One app for the data you keep, hide, or end.
LMN8 is a privacy company first. We build one app around a single idea: your data should answer to you and no one else. Three features carry that out — Zero ends data for good, Encrypt keeps it unreadable to everyone but you, and SOS shares where you are only with the people you trust.
No copies on our servers. No keys we can read. Every line of code is filtered through one question: does it leave you more in control of your data, or less?
Delete, properly.
Most “delete” just removes a pointer and leaves your bytes on the disk for any recovery tool to find. Zero doesn’t hide your data — it ends it. It encrypts the file, destroys the only key, then overwrites, releases, and verifies what’s left.
Eight steps. One of them is the point of no return.
The moment the encryption key is destroyed, your data is mathematically irrecoverable — by cryptography, not by a promise that the overwrite finished. Everything after that is defense in depth.
- 01Hide
The file vanishes from view instantly.
- 02Encrypt
Every byte sealed with a random AES-256-GCM key.
- 03Point of no returnDestroy key
The only key is shredded in locked memory.
- 04Obfuscate
Name and extension replaced with random hex.
- 05Overwrite
1, 3, or 7 passes of random and zeros, plus slack space.
- 06TRIM
On SSDs, blocks are physically released to the drive.
- 07Delete
Removed from the filesystem, with retry and backoff.
- 08Verify
Confirmed gone. Erasure record saved if you opted in.
Meets the bar regulators set, then steps over it.
Multi-pass overwrite standards assume the bytes are still there to scrub. By encrypting first and shredding the key, Zero makes the data unrecoverable before a single overwrite pass even begins. On modern SSDs — where wear-levelling means a blind multi-pass never touches the original cells — we follow NIST 800-88 guidance and pair crypto-erase with TRIM instead.
- + Cryptographic erasure first.AES-256-GCM with a random key that lives only in locked memory, then is shredded.
- + SSD-smart, per file.Detects SSD vs HDD on each file — crypto-erase + TRIM for flash, multi-pass overwrite for spinning disks.
- + Verified, not assumed.Every job ends with a check that the file is actually gone, with an optional erasure record you can keep.
Six quiet ways to let go.
Pick files or whole folders and end them on the spot — crypto-erase, then a 1, 3, or 7-pass overwrite of what remains.
Schedule recurring cleanups daily, on weekdays, or every N days. Filter by file type, age, or name pattern.
HDDs, SSDs, and USB sticks. SSDs get crypto-erase + TRIM; spinning disks get the full multi-pass overwrite.
Trigger a wipe on any linked device the moment it touches the internet. Lose a laptop, end its data from your phone.
One action reaches every linked device at once — for the moments you mean it most.
Opt in to an erasure record for every job: file, size, method, passes, verification, and timestamps.
Unreadable to everyone, except you.
Encrypt turns a folder into a secure vault, right where it already lives. No cloud upload, no copy made. Seven cipher suites to choose from, a key derived on your device that we never see, and even the file names sealed away.
One vault. Three passwords.
Set up to three passwords for the same vault. Which one you type decides what happens — so a forced unlock never has to reveal what actually matters.
Your real password. Opens the vault and shows your files, exactly as you left them.
Opens a believable decoy folder you set up in advance. Plausible deniability when someone's watching.
Looks like a normal unlock, but silently runs a Zero wipe of the vault. The wrong hands become a kill switch.
Your files. Your keys.
Encrypt folders where they already live. Nothing is uploaded and no plaintext copy is left behind.
AES-256-GCM, ChaCha20-Poly1305, XChaCha20, AES-GCM-SIV, a combined AEAD mode, and a compressed AES variant.
Stack AES, ChaCha20, and XChaCha20 in one pass when you want belt, braces, and a spare.
Derived on your device with Argon2id (64 MB, memory-hard). Nothing to escrow, sync, or hand over.
File names, extensions, and structure are scrambled and mapped under encryption. An adversary sees opaque blobs.
Quantum-resistant options are being added to the suite, so today's vaults stay sealed against tomorrow's computers.
Live location, only to people you trust.
Share where you are with exactly who you choose, for exactly as long as you want. End-to-end encrypted and self-expiring — just you and the people you tell, with nothing kept in between.
Peer to peer. Never to them.
Your location is sealed on your device and opened only on a trusted contact's. Nobody sits in the middle.
Set a timer, a destination, or a duration. When the condition is met, the share ends — no exceptions.
We don't store where you've been. There's no history to breach, subpoena, or leak.
One gesture quietly broadcasts your live location to every trusted contact, without alerting anyone nearby.
Build groups — family, close friends, a field team — and share with everyone in one move.
Name the people who should always be able to find you when it counts, and no one else.
The features don’t just sit side by side. They back each other up.
The duress password doesn't just lock you out — it ends the vault with the same crypto-erase pipeline.
Wipe, encrypt, and manage from laptop to phone, with a registry encrypted by keys derived locally.
Whatever the feature, the same rule holds: we hold nothing we could be forced to hand over.
Letting go feels better when it’s permanent.
One app, on the device you trust most. Zero and Encrypt are available now; SOS is on the way.