Who we are

Why we built SHTERA

It started from our own problem: servers and passwords scattered across spreadsheets, generic password managers, and loose notes. SHTERA centralizes all of that in one place, with a browser console (SSH, RDP, VNC) — nothing to install.

How we protect your credentials

Your password never leaves your browser: it's transformed there, 600,000 times over, before anything is sent to our server — and what we receive can't be used to reconstruct it. Every folder in your tree has its own encryption key, itself protected by your password, by a 24-character recovery code you generate at signup, and — if you turn it on — by a passkey on your device. If your company has more than one person, each one has their own keypair: nobody sees a folder that wasn't shared with them, not even with full access to the database.

If you lose all three keys at once (password, code, and passkey), there's a last resort: a recovery key that does not live on our servers. It's kept encrypted on a separate machine with no open connection to the world, and using it requires verifying your identity with a small, random charge to a card — never a security question or a WhatsApp message.

Contact

For any question: support@shtera.com.