Shift Browser keeps your data protected by encrypting your local storage, network traffic, and saved passwords on your device. Because Shift isolates your workspaces, your data remains secure and inaccessible to outside tracking.
How sign-in works in Shift Browser
When you create a Shift account, you can sign in using:
- Microsoft
- Apple
- An email address and password
Shift uses AWS Cognito to manage authentication and securely handle sign-in credentials.
Authentication works differently depending on how you sign in:
- Google, Microsoft, and Apple: Your identity provider manages authentication, including Multi-Factor Authentication (MFA) and security alerts.
- Email and password: AWS Cognito encrypts and manages your sign-in credentials.
Add an email account in Shift Browser
Shift doesn't automatically add your email accounts, giving you full control over what you connect.
To add an email account:
- Open the App Directory in the sidebar.
- Add the Email app.
- Sign in using your email provider's secure sign-in page.
This gives Shift permission to display your inbox and send notifications using your provider's authentication. Shift doesn't store your email content or your sign-in credentials. Everything stays on your computer.
What Shift Browser can and can't access
Shift is designed as a local-first tool, which means your most sensitive data stays on your device.
Shift can access:
- Identity tokens used to verify your account.
- Access tokens for connected apps are stored only on your device.
Shift can't access:
- The content of your messages.
- Calendar appointments.
- Private attachments.
- Contacts.
For more information, see the Security in Shift article and Privacy Policy FAQ.
Import data from another browser
When you first install Shift Browser, you'll be asked if you'd like to import data from another browser, including:
- Bookmarks
- Saved passwords
The import happens locally on your device. Shift doesn't upload your bookmarks or passwords to its servers.
Why Shift Browser is secure
Shift uses industry-standard authentication technologies, including OAuth and AWS Cognito, to help protect your account. Because access tokens remain on your device, Shift doesn't maintain a central database of your messages. Since Shift doesn't store your inbox content, privacy is built into the experience.
Related Articles
More questions? Still feeling a little unsure? Get in touch with our support team to help ease your mind!