Mampi Technologies Ltd

Lattice9 - a quantum-safe vault for your files.

Your vault stays on your device. No account. No tracking.

£14.99 including UK VAT (launch price, normally £24.99). Pay once. Version 1 updates included.

Buy Lattice9

Payment and VAT are handled by Gumroad. Buyers outside the UK pay their local tax rate, so the total may differ slightly.

Where it runs

  • Windows 10 and Windows 11, 64-bit.
  • Linux, as a .deb package, for Debian, Ubuntu and Linux Mint.
  • Android is planned.
  • Mac is not yet available.

How it protects you

  • Your password is stretched with Argon2id. That makes guessing slower. It uses 64 megabytes of memory, 3 passes and 4 lanes. It does not turn a weak password into a strong one.
  • The key that locks the files is itself locked two ways at once: ML-KEM-768 (NIST FIPS 203) and X25519. ML-KEM-768 is designed to resist future quantum computers. If one of the two methods is later found to be weak, the other still protects the key, as long as your password or recovery key stays secret.
  • The file bytes are sealed with XChaCha20-Poly1305. If a piece is changed, moved or swapped, Lattice9 detects it and refuses to treat that file as intact.
  • Someone who finds the vault folder can see that it is a vault, and how many segment files it has and how big those files are. They cannot see the file names, the file sizes or the file types. Those are inside the encrypted list. Stored blocks are the same size, so a short note does not look smaller than a photo.
  • A vault is a folder. It can sit on a USB stick, and the same folder opens on Windows and on Linux.
  • A recovery key is shown once, when you create the vault. It can open the vault if you forget the password. Write it down and keep it somewhere that is not the same place as the USB stick.
  • Re-encrypt vault makes new keys and encrypts every file again. The old recovery key then stops working on that vault. An older backup of the folder is not changed.
  • The window locks the vault after it has been idle (5 minutes, unless you change that), when you close it, and when the screen locks. On Windows, if the computer will not tell Lattice9 about the screen lock, it says so once. It still locks after idle time and when you close it.
  • If you choose a folder that is synced to the cloud, Lattice9 warns you: a copy of your vault will be stored on that company's servers.
  • Lattice9 itself never connects to the internet. The finished program has no network code. The Windows installer includes Microsoft WebView2, so installing it does not need the internet either.

What Lattice9 does not do

  • It cannot protect the files while the vault is open on a computer that has malware. Once the vault is open, the key is in memory so the files can be read. Encryption does not defend an unlocked computer.
  • If you lose the password and you also lose the recovery key, the vault cannot be opened. Nobody can recover them for you. That includes Mampi Technologies Ltd. There is no reset.
  • Lattice9 is a vault, not a backup. Keep a backup copy of your important files and of your vault somewhere else.
  • An older complete copy of the vault folder still opens with its old password. If you only change the password, that older copy can still read files you add later. Re-encrypt vault is what stops the old copy from reading what you add afterwards. The old copy itself still opens with the old password.
  • If someone replaces the whole vault folder with an older complete copy, Lattice9 cannot tell. Changing one piece is detected. Swapping in a whole older folder is not.
  • The Windows installer is not code-signed yet, so Windows may show "Windows protected your PC". Choose More info, then Run anyway.

Downloads and checksums

The installers are delivered after you buy, through Gumroad. These SHA-256 checksums are for the version 1.0.1 files. Capitals and small letters are the same checksum.

Windows installer

Lattice9_1.0.1_x64-setup.exe

394E320E88A5A4CBA97944F4073FE17CEF8E1BF4F8B88D573970D958BBF32556

On Windows, open Command Prompt in the folder where you saved the file and run:

certutil -hashfile Lattice9_1.0.1_x64-setup.exe SHA256

Linux installer

Lattice9_1.0.1_amd64.deb

1AC59CF28E18B7B9156520F950A19829405D442E54875B300FBE036EED67C120

On Linux, in the folder where you saved the file, run:

sha256sum Lattice9_1.0.1_amd64.deb

Licence

Lattice9 is source-available, not open source. You may read the source code to check how it works.

Read the end-user licence

Read the privacy policy