ShortSwitch
The only link manager with passkey authentication

Branded short links built for teams that take security seriously

Custom domains, click analytics, retargeting pixels, SAML SSO, WebAuthn passkeys, HMAC-signed webhooks, and a full REST API — on every plan.

No credit card required during trial  ·  Cancel any time

✓ WebAuthn / passkeys ✓ SAML 2.0 SSO ✓ Retargeting pixels ✓ Branded redirect overlay ✓ HMAC-signed webhooks ✓ XML + JSON API ✓ Multi-domain per account

Everything from link creation to click attribution

ShortSwitch covers the full lifecycle — shorten, brand, route, track, fire pixels, and stream click events to your data pipeline.

Multi-domain per account

Add unlimited branded domains to one account — all sharing the same token pool and analytics. Switch domains without recreating links.

Retargeting pixels

Fire Facebook, Google Ads, LinkedIn, TikTok, Pinterest, and custom pixels on every redirect — no landing page required. Build audiences directly from link clicks.

Analytics tags on redirect

Attach GA4, Segment, Matomo, Plausible, Fathom, or Mixpanel to any link. Analytics fire on click — before the user reaches the destination.

Branded redirect overlay

Keep your brand visible after the click. Wrap any destination in a branded toolbar or interstitial — unique to ShortSwitch, unavailable in any competing product.

GeoIP + device analytics

Every click records country, city, device type (desktop/mobile/tablet/bot), and referrer domain — resolved instantly from a local GeoIP database with zero latency impact.

HMAC-signed webhooks

Stream click events to any endpoint. Deliveries are signed (SHA-256 HMAC), retried up to 5 times with exponential backoff, and logged for audit.

REST + XML API

Full JSON REST API plus legacy XML and plain-text response formats — backward-compatible with existing integrations. API key and JWT bearer auth both supported.

Per-link QR codes

Every short link has a QR code — PNG or SVG, downloadable from the dashboard or via API. QR codes automatically point to the link's current destination.

Link expiry + password protection

Set an expiry date/time on any link — essential for time-limited campaigns and compliance. Password-protect links for pre-release document sharing and private distribution.

Enterprise security

The most advanced authentication in the category

No competitor — Bitly, Rebrandly, Short.io, or BL.INK — offers passkey authentication. ShortSwitch is the only link management platform where phishing-resistant FIDO2 credentials are a standard feature, not an enterprise add-on.

  • WebAuthn / passkeys — Hardware keys and biometric authenticators. Phishing-resistant by design. Supported in all major browsers and OS since 2023.
  • TOTP (RFC 6238) — Time-based one-time passwords with any authenticator app. 8 single-use recovery codes generated at enrollment.
  • SAML 2.0 SSO — SP-initiated SSO for any SAML IdP — Okta, Azure AD, Google Workspace. User provisioned from assertion on first login.
  • OAuth (Google / GitHub) — Frictionless sign-in for developer and technical teams. Linked to existing accounts by email.
  • Per-user host restrictions — Restrict which destination URLs a user is allowed to shorten — enforced at the server, not the UI.
Auth comparison
Feature SS Bitly Rebrandly BL.INK
Passkeys / WebAuthn
TOTP / OTP
SAML 2.0 SSO All plans Enterprise Enterprise Enterprise
OAuth login
JWT bearer auth
YourBrand.com
Sponsored by Your Brand · Learn more →
https://destination-site.com/article
Exclusive feature

Your brand stays visible after every click

The branded redirect overlay is unique to ShortSwitch — no major competitor offers anything equivalent. When a visitor clicks your short link, they reach the destination with your branded toolbar still visible.

Publishers, content aggregators, media companies, and affiliate marketers use this to maintain presence and drive return traffic even when linking off-platform.

  • Toolbar mode: persistent bar across the top of the destination
  • Interstitial mode: branded delay page before redirect
  • Full HTML + CSS customization per account
  • Plan-gated — include in your white-label offering
Infrastructure

Redirects at the edge, globally

Short links resolve from CloudFront edge locations worldwide. Redis-cached lookups on the app tier achieve sub-2ms median latency. Every redirect is tracked with geo, device, and referrer data — zero latency added to the click.

< 2ms
Median redirect latency
Redis-cached path
301 / 302
Redirect type
Per-link, your choice
5-attempt
Webhook retry
Exponential backoff
GeoLite2
GeoIP resolution
Country + city, no network call
For developers

API-first from day one

ShortSwitch ships a full REST API with JSON and XML response formats — the XML mode maintains backward compatibility with integrations built against older systems. API key and JWT bearer authentication both supported on every endpoint.

  • REST JSON API — Full CRUD for links, account, users, pixels, campaigns, webhooks
  • Legacy XML + simple-text — Drop-in compatible with integrations using the original format
  • JWT bearer auth — 7-day tokens via POST /api/auth/jwt — no session cookies required
  • API key auth — ?apiKey= parameter on every endpoint — works in curl, Zapier, scripts
  • Click webhooks — HMAC-signed POST to your endpoint on every redirect — geo + device + referrer included
  • Bulk operations — CSV import and export for large link sets
$ Create a short link
curl -X POST https://app.shortswitch.com/api/links \
-H "Authorization: Bearer $JWT" \
-d '{"url":"https://example.com/long","token":"promo24"}'
// Response
{
"token": "promo24",
"shortUrl": "https://go.yourdomain.com/promo24",
"url": "https://example.com/long"
}

Built for teams that need more than a shortener

ShortSwitch fits different teams differently. Here are the five strongest fits.

Marketing teams

Branded domains, UTM capture, click analytics, retargeting pixels, and QR codes. Multi-user accounts with admin and member roles so the whole team can create links without sharing credentials.

Agencies

One account, multiple client domains — each with its own analytics. SAML or OAuth login reduces per-client credential management. Role-based access keeps client data partitioned.

Publishers & media

The branded redirect overlay is unique in the market. Maintain brand presence after every external link click. No competitor offers this — it's exclusive to ShortSwitch.

Enterprise IT & security

SAML SSO with any IdP, WebAuthn passkeys, TOTP, per-user host restrictions, link expiry, and password-protected links. The strongest auth stack in the URL shortener category.

Developer teams

REST + XML API, JWT bearer auth, API key auth, HMAC-signed webhooks with 5-attempt retry, CSV bulk import. Programmatic link management that fits your existing toolchain.

Multi-brand companies

One subscription, unlimited short-link domains, shared token pool, consolidated analytics. Avoids paying per-brand for separate accounts on competing platforms.

Ready to start?

Includes all features — custom domains, passkeys, pixels, webhooks, and API access — during your free trial. No credit card required.