LogoLogo
Enterprise Guide
Enterprise Guide
  • Getting Started
  • Start Your Trial
  • Resources
  • Keeper for Teams and Small Business
  • Keeper Enterprise
  • Implementation Overview
  • Domain Reservation
  • Deploying Keeper to End-Users
    • Desktop Applications
      • Launch on Start Up
    • Forcefield
    • Browser Extension (KeeperFill)
      • Mac
        • PLIST (.plist) Policy Deployment
          • Jamf Pro Policy Deployment - Chrome
          • Microsoft Intune Policy Deployment - Chrome
      • Linux
        • JSON Policy Deployment - Chrome
      • Windows
        • Group Policy Deployment - Chrome
        • Group Policy Deployment - Firefox
        • Group Policy Deployment - Edge
        • SCCM Deployment - Chrome
        • Intune - Chrome
        • Intune - Edge
        • Edge Settings Policy
        • Chrome Settings Policy
      • Virtual Machine Persistence
    • Mobile Apps
      • IBM MaaS360
    • Optional Deployment Tasks
    • IE11 Trusted Sites
  • End-User Guides
  • Keeper Admin Console Overview
  • Nodes and Organizational Structure
  • Risk Management Dashboard
  • User and Team Provisioning
    • Custom Invite and Logo
      • Custom Email - Markdown Language
    • Simple Provisioning through the Admin Console
    • Active Directory Provisioning
    • LDAP Provisioning
    • SSO JIT (Just-in-Time) Provisioning
    • Okta Provisioning
    • Entra ID / Azure AD Provisioning
    • Google Workspace Provisioning
    • JumpCloud Provisioning
    • CloudGate Provisioning
    • OneLogin Provisioning
    • Microsoft AD FS Provisioning
    • API Provisioning with SCIM
      • Using SCIM API Provisioning
    • Team and User Approvals
    • Email Auto-Provisioning
    • CLI Provisioning with Commander SDK
  • SSO / SAML Authentication
  • User Management and Lifecycle
  • Email Address Changes
  • Roles, RBAC and Permissions
    • Enforcement Policies
    • Security Keys
  • Delegated Administration
  • Account Transfer Policy
  • Teams (Groups)
  • Sharing
    • Record and File Sharing
    • Shared Folders
    • PAM Resource Sharing
    • One-Time Share
    • Share Admin
    • Time-Limited Access
    • Self-Destructing Records
    • Hiding Passwords
  • Creating Vault Records
  • Importing Data
  • Record Types
  • Two-Factor Authentication
  • Storing Two-Factor Codes
  • Security Audit
    • Security Audit Score Calculation
  • BreachWatch (Dark Web)
  • Secure File Storage & Sharing
  • Reporting, Alerts & SIEM
    • Event Descriptions
    • Splunk
    • Sumo Logic
    • Exabeam (LogRhythm)
    • Syslog
    • QRadar
    • Azure Monitor
    • Azure Sentinel
    • AWS S3 Bucket
    • Devo
    • Datadog
    • Logz.io
    • Elastic
    • Firewall Configuration
    • On-site Commander Push
  • Recommended Alerts
  • Webhooks
    • Slack Webhooks
    • Teams Webhooks
    • Amazon Chime Webhooks
    • Discord Webhooks
  • Compliance Reports
  • Vault Offline Access
  • Secrets Manager
  • Commander CLI
  • Keeper Connection Manager
  • KeeperPAM Privileged Access Manager
  • Keeper Forcefield
  • KeeperChat
  • Keeper MSP
    • Free Trial
    • Getting Started
    • Fundamentals
    • Consumption-Based Billing
      • Secure Add-Ons
      • Existing MSP Admins
    • Onboarding
    • PSA Billing Reconciliation
    • Join the Slack Channel
    • Next Steps
    • Offboarding
    • Commander CLI/SDK
    • Account Management APIs
    • Provision Family Plans via API
    • MSP Best Practices
  • Free Family License for Personal Use
    • Provision Family plans via API
    • Provision Student plans via API
    • API Troubleshooting
      • API Parameters
      • API Response Codes
      • API Explorer - Swagger
  • Keeper Security Benchmarks and Recommended Security Settings
  • IP Allow Keeper
  • Keeper Encryption and Security Model Details
  • Developer API / SDK Tools
  • On-Prem vs. Cloud
  • Authentication Flow V3
  • Migrating from LastPass
  • Training and Support
  • Keeper SCORM Files for LMS Modules
  • Docs Home
Powered by GitBook

Company

  • Keeper Home
  • About Us
  • Careers
  • Security

Support

  • Help Center
  • Contact Sales
  • System Status
  • Terms of Use

Solutions

  • Enterprise Password Management
  • Business Password Management
  • Privileged Access Management
  • Public Sector

Pricing

  • Business and Enterprise
  • Personal and Family
  • Student
  • Military and Medical

© 2025 Keeper Security, Inc.

