How it works
Pick the level that fits — every level includes everything below it. Only your accountability contact can move it, and every level is enforced in the browser and, on Windows, by a background service that can't be closed without their password.
A remotely-updated blocklist keeps pornographic and explicit sites out entirely — no page loads, nothing to scan. Circumvention tools (Tor, proxy VPNs) are blocked from running on Windows at every level.
Adds social platforms to the blocklist, and blocks streaming services — Netflix, Hulu, Disney+, Max, Prime Video — which your contact can switch back on if they choose. YouTube gets a lighter touch: title-only checks, so clearly fine content still plays. On Windows, social and dating apps are blocked from running at the OS level too, not just in the browser.
The only level that scans images. Every image is hidden until it's actively checked and cleared — nothing is shown by default, ever. YouTube is judged on title and thumbnail. Includes everything in Level 2.
Screen-time limits, password-gated removal, remote uninstall and quiet-device alerts work at every level — they aren't tied to how strict the filtering is.
In your toolbar
The popup is the whole day-to-day interface: what's been scanned and blocked, the filtering level you're on, and a request to your contact if you need something changed. No dashboards to learn, no settings to get lost in.
Scanned, blocked and approved totals for this device, updating as you browse.
See exactly what's being filtered — and send a change request your contact approves.
Loosening anything routes through your accountability contact, not a hidden switch.
What's in it
The extension filters the page. The Windows software keeps it there. Your contact holds the key.
The blocklist updates itself, so new sites are covered without an update.
Facebook, Instagram, X, TikTok, Reddit and the rest stop loading.
Netflix, Hulu, Disney+, Max and Prime Video are blocked — unless your contact approves them. Turning them back off is instant and needs nobody.
Channels approved once, then they just play. Unknown ones are judged video by video. Shorts are hidden entirely.
Every image on every page stays hidden until it has been checked. This is the only level that scans images.
Most photos clear locally in milliseconds, without ever leaving the device.
Amazon, eBay and Marketplace are judged by what you searched for, not one blunt rule.
Say why something should be allowed and it re-checks, or asks your contact.
Daily minute caps and allowed hour windows, applied to sites and apps alike. Runs out and the site or app simply won't open.
Instagram, TikTok and Snapchat can't open at all — including the Microsoft Store versions installed to dodge a browser filter.
Install Chrome, Edge or Brave later and it stays blocked until Shmira is set up inside it.
Tor, proxy VPNs and Windows Widgets are stopped from running.
Closing or uninstalling Shmira needs the password you don't hold.
Your contact can remove it without ever touching the device.
If the device stops checking in for a few days, your contact is told.
Set through a link sent to them, kept only as a hash on the server.
A daily cap (say 60 minutes of YouTube) and allowed hours (say 9am–9pm), per site and per app, from a web dashboard or by text.
Netflix and friends are off by default. They can switch them on for this device, and off again any time.
Including temporarily — drop to Level 2 for an hour and it returns on its own.
Requests arrive as a text or email. Replying YES or NO is the whole job.
LIMIT, ALLOW, STATUS, CONTACT, UNINSTALL. No app, no login, no password to remember.
Same person and same password across every device they oversee.
See it work
What the filter, the screen-time limits, and the approval loop actually look like when you run into them.
Getting set up
You never hold the password yourself — that's the whole point, and it's why setup starts with your accountability contact rather than a download.
Start setupTheir email and phone, and the filtering level to start at. They get a link to set the password.
A six-character code that identifies this device. You'll paste it into the installer; your contact uses it to manage screen time.
The download unlocks the moment they do — protection that nobody has the password for isn't protection.
The extension for filtering, plus the Windows software if you want the filtering to be hard to remove.
Questions
No. No history, no page contents, no list of sites you visited is ever stored. Image scanning at Level 3 sends only the individual images a local check couldn't clear, for a verdict that isn't kept afterward. Your accountability contact sees screen-time totals for sites they've set limits on and the requests you send them — not a browsing log.
Not without the password. Both closing the tray app and running the uninstaller check the password against the server, and the server is the only place it exists. If the device simply goes quiet for a few days, your contact is notified.
They can request a password reset at any time from their own email or phone, and they can remove Shmira from a device remotely if it needs to come off. Nothing is designed to leave a device permanently stuck.
No — the extension alone does the filtering. The Windows software is what stops the filtering from being trivially removed, and adds app blocking and screen-time limits outside the browser. Most families want both.
Barely. The first-pass image check runs locally on your machine and clears most photos in milliseconds without any network call, verdicts are cached so a repeat image is instant, and images you're actually looking at are always scanned ahead of ones further down the page.
Nothing. There's no paid tier and no feature is held back. Supporting it during setup is entirely optional and you can skip it in one click.
Free, always
There's no paid tier and nothing is locked behind a subscription. It does cost money to run and took a long time to build, so if it's been useful to your family you're welcome to put something toward that — any amount, monthly or once, cancel anytime.
Pick a level, add an accountability contact, install in a few minutes.
Set up protection