Secure messaging app, by design.
Speak freely.
people in the world live under internet censorship
Authoritarian governments silence journalists, ruthlessly restrict the freedom of opposition human rights defenders, and openly monitor every one of their citizens. Mold exists so that all people can speak with each other freely, regardless of where they live. Protection of private correspondence is built into the very architecture of the application.
However, remember that Mold is not a tool for criminal activity. We have no tolerance for child exploitation, terrorism, violence, or any other illegal actions under U.S. and international law. Read our complete protocol for working with law enforcement.
"Everyone has the right to freedom of opinion and expression; this right includes freedom to hold opinions without interference and to seek, receive and impart information and ideas through any media and regardless of frontiers."
Protect your sources
Freedom of speech is a human right, not a privilege. The full realization of this freedom is the ability to speak the truth, together with the professional protection of information sources.
Communicate without risk
In most authoritarian countries, a seized mobile device becomes a source of evidence against its owner who is fighting for the lawful freedom of speech and rights. The encrypted messaging app Mold solves this problem completely and entirely.
Speak without blocks
Mold is an end to end encryption messenger whose network activity is indistinguishable to the global monitoring and blocking systems so beloved by authoritarian regimes.
This happens every day.
Since 2022, OVD-Info has documented over 20,000 detentions for anti-war statements. The contents of a phone (messages, reposts, even likes) are used as evidence. The very fact that you have a hidden messenger installed on your phone can already raise suspicion, which is exactly why Mold does not look like a standard application.
Security forces systematically inspected the phones of detained protesters, searching for subscriptions to opposition channels such as NEXTA. One subscription was enough for a criminal case.
During the protests after the death of Mahsa Amini (2022 to 2023), authorities checked phones at street checkpoints. VPN applications, photographs from the protests, or simply the presence of an encrypted messaging app on the device, by itself led to arrest on the spot.
After the 2021 coup, more than 26,000 people were arrested. AAPP documented that phone contents were regularly cited in courts as evidence of an owner's guilt. During raids on citizens' homes, soldiers thoroughly inspected phones for the presence of applications not sanctioned by the regime.
More than 60,000 political prisoners, an officially documented human rights crisis. Mobile device forensics is standard practice. Messenger contents have been used as evidence in collective trials.
NSO Group's Pegasus spyware was deployed in 45+ countries and targeted more than 50,000 phone numbers. Among the victims: journalists, politicians, human rights defenders. Article 19 of the Universal Declaration of Human Rights guarantees freedom of speech. Pegasus was used against those who exercised this right.
Mold provides freedom of speech.
Freedom of speech is not a privilege. It is a right with which every person is born. However, in dozens of countries this right exists only on paper. Repressive pressure (a series of laws, decrees, court rulings) silences the voices of millions out of fear of receiving a five or even fifteen year criminal sentence for a social media repost. The balance between freedom and control is very fragile, and the one who holds a greedy hunger for power over people is the first to break this balance. Mold does everything to preserve the lawful rights of all who need them.
End-to-end encryption
A secure and protected messenger begins with mathematics. E2E technology provides end-to-end encryption within every individual chat. Each conversation has its own encryption keys, and they are stored only on the participants' devices and nowhere else. When a new chat is opened, new encryption keys appear.
Reverse proxy server
If the address of the Mold server is somehow identified, then any analysis by state systems (DPI) will discover only a resource that is not banned in the authoritarian country. For example, a local administration website. Only the Mold encrypted messenger app knows how to correctly connect to its real resource in order to receive its service information.
Invisibility to deep packet inspection
Our system for exchanging encrypted traffic between the Mold app and its server is designed so that this stream cannot be distinguished from standard web browsing. From the point of view of a censorship system, Mold traffic is not identified as messenger traffic.
Registration without phone
We use the term "protected digital identity". During registration, the user picks their nickname (unique across the entire system) and creates a password. The system assigns the user an ICQ-like ID, linked to the nickname. Filling in the rest of the profile fields is optional. That is all. Mold is a messenger without a phone number in the literal sense.
Mold protects your device.
A mobile device can be seized, and Mold takes this reality into account. Protection of private correspondence here works at the level of the device, not only at the level of the channel.
Invisible presence
Mold is able to disguise itself as any standard application. During installation, the service packages are assigned random names. The word "Mold" will not be found anywhere on the device's disk. This is the most secure messaging app, one that no one will know about until you tell them yourself.
Double bottom
Two login passwords work in the messenger. The regular one you use normally, and the so-called "duress password". The essence of this feature: after entering the duress password, Mold opens a separate interface with meaningless conversations. In authoritarian countries where unlocking your phone is not a question of choice, this secure messaging app gives you a second layer of protection.