On this page
  • Record Types Overview
  • Video Demo
  • Standard Record Types
  • KeeperPAM Record Types
  • Custom Fields
  • Sharing
  • Record Type Sorting
  • Custom Record Types
  • Password Complexity and Security
  • Field Types Available for Custom Record Types
  • Managing Record Types by Role
  • Converting Types
  • Commander CLI

Was this helpful?

Export as PDF

Record Types

How to create and manage new types of records in your Vault

PreviousImporting DataNextTwo-Factor Authentication

Last updated 5 months ago

Was this helpful?

Record Types Overview

A Keeper Record Type is a structured template that can contain any type of information such as logins, payment cards, bank accounts, and many more. There are several out-of-the-box record types available, and Admins can create custom types that fit the needs of your organization. Custom record types can be created for all users, or users within specific roles.

Some record types provide enhanced functionality, such as KeeperPAM resources.

Video Demo

Standard Record Types

Below are the list of available record types which are available for all customers.

Record Type
Description

Login

The set of data needed to successfully login to a website.

Payment Card

Credit card information, used in autofilling of forms. Payment cards can also be "linked" to other records, to reduce duplication of data.

Contact

Identity information about a particular person. We recommend you create one with your information, used in autofilling of forms.

Address

Address information used to identify a physical location. Address records can also be "linked" to other records, to reduce duplication of data.

Bank Account

Banking information, such as account number and routing numbers.

File Attachment

One or more files can exist in a file record.

Photo

One or more photos can exist in a photo record.

Driver's License

Drivers license information, such as name, number and expiration. We recommend you store pictures of both the front and back in this record type.

Birth Certificate

Birth information such as date of birth and name. We recommend you store a high quality scan of your birth certificate in this record type.

Database

Database information such as Type, hostname and port. Can be used to rotate database credentials in Commander.

Server

Server information such as hostname and login info. Can be used to rotate or connect to servers in Commander.

Health Insurance

Health insurance information such as account number and the insured's contact info.

Membership

Membership information including account information and name. We recommend you store a scan of membership barcodes in this record type.

Secure Note

Secure information that is masked when the record is viewed. The record contents can be unmasked at will.

Passport

Passport information such as number and expiration. We recommend you store a high quality scan of your main passport page in this record type.

Identity Card

Identity information such as number and expiration. We recommend you store a high quality scan of your ID card in this record type.

Software License

Software license information such as the license number and purchase date.

SSH Key

SSH information, such as public and private key strings. We recommend you attach any relevant key files in this record type.

Custom

Business customers can create custom types that will appear for users.

General

Legacy format, used for records created before the launch of Record Types.

KeeperPAM Record Types

KeeperPAM Resource records are special record types designed to organize and store information of your target infrastructure, machines and user accounts. These record types are reserved for KeeperPAM privileged access management tenants.

Record Type
Description

Contains information about target infrastructure being managed for privileged access management. PAM Configurations can be one of the following sub-types: Local Network, AWS, Azure or Active Directory.

Server or VM instance, such as Windows, macOS, Linux.

A database such as MySQL, PostgreSQL, SQL Server, MongoDB, MariaDB and Oracle

An Active Directory or OpenLDAP endpoint

A remote browser isolation (RBI) web application

Credential record representing an account associated to other PAM resources

Custom Fields

On any record created as a new Record Type, there are several new "Custom Field" types available that can be added to any record.

Available Custom Record Fields

  • Text

  • Date

  • Pin Code

  • URL

  • Email

  • Phone Number

  • Security Question & Answer

  • Name

  • Payment Card

  • Multi-line Text

  • Address

  • Hidden Field

  • Native App Filler (see KeeperFill for Apps)

Sharing

Record Types can be shared to other users, either direct sharing or within a Shared Folder, just like any other record. This now includes Payment Cards and Contact record types.

The Payment Cards stored in the "Identity & Payments" section of the vault is separate, and cannot be shared to other users. To make a Payment Card available for sharing, please create the record within the Vault section.

To create Payment Cards that can be shared to other users, click on Create New > Record > then select the Payment Card type.

Record Type Sorting

Each user can set sorting of the record types which appear when creating new records. Visit Settings > Record Type Sorting > Edit Order.

Custom Record Types

Keeper Business and Enterprise customers can define totally custom Record Types for their specific needs.

In order to create new custom Record Types, the user must be in an Administrative role with the "Manage Record Types in Vault" permission activated as seen below in the Admin Console role permission interface.

To activate this permission, visit Roles > Select Role > Hover over gear icon > Administrative Permissions.

Once the permission is activated, the Admin can login to the Web Vault or Desktop App to create a record type.

From the Keeper Vault application, select Create New > Custom Record Type:

You can create the new template based on an existing template, or you can start with a blank record and add the required fields:

Within the new Record Type screen, you are able to define what fields will exist within this template. You are able to add, remove and re-order any field types you wish to. Add new fields by clicking the Add New Field button.

