# KeeperDB 1.8.3

## KeeperDB 1.8.3

**KeeperDB** is a fast, secure, cross-platform database management tool. Use it inside KeeperPAM connections or as a standalone app on Windows, macOS, and Linux.

Query, explore, and operate PostgreSQL, MySQL, SQLite, Microsoft SQL Server, Oracle, and Amazon Redshift from one interface.

KeeperDB is built for engineers and data scientists. It replaces legacy tools like DBeaver, MySQL Workbench, and pgAdmin. In KeeperPAM, it brings core database workflows into a fully managed passwordless experience.

### Standalone Desktop App

{% hint style="info" %}
Download from <https://www.keepersecurity.com/download.html?t=db>
{% endhint %}

<figure><img src="/files/6jWSIQGZQUa5qNArzsYH" alt=""><figcaption><p>KeeperDB Desktop Login</p></figcaption></figure>

<figure><img src="/files/ElqkLM0jhHCUXPz2oTIb" alt=""><figcaption><p>KeeperDB Desktop User Interface</p></figcaption></figure>

### KeeperPAM Connection

Integration with the PAM Database connection resources is available with the latest Vault 17.6 and Keeper Gateway 1.8.0.

<figure><img src="/files/uPoJBpmY0vCqLArTbhQe" alt=""><figcaption></figcaption></figure>

### Features

* **Cross-platform native app** for Windows, macOS and Linux
* **PostgreSQL**, **MySQL**, **SQLite**, **Microsoft SQL Server**, **Oracle**, and **Amazon Redshift** — all from one tool, with consistent UI and behavior across protocols
* **Query editor** with SQL autocomplete (Ctrl+Space), multi-statement execution, and a record view toggle
* **Data browser** with paginated grids, filtering and CSV/JSON export
* **Notebook** for combining SQL and Markdown cells into reusable analyses and runbooks
* **ER diagram** for visualizing schema relationships
* **Monitor** for real-time process activity, blocking chains, locks, server parameters, and one-click process termination — protocol-aware for PostgreSQL, MySQL, MSSQL, and Oracle.

#### KeeperAI built in

* A **context-aware AI assistant** that sees your structure and live performance data
* Bring your own AI provider: **OpenAI**, **Anthropic**, **Google Gemini**, **AWS Bedrock**, **Google Vertex**, **Azure OpenAI**, or any OpenAI-compatible endpoint
* **Autonomous agent loop** for multi-step tasks like query optimization, error triage, and performance investigation
* "**Ask KeeperAI**" available directly from the ER diagram

#### Security and enterprise readiness by default

* **Zero-knowledge:** session credentials are saved to the secure storage (Keychain) never written to disk in plaintext
* **Mandatory confirmation flow** for destructive queries
* **Backend limit enforcement** and pagination on every query — built for enterprise-scale schemas without runaway result sets

### Architecture

Built for performance and security. KeeperDB is built as a single self-contained Rust binary — no Java runtime, no Electron, no separate components to install or update. The result is a fraction of the memory footprint of JVM-based tools like DBeaver, near-instant startup, a much smaller security attack surface, and a signed installer that ships as one compact native app instead of a multi-hundred-megabyte distribution.

### Credential Storage

KeeperDB Desktop stores credentials in the **OS-native secret store** on every platform. All entries are stored under the service identifier `com.keepersecurity.keeperdb`.

| Operating System | Storage Backend                                                                                                                                               |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **macOS**        | Keychain Services (login keychain). Visible in `Keychain Access.app`.                                                                                         |
| **Windows**      | Windows Credential Manager (Generic Credentials). Visible under **Control Panel → Credential Manager → Windows Credentials**, or via `cmdkey /list`.          |
| **Linux**        | freedesktop Secret Service over D-Bus. Backed by **GNOME Keyring**, **KDE KWallet**, or **KeePassXC**, depending on which is running in your desktop session. |

### What is stored

* **Saved connection passwords** — only when you explicitly choose to save a connection in the UI
* **AI provider API keys** — OpenAI, Anthropic, AWS Bedrock, Google Vertex, Azure OpenAI, etc.

### What is *not* stored on disk

* **Live session credentials** for the currently-connected database live **only in memory** and are never written to disk. If you restart KeeperDB, you must reconnect.
* The next update to [Keeper Forcefield](https://www.keepersecurity.com/forcefield-endpoint-protection/) will also protect the application memory on Windows devices to protect against local malware. This will be released later in May 2026.

### Get KeeperDB

The standalone KeeperDB Desktop App is available from our download page:

<https://www.keepersecurity.com/download.html?t=db>

### Roadmap

KeeperDB is a new product and we have a large roadmap planned. We will be publishing weekly updates based on customer feedback. If you have any feature requests or bugs, please contact <pam@keepersecurity.com> or post on our [Reddit community page.](https://www.reddit.com/r/KeeperSecurity/)

### Resources

* [KeeperDB Documentation](/en/keeperpam/privileged-access-manager/keeperdb.md)
* [KeeperDB Proxy Documentation](/en/keeperpam/privileged-access-manager/keeperdb-proxy.md)
* [KeeperDB Feature Page](https://www.keepersecurity.com/features/keeper-db/)
* [KeeperAI Documentation](/en/keeperpam/privileged-access-manager/keeperai.md)
* [KeeperPAM](https://www.keepersecurity.com/privileged-access-management/)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/en/release-notes/desktop/keeperdb/keeperdb-1.8.3.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
