Shelter uses the same technology as your password manager, ensuring that everything you add is only accessible by you and your trusted contacts.
Your data is encrypted before it reaches our server, and the only thing that can unlock it is your user account and those trusted contacts you’ve invited to access it.
Even we at Shelter can’t see your data.
Before your sensitive information even leaves your device, it’s encrypted using your master password. This encryption happens right in your browser — we call it client-side encryption.
This crucial step ensures that the data we receive on our servers is already an unreadable jumble.
We don’t know your master password, and we don’t have the key to your data.
This is the core of our commitment. We adhere to a zero-knowledge security model, meaning that we can’t see, access, or decrypt your encrypted passwords. We cannot reset your master password, nor can we recover your data for you.
Only you have the key — your unique master password — to unlock and decrypt your vault. Your master password is never stored on our servers.

For your complete peace of mind, our security protocols are so strict that your session is designed to expire immediately upon closing or refreshing your browser window.
When you reload your browser, you are always prompted to re-enter your master password to decrypt your vault.