Older release note content is still available, but anything older than the last 10 updates is placed here.

Bug Fixes

• KDE-1317: Debian package compatibility issues

• KDE-1318: RPM package compatibility with CentOS7

Bug Fixes

• VAUL-5551: Extension not auto-logged in if installed while Web Vault currently logged in

• VAUL-5547: Right-click menu is showing different options when in different areas of the vault

• VAUL-5529: Shared Folder "Add User" search/suggest list includes people already in the folder

• VAUL-5563: Vault crashes when a user with "Prevent sharing records with file attachments" enforcement deletes a record.

Improvements

• VAUL-5565, VAUL-5327, VAUL-5458, VAUL-5325, VAUL-5404: 508 Compliance items

• VAUL-4772: Removed all legacy jquery/jquieryui references

• VAUL-5559: Roboform import issues

• VAUL-5090: Auto-select custom field title when clicking Edit

• KDE-1308: Update Electron to latest v20 patch version

• KDE-1314: Remove legacy Windows installers

Features

• VAUL-5409: Support for JP and CA regions

Bug Fixes

• VAUL-5546: BreachWatch re-scanning records repeatedly

• KDE-1301: TOTP QR code scanning window not working

Features

• Share Admin Keeper's Share Admin feature is a role-based permission that gives administrators elevated access rights over your organization's shared folders and shared records. Share Admins have full user and record privileges for any shared record that they have access to. See: https://docs.keeper.io/enterprise-guide/share-admin

• MSP to Managed Company Team Sharing Directly share folders to Managed Company teams

• General to Record Type Conversion You can now right-click to change the type of any record, including migration from the legacy "General" record types. Multi-select + right click allows migration of multiple records at once.

• Default Record Permissions Quickly set permissions during the creation of a Shared Folder

• Default Folder Settings moved into the "Settings" tab In addition, you can now apply permission changes recursively and retroactively.

• Shared Folder UI improved visibility Several enhancements to the UI which improve the visibility and management of Shared Folders.

• Team Visibility There is now a "View Team" function in several locations so that you can see who you're sharing to.

• Collapsed View of Records When a folder contains subfolders and records within subfolders, you can now collapse the view, in order to apply changes recursively. Select "Show subfolder records" to collapse the list.

• Retroactively apply permissions When "Show subfolder records" is selected, the Settings tab will display a checkbox called "Apply permissions to all subfolders" which will apply the default folder settings to all existing records within folders and subfolders.

Bug Fixes

• KDE-1273: Touch ID shows as "enabled" for users after an app reset

• KDS-1277: Custom Record Template showing "Discard Changes?" on save

• VAUL-4849: Showing content security policy error in console on login

• VAUL-5362: EU data center BreachWatch errors for users on a free trial

Improvements

• Added support for Password Manager Pro import

• Added support for generic .xls or .xlsx file import

Bug Fixes

• Multiple Tickets: Several UI bugs, translations and visual fixes

• VAUL-5307: SMS support for Trinidad and Tobago

• VAUL-5260: Payment card phone number saves incorrectly

• VAUL-5344: Removed Duplicate detection button for now due to inconsistencies

• KDE-1255: Touch ID setting turns off when signing in with the Laptop lid open

• KDE-1228: Canceling the Yubikey setup and login flow gives error

• KDE-1254: Filling from KeeperFill for Apps with German keyboard issues

• KDS-1244: Filling from KeeperFill for Apps with French keyboard issues

• KDE-1269: After logout, KeeperFill for Apps not selecting proper region (Govcloud)

• KDE-1274: KeeperFill for Apps with Privacy Screen not working in Microsoft Edge

