Every account gets its own Safari.

Its own cookies, IP, language and time zone for every profile. Every account open at once, and nothing leaks.

Try it free Features

One Mac, many Safaris. And they never mix.

A Space Black MacBook Pro. Its display shows the Lumen mark set in code characters: a split disc. The left half has come out of the display and floats in front of it; the right half stays on the screen. Two halves, two profiles that never mix.

Lumen opens every account in a Safari of its own. Its own cookies, passwords and history. Its own proxy, language and time zone. Sites see an ordinary Safari - and you see every account at once.

Every profile at once. Each in its own window.

No signing out of one account to get into another: the windows sit side by side and can’t see each other.

Safari windows open side by side, each with a profile and a site of its own: “Store” from Germany, “Ads” from the United States, “Support” from the United Kingdom, “QA” from Japan, “Sales” from the Netherlands and “Blog” from France.

Every profile, its own country.

A Safari window with the same news site in three profiles: for “Store” it is in German and shows Berlin time, for “Ads” in English with New York time, for “QA” in Japanese with Tokyo time.

What the site sees

  1. Store Germany 14:32 de-DE · Europe/Berlin
  2. Ads USA 9:32 AM en-US · America/New_York
  3. QA Japan 22:32 ja-JP · Asia/Tokyo

Each profile takes its language and time zone from its proxy’s country - so sites open in the local language, on local time.

Isolated at every level.

Under every window: its own process, its own data, its own network and its own key.

  1. A Safari windowIts own tabs, history and bookmarks.
  2. A process of its ownIts own WebKit, folder and temporary files.
  3. Its own dataCookies and passwords other profiles cannot see.
  4. Its own networkOnly through its proxy. Direct is closed.
  5. Its own keyEverything on disk under AES-256-GCM.

The proxy is down. No connection.

The Safari window of the Store profile. A sign-in page is open through the proxy; during the next load the proxy stops responding: loading stops, and instead of the page Safari shows its own error, “Can’t Connect to the Server”. The profile never goes online directly.

No way around it. A profile with a proxy goes online only through it. If the proxy doesn’t respond, the page doesn’t open, and the site never learns your real IP.

0 packets past the proxy. Every build checks it: the tests record all of a profile’s traffic and look for a single packet that got past it.

Not even we can read it.

Passwords, cookies, history, bookmarks and site data of every profile are encrypted on disk.

The key comes from your master password, and only you know it. Without it, a stopped profile can’t be opened.

In the picture a line of light passes over the data of the profile “Store” - a saved password, cookies, history, a bookmark and site data - and turns it into ciphertext, which then gathers into a lock.

AES-256-GCM
Encrypts each profile’s data with a key of its own.
Argon2id
Derives the key from your master password: 64 MiB of memory, 3 passes, 4 lanes.

Warm-up runs while you work.

A profile browses the sites of its proxy’s country and collects cookies - in a hidden window. Nothing opens in front of you.

Example: the profile “Client”, with a proxy in Sweden, warms up on Swedish sites - google.se, aftonbladet.se, svt.se, dn.se. It is on page 4 of 12, with 84 cookies collected.

A profile browses the sites of its proxy’s country and collects cookies - in a hidden window. Nothing opens in front of you.

26 countries. A ready-made list of local sites for each, in its own language. The app takes the country from the proxy.

Like a reader. Normally 10–35 seconds a page, scrolling. In Quick mode 4–12 s, in Deep 25–90 s.

Only looks. It types nothing, submits nothing, buys nothing. It can also start by itself, on a schedule.

Lumen, by the numbers.

448

signals compared with real Safari on every build

31/31

request headers, the same set and order as Safari’s

15/15

TLS and HTTP/2 values that match Safari

0

packets around the proxy

26

countries with ready-made warm-up site lists

AES-256-GCM

encryption of everything a profile keeps on disk

And everything you expect from Safari.

Passwords.

AutoFill, just like Safari: save, update, fill.

History and bookmarks.

Every profile has its own.

Cookie import.

Bring a sign-in over from another browser: JSON or cookies.txt.

Sync.

Your profiles on all your Macs. Only ciphertext goes to the server.

Profile export.

A whole profile in one file under a password.

Ephemeral profiles.

Close it, and nothing is left.

All features

Try Lumen free

7 days free, up to 3 profiles, every feature.