Device Management Commands

Commands related to Devices for end-users and Admins

Overview

Keeper Commander provides comprehensive device management capabilities for both individual users and enterprise administrators. These commands allow you to list, manage, and perform actions on devices.

What's a Device? A device represents a unique Keeper vault client, such as a web browser, iOS, Android, Desktop App, Commander service or any other instance running Keeper software. A web browser in "incognito" mode is considered as a different device.

User Commands

These allow individual users to manage their own registered devices:

  • device-list – View a list of devices associated with your account.

  • device-action – Take actions on your devices, such as logout, remove, link, unlink, account-lock, account-unlock, lock or unlock.

  • device-rename – Rename your device for easier identification.

These commands give users full control over their own devices, allowing them to monitor and manage device access securely — from anywhere. Whether you're on a desktop, laptop, or mobile, you can manage your registered devices without needing access to these devices.

Enterprise Commands

These are available to administrators for managing devices across all enterprise users that they have rights over:

  • device-admin-list – View devices linked to any enterprise user.

  • device-admin-action – Perform administrative actions on a user’s device, such as logout, remove, lock, unlock, or account-specific actions like account-lock/account-unlock.

With these commands, admins can enforce security policies, remotely manage user devices, and maintain visibility across the organization.

Terminology

The below table describes the device terminology used in Keeper's platform.

Terminology
Description

Remove a device

The user is logged out from the device, and the device is removed from further usage.

Lock/Unlock a device

All users that are using a specific device will be unable to login to that device. For example if multiple users are registered with a single device.

Account Lock/Unlock a device

The specified user is prevented from logging in to a device, but the device still exists and can be unlocked.

Logout a device

The session for the user is expired and the user must re-authenticate on the device.

Link a device

When two or more devices are linked, logging into one device will activate the session for the other devices. Logout of one device logs out both devices.

Note: Device linking requires that the user account has "Stay Logged In" activated (also referred to as persistent login). See the this-device command to enable persistent login.

User Device Commands

device-list - List Your Devices

Lists all active devices for the current user.

Command Syntax

Parameters

  • --format: Output format (table or json). Default: table

  • --output: Output file name (ignored for table format)

Examples

Example 1: Display devices in table format

Example 2: Display devices list as JSON

Example 3: Save JSON to file

device-action - Perform Actions on Your Devices

Perform various actions on your own devices such as logout, lock, or link devices together.

Command Syntax

Getting Action-Specific Help

Device Action Commands

device-action logout - Logout from Devices

Logout the user from specified devices remotely.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to logout

Getting Help

Examples

Example 1: Logout from a device by ID

Example 2: Logout from a device by name

Example 3: Logout from multiple devices

device-action remove - Remove Devices

Logout and remove devices from your account completely.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to remove user from

Getting Help

Examples

Example 1: Remove a device by ID

Example 2: Remove multiple devices by name

device-action lock - Lock Devices

Lock devices for all users and logout all users from the device.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to lock

Getting Help

Examples

Example 1: Lock a device by name

Example 2: Lock multiple devices by ID

device-action unlock - Unlock Devices

Unlock devices and associated auto-linked devices for the calling user.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to unlock

Getting Help

Examples

Example 1: Unlock multiple devices

device-action account-lock - Account Lock Devices

Lock the device for the calling user only. If the user is logged in, logout the user.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to account-lock

Getting Help

Examples

Example 1: Account-lock a device

device-action account-unlock - Account Unlock Devices

Unlock the device for the calling user.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to account-unlock

Getting Help

Examples

Example 1: Account-unlock a device

device-action link - Link Devices

Link multiple devices together. When two devices are linked, logging into one device will activate the session for the other device, only if the session is resumable (persistent login or "Stay Logged In" has been activated for the account). Logout of one device logs out both devices.

Command Syntax

Parameters

  • DEVICES: Device IDs (1, 2, 3...) or device names to link together

Examples

Example 1: Link multiple devices by ID

Example 2: Link devices by name

device-rename - Rename Your Devices

Rename your devices to more descriptive (friendly) names.

Command Syntax

Parameters

  • DEVICE: Device ID (1, 2, 3...) or device name

  • NEW_NAME: New name for the device

Examples

Example 1: Rename device by ID

Example 2: Rename device by name

Enterprise Device Commands

Note: Enterprise device commands require administrator privileges and are available in the Enterprise section of the help menu.

Enterprise device commands are not be available in the production environment until October 2025

device-admin-list - List All User Devices (Admin)

List all devices across users that the Admin has control of.

Command Syntax

Parameters

  • ENTERPRISE_USER_IDS: List of Enterprise User IDs (required)

  • --format: Output format (table or json). Default: table

  • --output: Output file name (ignored for table format)

How to Get Enterprise User IDs

Examples

Example 1: List devices for specific users

Example 2: List devices for single user

Example 3: List devices to JSON

Example 4: Save to file

device-admin-action - Perform Actions on User Devices (Admin)

Perform various actions on one or more devices that the Admin has control of.

Command Syntax

Getting Action-Specific Help

Admin Device Action Commands

device-admin-action logout - Admin Logout Users

Logout users from their devices as an administrator.

Command Syntax

Parameters

  • ENTERPRISE_USER_ID: Enterprise User ID whose devices to act on

  • DEVICES: Device IDs (1, 2, 3...) or device names to logout from

Getting Help

Examples

Example 1: Logout user from specific device

Example 2: Logout user from multiple devices

device-admin-action remove - Admin Remove User Devices

Remove users from their devices.

Command Syntax

Examples

Example 1: Remove user from device

device-admin-action lock - Admin Lock User Devices

Lock user devices as an administrator.

Command Syntax

Examples

Example 1: Lock user's device by name

device-admin-action unlock - Admin Unlock User Devices

Unlock user devices as an administrator.

Command Syntax

Examples

Example 1: Unlock user's device

device-admin-action account-lock - Admin Account Lock

Account-lock specific user devices as an administrator.

Command Syntax

Examples

Example 1: Account-lock specific user device

device-admin-action account-unlock - Admin Account Unlock

Account-unlock user devices as an administrator.

Command Syntax

Examples

Example 1: Account-unlock user device

For more information about Keeper Commander, visit the Commander CLI Documentation.

PreviousRecord Type CommandsNextSharing Commands

Last updated

Was this helpful?