Improvements

• VAUL-5320: Additional confirmation upon deletion of a Shared Folder

• KDE-1266: Added ability to delete account for Mac Store consumer version

Features

• VAUL-5165: Offline Create/Edit Record capability

• VAUL-5181: New UI for login screens

• VAUL-5031: Hundreds of new website logos added

• VAUL-5208: Additional 508 compliance / accessibility updates

• KDE-1253: Enterprise enforcements for Desktop App distribution defaults. This allows the Admin to define the default SSO Domain and Data Center location. Detailed instructions available at this link: https://docs.keeper.io/enterprise-guide/deploying-keeper-to-end-users/desktop-application#enterprise-configuration

Bug Fixes

• VAUL-5295: CSV Import GUI fixes

• VAUL-5095: Unable to ignore BreachWatch record which has edit rights

• VAUL-5045: BreachWatch can indefinitely alert about a breached record

• VAUL-5257: Second login required to send security audit data to the Admin Console.

• VAUL-5251: Unable to export records with the Login record type restricted by admin.

• VAUL-5248: Create Duplicate feature appearing for records that have Privacy Screen enabled.

• VAUL-5270: Processing pending team members can sometimes cause the vault to display no data.

• KDE-1220: KeeperFill for Apps compatibility issues with Apache Guacamole / Keeper Connection Manager running on a Mac host.

• Several small UI bug fixes

Improvements

• KDE-1246: Upgrade Electron framework

• KDE-1261: 10x speed improvement on file uploads for large file attachments.

Features

• VAUL-5029: Introducing One-Time Share. See the Admin Guide and End-User guide for more details.

• KDE-1214: Support for M1-based Macs. Our download page provides install links for the .dmg file and the Mac App Store. The .dmg file contains both Intel and M1 Mac binary builds.

Improvements

• VAUL-5021: Additional support for 508 compliance in Secrets Manager and other functional areas.

Bug Fixes

• VAUL-5228: Unable to recover account with WebAuthn as the 2FA method

• VAUL-5233, VAUL-4958, VAUL-5232: Several issues with File Upload failures

• VAUL-5164: Support for Dashlane import with Argon2D and PBKDF2 200k iterations

• KDE-1233: Crash on Windows Server 2012 R2 on SSO Login

• KDE-1237: Tab key not being sent to Citrix client use Native App Fill

Features & Improvements

• VAUL-5035: Ability to convert "general" to new Record Types

• VAUL-4879: Role enforcement to activate Stay Logged In

• VAUL-4893: Role enforcement to enable Self Destruct

• VAUL-5201: Improved performance of uploads and downloads

Bug Fixes

• VAUL-5187: QR Code upload fails for certain formats

• VAUL-5202: MyKi and 1Password TOTP record imports are not autofilling*

  (*) To resolve existing records, run the verify-records command in Keeper Commander.

• VAUL-5191: TOTP and custom fields not available in CSV export

• VAUL-5195: Field validation on custom field Phone Number not working properly

• KDE-1224: Linux app shows blank screen when using Yubikey

• KDE-1222: Login on desktop app with Touch ID and Yubikey not working properly

• KDE-1218: Default password generator in KeeperFill for Apps not including symbols

• KDE-1223: Desktop App not maintaining disabled logout timer setting

Features & Improvements

• KDE-1090: Upgraded Electron framework to 17.x

• KDE-1203: Added a new Hot Key for filling TOTP codes (Ctrl/Cmd+Shift+T)

• KDE-1206: Added {SPACE} keystroke for KeeperFill for Apps typer feature

• VAUL-5047: Added Passportal Import tool

• VAUL-4597: Added Record UID to BreachWatch events for Advanced Reporting & Alerts module.

• VAUL-5140: Improved speed for large vaults

• VAUL-5160: Improved 1Password import which includes TOTP codes

• VAUL-5184: Improved MyKi import to support TOTP codes

Bug Fixes

• KDE-1200: Crash when running Keeper Desktop on Fedora 35

• KDE-1207: KeeperFill hotkey filling improvements over VMWare, Datto RMM and other remote desktop tools.

