on privacy and security.
