Does Signal work on Android without Google Play Services?

Yes. Signal distributes an official APK directly from signal.org that replaces Google FCM push with a persistent background service. The trade-off is slightly higher battery use. Signal also lists on Accrescent, a newer Android package installer built for reproducible, verified distribution. An unofficial community-maintained F-Droid repository exists but is not endorsed by Signal and may lag on security patches, so the direct APK from signal.org is the recommended non-Play-Store route.

What is the difference between Signal and Molly on Android?

Molly is a hardened fork that uses the identical Signal Protocol and interoperates fully with Signal accounts. On top of that, Molly adds an encrypted local database, automatic RAM wipe after idle timeout, and native UnifiedPush support so notifications route through ntfy or your own relay instead of Google FCM. The Molly-FOSS build on F-Droid strips all proprietary blobs. Security patches from upstream Signal arrive in Molly with a delay of days to a few weeks.

Does Session have end-to-end encryption and forward secrecy?

Session uses E2EE through its LibSession protocol, but it does not implement perfect forward secrecy (PFS) for one-to-one chats. PFS means even if a long-term key is later compromised, past messages remain safe. Without PFS, a key compromise could expose past conversation history. Group messages use a separate mechanism. Session's main advantage over Signal-derived apps is that account creation requires no phone number or email - only a locally generated key pair.

Which Android encrypted messenger works without an internet connection?

Briar is the only app on this list that operates without any internet connection. It can synchronize messages over Bluetooth or local Wi-Fi when two devices are in range, and over Tor when internet is available but censored. There are no central servers - messages are stored on device until the recipient comes online or within range. The trade-off is non-instant delivery and higher battery use under Tor. Briar targets journalists and activists where infrastructure access cannot be assumed.

Best Encrypted Messaging Apps for Android in 2026

End-to-end encryption has gone from a niche concern to a baseline expectation, and Android users now have more options than ever - ranging from mainstream apps with massive user bases to hardened tools built explicitly for high-threat environments. The challenge is not finding an encrypted messenger, but understanding what each one actually protects (and what it does not), which is where most comparisons fall short.

This article focuses on five apps that cover different points on the usability-versus-anonymity spectrum: Signal, Molly, Session, SimpleX Chat, and Briar. All are open source, all support Android, and all can be installed outside the Play Store if needed.

What “Encrypted Messaging” Actually Means in 2026

The term end-to-end encryption (E2EE) is often used as if it settles everything. It does not. E2EE protects message content in transit and on the server, meaning only the sender and recipient can read it. But several attack surfaces remain outside that guarantee:

Metadata: who you talk to, how often, and roughly when - often unencrypted
Phone number linkage: ties your identity to your account permanently
Push notification services: Google FCM can expose delivery metadata to Google even if the payload is encrypted
Backup handling: messages backed up unencrypted to Google Drive undo E2EE entirely
Client-side scanning: a compromise at the OS layer defeats any protocol

Understanding these distinctions will help you match the right app to your actual threat model. For a broader look at hardening Android at the OS level, see the Android privacy hardening checklist.

The Five Apps Compared

Signal

Signal is the reference implementation for modern E2EE messaging. The Signal Protocol - a combination of the X3DH key agreement and Double Ratchet algorithm - has been independently audited multiple times and is the protocol that WhatsApp, Google Messages (RCS), and others have borrowed or derived from. The app itself is audited regularly and the code is published at github.com/signalapp.

What it protects well: Message content, voice/video calls, disappearing messages, sealed sender (hides who is messaging whom from Signal’s servers).

Limitations: Requires a phone number. Signal is a centralized service - if Signal’s infrastructure goes down or is compelled by a court order, metadata could theoretically be disclosed (Signal has demonstrated a policy of retaining minimal data, but the architecture is still central). Backup encryption to Google Drive is opt-in and requires careful setup.

Android specifics: Available as a direct APK from signal.org and via the Play Store. Signal also lists on Accrescent, a newer Android package installer designed for secure, reproducible distribution. An unofficial community-maintained F-Droid repository exists but is not endorsed by Signal and may lag on security patches; the direct APK from signal.org is the recommended non-Play-Store option. The Play Store version uses Google FCM for push; the APK version uses a background service instead, which drains slightly more battery but removes the Google dependency.

