Secure File Storage and sharing capabilities for Enterprise and public sector
Keeper offers Secure File Storage to protect your confidential files, IT documentation, photos, videos and any other type of documents.
File attachments are end-to-end encrypted. The encryption is performed locally on the user's device before being uploaded to the Keeper Cloud Security Vault. The user is in complete control of the encryption keys to access and decrypt the files for complete privacy and security. Users also have the ability to securely share files with other Keeper users via shared folders, individual record sharing and one-time share. Sharing records uses Elliptic Curve encryption, making Secure File Storage the best way to save, transfer and share the most sensitive documents.
Role-based enforcement policies can be applied by the Keeper Administrator to restrict file attachments and sharing records with files.
Keeper Secure File Storage solution can be added on to any Enterprise or public sector subscription. There are several critical use cases:
Storing and sharing of confidential PDF, Excel, Word or other doc types
Protection of SSH Keys, SSL certificates and other private keys
Safe backups of ID cards such as passports and drivers licenses
Encrypted storage of private financial information
Sharing confidential IT documentation among engineers
Simply drag-and-drop files into the Web Vault or Desktop App. Or on iOS/Android devices, you can load content from the local device. Files are then encrypted locally on the device and the ciphertext is stored in the Keeper Cloud Security Vault.
The Secure File Storage feature is a secure and convenient method of storing your SSH keys, SSL keys and other cloud infrastructure access keys.
ID cards such as passports and drivers licenses can be easily stored and retrieved on any device with full encryption.
Confidential financial documents or any other private file can be stored in the vault.
Files can be securely shared either directly to other Keeper users, or within a Shared Folder.
Sharing can be disabled by Keeper Administrators from the Keeper Admin Console. Sharing features are controlled as role-based enforcement policies.
If allowed by role policies, users can also create a one-time share. One-time share links are useful for sharing a file with an outside vendor, contractor or 3rd party. In this case it's set to be revoked after 1 hour. One-time shares can be opened with a QR code or a link sent through email or a messaging platform.
On the recipient side, the one-time share is cryptographically bound to the receiving device.
For more information about one-time shares, see this page.
A record can be saved as a self-destructing one-time share. In this scenario, the record is going to be deleted from both sides after the file has been downloaded. When creating a record, select "Add Self Destruct".
Learn more about self-destructing records at this page.
Files can be attached and viewed from the Keeper iOS and Android applications. Files can be stored offline for fast access if an Internet connection is not available.
All file related actions such as uploading a file, downloading a file or sharing a record is tracked and monitored through Keeper's advanced reporting and alerts module. This provides event-based reporting that contains information such as: the user's IP address, location, software version, the record identifier, file identifier and other metadata.
You can run reports right here in the console, or if you are using a 3rd party SIEM solution like Splunk, these event logs can be streamed directly into your SIEM provider's collector endpoint in real time.
Secure File Storage is pooled among the organization's users. To add storage to your Business or Enterprise plan, from the Admin Console, click on Subscriptions then Add Storage.
At the checkout screen, you will have the opportunity to select the file storage level.
Keeper Administrators can configure Secure File Storage capabilities at the role level. To disable sharing or file upload capabilities navigate to Roles > Enforcement Policies > Creating and Sharing.
For automation and migration of files into Keeper, the Keeper Commander CLI is useful for IT admins or developers to either bulk add content or build automated actions into workflows.
For example, to add a file attachment to a record, the command upload-attachment is executed:
For more information about Keeper Commander record related commands, see the page below:
https://docs.keeper.io/en/v/secrets-manager/commander-cli/command-reference/record-commands
Just like our password encryption technology, Keeper protects your confidential files with 256-bit AES encryption using record-level keys.
Sharing files between users takes advantage of Keeper's built-in Elliptic Curve cryptography method. The record key or folder key which protects the individual record is encrypted with the public key of the recipient(s).
Secure file storage is available across all of your devices including iOS, Android, Web Vault, and Desktop App.
Files can be easily and securely shared with other Keeper users, from vault-to-vault.
Like your other Keeper records, you can set sharing permissions for records that contain your secure files (can edit, can share, can edit & share, and read only).
Individual file sizes are supported up to 5GB for Desktop App, 100GB for iOS, 100GB Android, 100MB for Web Vault.