Available Fields

  • Login

  • Password

  • URL (website address) used for Autofill

  • Two-Factor (TOTP) code with seed

  • File attachment

  • Security Question & Answer

  • Single-line Text

  • Multi-line Text

  • Hidden Field

  • Hostname or IP Address

  • Date

  • Payment Card

  • Bank Account

  • PIN Code (4-digit numeric)

  • Name

  • Email Address

  • Address

  • Phone Number

  • Native App Filler (see KeeperFill for Apps)

As an example, here's a custom record type that may represent a "Crypto Wallet" type:

Password Complexity and Security

One of the core benefits of Custom Record Types is the ability to specify password security settings at the Type-level. You can specify the following:

  • Require the password field to have a value

  • Require the use of the "dice" button to generate the password

  • Set password complexity rules

  • Enable "Privacy Screen" on the record

With Privacy Screen enabled, passwords are not visible from the user interface serving as a deterrent from viewing. Password masking is only visual in nature and the password is still stored in the user's vault and accessible via API communication and browser inspection.

Field Types Available for Custom Record Types

Field Name

Description

Title

Mandatory field, the title of the record, does not have to be unique

Login

The standard login field, this is used to autofill records.

Password

The standard password field, this is used to autofill records. Only one password field can be present for a particular record. If an account has multiple, use hidden fields or pin codes.

URL

The website address of a record, if included will be used for site matching and autofill.

Email

Email address field, validates the string entered matches an email format.

Two-Factor Code

Keeper can protect and generate 2FA codes for any website or service that supports the use of TOTP (Time-Based One-Time-Passwords).

File or Photo

File attachments can be any type of file, photo, video or other document. An unlimited number of files can be attached to any Keeper vault record. File storage is an add-on subscription. If file storage is disabled, please contact your Keeper administrator or the Keeper sales team.

Notes

Mandatory field. Any free-form notes can be protected in this field such as access instructions or confidential documentation.

Security Question and Answer

Typically used for account recovery, one or more security questions and answers can be stored in a record.

Text

Free form text field, single-line.

Multi-line text

Free form text field, multi-line.

Hidden field

Free form text field, hidden by default.

Pin Code

Alphanumeric code field, hidden by default.

Date

Date field, can be manually input or selected via a date picker, validates the string entered matches a date format.

Hostname or IP Address

Hostname or IP field used to store identification information to devices.

Name

Multiple value custom field. It will add First Name, Middle Name, and Last Name fields to the form.

Bank Account

Multiple value custom field. It will add Account number and Routing Number fields to the form.

Phone Number

Multiple value custom field. It will add phone number and extension fields to the form

Payment Card

Dynamically linked to a Payment card record. Data will be displayed within this record, but the source of truth and ability to edit reside in the original record.

Address

Dynamically linked to an Address record. Data will be displayed within this record, but the source of truth and ability to edit reside in the original record.

Native App Filler

All fields can have a custom label associated with them and any field can be marked as a required field. Additionally, masking can be enabled on any non-password field, which will prevent the field values from being displayed by default. The visibility can be toggled via the eyeball icon.

After all needed fields have been added to the page, they can then be sorted via drag-and-drop. Click the Publish button to make it available to all users who have the record type enabled in their role policy enforcements.

Managing Record Types by Role

To add and remove record types for your users, login to the Keeper Admin Console > Roles > Enforcement Policies and visit the Record Types screen. From here, you can turn on or off different record types on a role basis.

  • By default, a role can use all Record Types

  • If a user is part of multiple roles, disabling a record type in any role will prevent creation of those record types for the user.

  • If all record types are disabled, the user will be unable to create records.

  • If you would like to make a global change for all users, disable the Record Type in the default role.

Converting Types

To convert a record to a different type, right-click the record from the Keeper Web Vault or Desktop App and select "Change Type".

Notes about Record Type conversion:

  • The "General" record type is Keeper's legacy record version.

  • When converting between record types, fields that don't exist in other types will be saved as custom fields.

Commander CLI

Manage Record Types programmatically using the Keeper Commander CLI tool. Relevant commands:

  • record-type-info

  • record-type

  • convert

  • Record Commands

  • Record Type Commands

  • Creating Record Types

For more information see our Keeper Commander Documentation.

Pre-defined Native Autofill capability with OCR screen recognition and auto-type of keystrokes. See the documentation for detailed instructions on Native App Filler.

PAM Configuration
PAM Machine
PAM Database
PAM Directory
PAM Remote Browser
PAM User
KeeperFill for Apps
Record Types
New Record Type
Custom Field Types
Creating Payment Cards
Record Type Sorting
Enable Record Type Permission
New "Blank Type" Record Type with the name "Crypto Wallet"
Custom Record Type Fields
Crypto Wallet Record Type Fields
Password Complexity and Security
Publish a new Record Type
Enable Record Types by Enforcement Policy
Change Record Type from Vault UI
Select a new Record Type