Best for: Most people. The combination of strong cryptography, large network, disappearing messages, and ongoing audits makes it the practical default for personal and professional use.

Molly

Molly (github.com/mollyim/mollyim-android) is a hardened Signal fork maintained by an independent team. It targets users on GrapheneOS or LineageOS who want Signal’s protocol without its rough edges around Google integration or database security.

Key hardening additions over upstream Signal:

Encrypted local database with a separate passphrase - distinct from your screen lock PIN
Automatic RAM wipe after a configurable idle timeout, reducing forensic recovery risk
UnifiedPush support - lets you use ntfy or your own push relay instead of FCM
FOSS build (Molly-FOSS) - strips all proprietary blobs; available on F-Droid at molly.im

Because Molly uses the same Signal Protocol and is compatible with Signal accounts, you can switch to Molly without asking your contacts to change apps. Messages sent from Molly arrive normally in Signal and vice versa.

Limitations: Molly tracks Signal’s upstream but with a lag - security patches in Signal may take days or a few weeks to appear in Molly. The smaller maintainer team is a genuine consideration for risk-sensitive deployments.

Best for: GrapheneOS users, privacy-focused power users who want FCM-free push and encrypted-at-rest local storage.

Session

Session (getsession.org) takes a different philosophical position: no phone number, no email, no central server. Accounts are generated as a public/private key pair locally. Messages are routed through the Oxen Service Node Network, a decentralized network of nodes funded by the Oxen cryptocurrency ecosystem.

Session originally used the Signal Protocol but began migrating to its own protocol - now called LibSession (libsession-util) - starting in 2021, with the transition completing in stages through 2023. The LibSession protocol does not implement perfect forward secrecy (PFS) by default for one-to-one chats (group messages use a different mechanism). This is a meaningful trade-off: PFS means that if a long-term key is compromised, past messages remain safe. Without it, a key compromise could expose the conversation history.

The Session Protocol has received some independent review (Trail of Bits audited the app in 2021), but the cryptographic underpinning has not received the volume of scrutiny that the Signal Protocol has over a decade.

What it protects well: Account creation without any real-world identifier, onion-routed message delivery, no metadata retained on a central server because there is no central server.

Limitations: No PFS in 1:1 chats, smaller network, the Oxen node ecosystem has financial incentives that create different trust dynamics than a nonprofit like Signal Foundation.

Best for: Scenarios where phone number anonymity is the primary requirement and users understand the cryptographic trade-offs.

SimpleX Chat

SimpleX (simplex.chat) stands out architecturally: it has no user identifiers at all, not even a public key tied to your account. Each conversation uses a separate pair of queue addresses, so there is no persistent identity even at the cryptographic layer. This makes correlation attacks significantly harder compared to any identifier-based system.

SimpleX uses double-ratchet encryption (the same underlying mechanism as Signal Protocol) over each conversation pair. Messages are held in queues on SimpleX Relay servers - which you can self-host - and are deleted once delivered.

An independent audit by Trail of Bits in 2022 found the cryptographic implementation sound, with minor issues that were subsequently fixed.

Android specifics: Available as a direct APK from simplex.chat and on F-Droid. The app supports UnifiedPush natively.

Limitations: The no-identifier model means there is no simple “find a contact by username” - you share connection links or scan QR codes. This friction is the cost of the stronger anonymity model. Server infrastructure defaults to SimpleX-operated relays; self-hosting adds operational overhead.

Best for: Users with the highest anonymity requirements who are comfortable with slightly more manual contact establishment.

Briar

Briar (briarproject.org) occupies a niche no other app on this list covers: it works without an internet connection. Messages can be synchronized over Bluetooth, local Wi-Fi, or the Tor network. All transport is E2EE and there are no central servers at all - messages are stored on device until the contact comes online.

This makes Briar specifically useful for journalists or activists in environments where internet access is blocked or monitored at the infrastructure level. The Tor transport option adds IP anonymity on top of content encryption.

Limitations: The peer-to-peer model means messages are not delivered until both parties are online (or within Bluetooth/Wi-Fi range for local sync). This makes it unsuitable as a daily driver for most users. Battery consumption over Tor is higher than centralized apps.

