Meridian OS
An encrypted workstation for developers and security researchers. Every file is sealed with AES-256-GCM before it touches the disk, and your Linux and Windows tools run side by side in their own sandboxes.
Free for 30 days, then a one-time key. Version 2.0 for 64-bit PCs, installed from a USB stick.
Built for machines that hold things worth protecting
Encrypted before it's written
Your passphrase never leaves memory. The key derived from it can't be exported, and nothing is written in plain text, not even filenames.
PBKDF2-SHA256, 600,000 rounds
Linux and Windows, one desktop
Linux programs run on the native ABI. Windows programs go through the NT layer with their own registry and prefix. Each asks for the capabilities it needs before it gets them.
nt.layer, Win32 and Direct3D to Vulkan
Nothing phones home
Your key is checked against a signature on your own machine. System files are hashed on every change, and verify tells you if anything moved.
SHA-256 integrity store
| Meridian 2.0 | Windows 11 | Typical Linux distro | |
|---|---|---|---|
| Encryption at rest | Always on, from first boot | BitLocker on Pro, often off by default on Home | Opt-in at install time |
| Runs Windows software | Yes, through nt.layer | Yes | Through Wine, set up by hand |
| Runs Linux software | Yes, natively | Through WSL | Yes |
| Per-app permissions | Asked at install, for every program | Store apps only | Flatpak and Snap apps only |
| Licence check | Offline signature | Online activation | None needed |
| Telemetry | None | On by default | Varies by distribution |
Install Meridian OS on your computer
Meridian is a full operating system. Download the installer image, write it to a USB stick, and start your computer from it.
Download the ISO
Use the button above. To check the file arrived intact, compare its SHA-256 with the checksum in the release notes.
Write it to a USB stick
On Windows, use Rufus or balenaEtcher. On macOS or Linux, use balenaEtcher or
dd. Everything on the stick is erased.Start the computer from the stick
Restart and open the boot menu, usually with F12, F11, F9 or Esc, then choose the USB stick.
Install and set your passphrase
Follow the installer. Pick a long passphrase: it encrypts the disk and can't be reset.
Activate when you're ready
You have 30 days. Open Meridian Center, choose Activation and paste your key.
Needs a 64-bit (x86-64) PC with 2 GB of RAM or more, 20 GB of free disk space, and a USB stick of 8 GB or larger.
One key, yours to keep
No subscription. Buy once, and your key keeps working for every 2.x update.
Trial
Everything in Meridian, to try on your own machine.
- Full encryption and sealed files
- Linux and Windows software catalog
- Small watermark until activated
Home
For your own computers, for personal work.
- One person, up to 2 computers
- All 2.x updates
- Community support
Pro
For client work, research labs and businesses.
- Commercial use allowed
- One person, up to 5 computers
- All 2.x updates
Prices exclude VAT, which is added at payment based on your country. Buying for a team? Choose more seats at checkout and you'll get one key per person.
Check a key before you use it
Paste the key from your order email. This page checks its signature right here, the same way Meridian does, without sending the key anywhere.
Questions
What happens if I forget my passphrase?
Your files can't be recovered, by you or by Andromeda. That's what makes the encryption worth having. Meridian offers to wipe the machine so you can start fresh with a new passphrase. Keep your passphrase in a password manager.
How do I install Meridian?
Download the ISO, write it to a USB stick with Rufus, balenaEtcher or dd, and start your computer from the stick. The installer walks you through the rest, including setting the passphrase that encrypts your disk.
Can I move my key to a new computer?
Yes. Your key isn't tied to hardware, so type it into the new machine. Home covers 2 computers and Pro covers 5 at a time.
Where do I get my key after paying?
By email, straight after payment, along with your order number. Check the key on this page first if you want to be sure it arrived intact.