Remote protection by people you trust
Your mother, spouse, or best friend can remotely send a command to your device that will securely erase all messenger data from the mobile device. This unique "Guardian" feature will protect you when you cannot protect yourself.
The phone protects itself
For high-risk zones where journalists and human rights defenders often find themselves, an urgent need can arise to immediately secure conversations. Mold responds sensitively to specific triggers that signal that a mobile device has fallen into the wrong hands.
Was there ever a Mold?
If the device becomes inactive for a certain time (the user configures the parameters of this option themselves), Mold automatically protects the data by preventing access to it during prolonged inactivity. The only end to end encryption messenger in which a dead man's switch is built in by default.
Account recovery
For reinstalling the application, entering your ID, nickname, and password is not enough. For the full restoration of your digital identity, you will need a sequence (12-seed) of 12 words, which the application shows one time during the first registration of the account. The 12-seed sequence is not stored in the app or on the messenger's servers.
Mold watches those who watch you.
Applications connected to authoritarian governments silently send telemetry to their servers, including the list of installed apps on the mobile device, location, contacts, screenshots, camera frames, and keystrokes. The built-in firewall of this secure messaging app controls unlawful covert telemetry.
Monitoring and notifications
The observation mode allows you to identify not only the applications that send data, but also where exactly and how often this happens. Every connection and every transferred packet of spy applications is logged. A unique feature of the protected messenger is to show the user everything that is being collected about them. The default mode.
Blocking known spy endpoints
In Shield mode, in addition to observation, Mold blocks spy applications, while they continue to operate and do not even suspect that they are being blocked.
Whitelist only
Maximum protection. Only explicitly allowed connections pass through. Everything else is blocked. The built-in firewall is a Mold feature designed specifically for high-risk situations.
What is your Mold ID?
Registration in the Mold network does not require a phone number or email. The Mold ID, a unique identification number, is what it was in the ICQ era, but with cryptographic identity and anonymity. Register among the first, and your short Mold ID will become your legacy in an app created for the protection of human rights and freedom of speech.
Early registration, a short ID
The first 100 users receive the "Founder" badge. The first 1,000, "Pioneer". A Mold ID cannot be bought, forged, or transferred. A personal number is a personal reputation.
Searching for contacts
To find a contact, several secure paths can be used in Mold. For example, sharing a QR code at an in-person meeting. Finding a person by their Mold ID or nickname. In addition, a one-time invitation link works, which can be sent over the network, or a one-time 6-digit PIN code that can be dictated by phone. Mold does not receive the contact list of the mobile device, which means, among other things, that it does not inform your contacts that you have appeared on the Mold network.
Zero data disclosed
Your Mold ID does not reveal personal data. We respond only to lawful requests under the laws of the United States and the State of California. This is how the most secure messaging app works in civilized democratic countries: with real architectural privacy.
Trust your own.
AGPL-3.0
Every line of Mold's source code is publicly available on GitHub. The encrypted messenger Mold openly and without hesitation publishes both server and client code. Anyone who wants to verify our honesty can audit our work.
Child safety
The project is registered with the National Center for Missing & Exploited Children USA. CSAM reports are handled through CyberTipline.
Public reports
Here you can review our semi-annual transparency reports, which contain details of government requests.
Intolerance for crime
Any use of Mold for criminal activity is strictly prohibited. When such information becomes known to us, it is immediately transferred to U.S. law enforcement.
We do not read your messages.
The end-to-end encryption that Mold uses means that the server stores only encrypted blocks of messages. We do not have decryption keys. All keys are stored exclusively on user devices.
Mold ID and nickname. The date and time of user registration in the system. The date and time of last connection. Profile data in encrypted form, if the user has filled in their profile themselves. That is the entire list. This is how all anonymous messengers claiming privacy should work.
Nothing besides what is listed above. Nothing that could endanger the user and their conversation partners. Mold collects less data than any web page on the internet.
We fully cooperate with lawful requests from the U.S. government and immediately provide everything we possess upon first request.
When a report is filed, the app sends to Mold's administrators a message containing at least 20 messages of surrounding context in decrypted form. We process such reports as quickly as possible. If the messages contain suspicion of child exploitation, the full data package is immediately transferred to NCMEC. Suspicion of other crimes goes to the corresponding U.S. authorities. Protection of private correspondence does not mean shielding criminals.
Use it free of charge.
Download the secure and protected messenger Mold and share it with those who suffer from lawlessness.
Anonymous messengers truly become needed where the price of freedom is well-being, health, and life.
Open source · AGPL-3.0 · No tracking · No analytics · Free to use