Best for: High-risk scenarios, censorship-circumvention contexts, or use cases where internet unavailability is a realistic threat.

Side-by-Side Comparison

App	Phone number required	Protocol	Forward secrecy	Push (no FCM option)	F-Droid / direct APK
Signal	Yes	Signal Protocol	Yes	Yes (APK build)	APK only (see note)
Molly	Yes (Signal account)	Signal Protocol	Yes	Yes (UnifiedPush)	Yes (Molly-FOSS)
Session	No	LibSession	No (1:1)	Yes	Yes
SimpleX	No	Double-ratchet variant	Yes	Yes (UnifiedPush)	Yes
Briar	No	Bramble Protocol	Yes	N/A (P2P)	Yes

Installing Without the Play Store

All five apps support installation via direct APK or F-Droid, which matters for users on custom ROMs without Google Play Services, or those who prefer not to funnel app installs through Google’s infrastructure.

When sideloading, always:

Download the APK from the official domain only (signal.org, getsession.org, simplex.chat, briarproject.org, or molly.im).
Verify the SHA-256 hash or APK signature against the fingerprint published on the official site.
Enable “Install unknown apps” only for the specific file manager or browser you are using, then disable it again afterward.

For a full walkthrough of safe sideloading practices, see the sideloading Android security guide. If you are sourcing apps from F-Droid repositories rather than direct APKs, the F-Droid vs Play Store comparison covers the verification and trust model differences in detail.

Pairing a secure messenger with a strong password manager is also worth doing - credentials for linked email addresses or backup codes deserve the same protection as the messages themselves. The best Android password managers for 2026 covers options that work well alongside these apps.

Choosing the Right App for Your Threat Model

There is no universally “best” option. The right choice depends on what you are protecting against:

Casual private communication with friends and family: Signal. Large network, strong defaults, well-audited.
Custom ROM or de-Googled device: Molly-FOSS over Signal. Identical protocol, no FCM, encrypted local database.
Account creation without a phone number: Session or SimpleX. Session is easier to onboard; SimpleX offers stronger anonymity guarantees.
Censorship circumvention or no-internet scenarios: Briar. The only option that works over Bluetooth and Tor simultaneously.
Highest metadata anonymity: SimpleX. No persistent identifier, self-hostable relays, double-ratchet encryption.

One practical note: the security of any messaging app is bounded by the security of the device running it. An unpatched Android device, a compromised lock screen, or a malicious keyboard app can defeat E2EE at the endpoint. OS-level hardening matters as much as app choice.

FAQ

Does Signal work on Android without Google Play Services?: Yes. Signal distributes an official APK directly from signal.org that replaces Google FCM push with a persistent background service. The trade-off is slightly higher battery use. Signal also lists on Accrescent, a newer Android package installer built for reproducible, verified distribution. An unofficial community-maintained F-Droid repository exists but is not endorsed by Signal and may lag on security patches, so the direct APK from signal.org is the recommended non-Play-Store route.
What is the difference between Signal and Molly on Android?: Molly is a hardened fork that uses the identical Signal Protocol and interoperates fully with Signal accounts. On top of that, Molly adds an encrypted local database, automatic RAM wipe after idle timeout, and native UnifiedPush support so notifications route through ntfy or your own relay instead of Google FCM. The Molly-FOSS build on F-Droid strips all proprietary blobs. Security patches from upstream Signal arrive in Molly with a delay of days to a few weeks.
Does Session have end-to-end encryption and forward secrecy?: Session uses E2EE through its LibSession protocol, but it does not implement perfect forward secrecy (PFS) for one-to-one chats. PFS means even if a long-term key is later compromised, past messages remain safe. Without PFS, a key compromise could expose past conversation history. Group messages use a separate mechanism. Session's main advantage over Signal-derived apps is that account creation requires no phone number or email - only a locally generated key pair.
Which Android encrypted messenger works without an internet connection?: Briar is the only app on this list that operates without any internet connection. It can synchronize messages over Bluetooth or local Wi-Fi when two devices are in range, and over Tor when internet is available but censored. There are no central servers - messages are stored on device until the recipient comes online or within range. The trade-off is non-instant delivery and higher battery use under Tor. Briar targets journalists and activists where infrastructure access cannot be assumed.