Everything you need to protect your 3D print files, manage licenses, and catch pirates.
Encrypt your first file in under 2 minutes
Navigate the designer dashboard
Install and configure the unlock app
Upload STL files and generate .stlx protected files
Generate, distribute, and revoke purchase tokens
CSV import for batch token generation
Automated piracy detection across 9 platforms
Generate platform-specific takedown notices
Forensic evidence for legal action
How to unlock .stlx files with your token
Unlock files in your browser — no app needed
OrcaSlicer, PrusaSlicer, Cura, Bambu Studio, and more
Transfer your license to a new device
AES-256-GCM with per-product keys and HKDF-SHA256 derivation
Binary format specification for encrypted STL files
8 forensic watermarking techniques (4 mesh + 4 G-code)
REST API endpoints for CLI and integrations
Etsy order webhooks and event notifications
Auto-generate tokens from Etsy orders
Send unlocked files directly to your printer
Upload and distribute slicer profiles with your files
Add a storefront widget to your website
Sign up free — no credit card required. You get 5 products and 50 tokens/month on the free plan.
Go to Products → Upload STL. Choose Standard mode (buyer uses their slicer) or Maximum mode (G-code only, raw mesh never exposed).
Go to Tokens → Generate Token. Enter the buyer's email and select the product. Send them the SHLD-xxxx token with their purchase.
Your buyer visits stlshield.com.au/unlock, enters their token and email, and downloads the STL. Or they can use the desktop app for offline access.
Every STL file is encrypted with a unique AES-256-GCM key derived via HKDF-SHA256. The encryption produces a .stlx file containing:
STLSHLD\0Keys are wrapped with a master key (AES-256-GCM) before storage. The master key is held in an environment variable and never written to disk or logs.
Every unlocked file is embedded with 8 redundant forensic watermarks — 4 on the mesh, 4 on G-code.
Watermarks are keyed with HMAC-SHA256 using the buyer's email. They survive format conversion, re-meshing, and re-export — making leaked files traceable to the exact purchaser.
Standard mode works with all listed slicers. Maximum mode uses the built-in CuraEngine — the raw mesh never leaves memory.