• KDE-1065: KeeperFill for Apps not working over RDP with french keyboard

• KDE-1117: Touch ID with IP restriction and offline access not working

• KDE-1087: "Unable to connect" error when using KeeperFill for Apps

• KDE-1118: KeeperFill for Apps with Touch ID and Webauthn hangs on login

• KDE-1181: Whichever method signed in last (master password or biometric) is only able to be used offline. So if you last signed in with master password, signing in offline with master password works. But if you last signed in with touch id, signing in with touch id offline works.

• KDE-1132: KeeperFill for Apps using "Generate password" has issues when loading the main desktop app.

• KDE-1183: Native App Filler clicking tray changes focus

• KDE-1099: Offline mode not working with IP restriction is activated

• KDE-1186: SSO user logging in with Biometric is logged out to the wrong screen

• KDE-1209, KDE-1210: LastPass import improvements and error handling

• KDE-1213: Crash when setting up the OnlyKey security key hardware device

• KDE-1217: Searching for Typed records within Shared Folder paths fails

• VAUL-5092: Copying UID from Safari 15 user interface fails

• VAUL-5102: Switching to Keeper DNA push method not showing correct screen

• VAUL-5113: Secrets Manager app details GUI not showing correct permissions

• VAUL-5107: Allow viewing and copying of Notes if the masking and privacy settings are activated.

• VAUL-5098: After deleting a security key, toggle of 2FA doesn't visually show the action

• VAUL-5114: Enforcement policy of re-authentication when revealing password was not working properly

• VAUL-5153: Web Vault is saving phone number fields with formatting, which caused other client apps to crash.

• VAUL-5155: Automatically fixes formatting issues from Android record data

• VAUL-5156: Re-sharing a shared Record Type record that contains file attachments fails

• VAUL-5154: UI issues when linking to Emergency Access screens

• VAUL-5144: Multi-select and bulk edit not working properly in List View

• VAUL-4933: Repaired Avast import

• VAUL-5157: Import from legacy records missing TOTP field

• VAUL-5163: QR codes from Okta Verify are showing empty fields

• VAUL-4949: Can't type spaces when searching through the country names

• VAUL-5185: Searching not matching on general record types with custom field values

Bug Fixes

• Resolve data import issues with version 16.4.2 that caused crashes on the Browser Extension and Android app. See resolution page: --> View Page

Features & Improvements

• KDE-1193: Include TOTP fields in LastPass automated import

• KDE-1178: Include file attachments in LastPass automated import

• VAUL-5133: Add checkbox to make LastPass shared folder imports optional

Bug Fixes

• VAUL-5143: Error message first time you drag-and-drop a file attachment into a record

Features and Improvements

• KDE-1111: Native App Filler custom field type for Record Types which provides automated filling of native applications with application title matching, keystroke macros and advanced OCR for recognition of window content for automated record selection. More information about this feature can be found here:

  https://docs.keeper.io/user-guides/keeperfill-for-apps#native-app-filler

• VAUL-4907: Support for Webauthn with automatic U2F->Webauthn transition

• VAUL-4945: Import/Export support for Record Types

• VAUL-5069: Support for Psono password import

• VAUL-5006: Support for partial email search during Sharing for customers with over 500 users.

• VAUL-5046: Display changes made on the record history screen

• VAUL-5063: Allow record owner to change URL on Privacy Screen records.

• VAUL-5016: Allow users in a shared folder to duplicate records

• VAUL-4989: Allow users who are shared to a record (non-owner) to duplicate records

• KDE-999: Automated LastPass import will convert Templates and Custom Fields into Keeper Record Types and Custom Fields

Bug Fixes

• KDE-1185: Conditional access blocking usage of Desktop App in certain environments

• VAUL-5067, VAUL-5073: Secrets Manager client device bug fixes

• VAUL-5968: SSO Cloud login hangs when the device has been locked

• VAUL-5066: Using custom record types when offline generates errors

• KDE-1145: SSO users who select 2FA setting "remember 30 days" are still being prompted every time.

