Security

Your funds stay with your broker

Orders go only to the brokerage account you connect. TradeShell never holds or moves your money.

OAuth and encrypted credentials

Connect with OAuth where your broker supports it, so TradeShell never sees your password. Broker credentials and access tokens are encrypted when stored and in transit, and never shown again after you save them.

Credentials do pass through TradeShell’s service: it stores them encrypted, then decrypts them only to start your session and hands them to your session’s container as a protected secret. No other user’s session can read them, and TradeShell never holds or moves your money.

A private, isolated session

Every session runs in its own environment with its own storage. Nothing is shared with other users.

Verified at every step

Every connection to your session is authenticated, and the session verifies it again before accepting any command. Access is short-lived and renews on its own.

No open doors

Your session has no public address. Your screens reach it over end-to-end encrypted connections that only you are authorized to open.

Signing in

Sign in with a one-time code sent to your email, or with Google. There’s no password to leak.