• VAUL-5064: Custom record type that requires a file isn't allowing save

• VAUL-5083: Default folder settings are not viewable in folder view screen

• VAUL-5054: Custom record type titles are not providing auto-suggestion

• VAUL-5088: Bitwarden import of TOTP fields

• KDE-1102: Improved handling of logout timer on desktop application

• KDE-1097: LastPass imported custom fields truncated

Bug Fixes

• VAUL-5079: Unable to login with Internet Explorer 11

Improvements

• VAUL-5032: 508 Accessibility updates (checkboxes, menus, contrast and resizing)

New Features and Improvements

• VAUL-4710: Secrets Manager user interface is now generally available on the Keeper Web Vault and Desktop App. For more information about Keeper Secrets Manager, see:

  https://docs.keeper.io/secrets-manager

• VAUL-4904: Visual improvements and workflow improvements for Record Types template creation.

• VAUL-5062: Added MyKi password manager to Keeper Import screen

Security Updates

• VAUL-5038: Migrated from webpack4 to webpack5

• KDE-1163: Additional changes to ensure that logout clears all memory. User-initiated logout performs full restart of the Keeper Desktop application.

Bug Fixes

• KDE-1164: KeeperFill for Apps will only process hotkeys when a record has been selected. This prevents conflicts between existing hotkeys and KeeperFill.

• KDE-1169: Sync errors after deleting a Shared Folder

• KDE-1168: "Object no longer exists" error when switching between KFFA and Desktop App

• VAUL-5039: Record Type fields saving the translated label

• VAUL-5041: Importing CSV with limited columns can throw an error

• VAUL-5042: Can't view notes when Privacy Screen is ON and Masking is ON

• VAUL-5049: Can't change the record type (causes crash)

Improvements

• KDE-1150: Support for CCH Axcess native app autofill

• VAUL-4991: Changed Software License Number to a hidden field

Bug Fixes

• KDE-1157: Improved support for Azure Conditional Access

• KDE-1156: Remove use of legacy windows registry key which generates a report in Cybereason

• VAUL-5036: Restore of Record Type records

• VAUL-5018: Showing "unexpected error" when creating user accounts with a pending transfer acceptance

• VAUL-5000: Prevent record copy when Record Type is restricted by role enforcement

• VAUL-4978: When sharing is disabled, the action silently fails when adding a user to a shared folder.

• VAUL-5014: Edit and Delete actions in the Grid View don't work

• VAUL-4964: "Unknown sharing error" when the user's email has never been verified.

• VAUL-4999: Error when trying to edit a custom Record Type when the type is restricted.

• VAUL-5030: Importing records can generate an app crash

• VAUL-4869: Import column selections don't persist when there are many fields to map

• VAUL-5001: During import of CSV, column changes are lost when scrolling horizontally

• VAUL-4934: Large number of image attachments in a record can generate errors when loading thumbnails.

Bug Fixes

• VAUL-5024: Record Type records not syncing after activating Record Types

• VAUL-5018: Showing "unexpected error" when creating account with a pending transfer acceptance

• VAUL-4578: Account recovery failure on a new device

• VAUL-5000: Prevent record copy when record type is restricted by role enforcement

• VAUL-4978: When sharing is restricted, user receives no visible error when sharing and it fails silently

• VAUL-4906: Unknown Sharing Error when email is not verified

• VAUL-5023, VAUL-5017: Record type errors with Bank Account and Payment Cards

• VAUL-5030: Browser Extension causes forced logout after importing records

• Support for Safari 15 automated password import

New Features & Improvements

• Support for Azure Conditional Access on the Keeper Desktop application for users who login with Single Sign On. Previously, Azure Conditional Access policies could not be added to Keeper.

• Increased the number of special characters used in the password generator to this set:

  !@#$%()+;<>=?[]{}^.,

• Support for cookie persistence on the Keeper Desktop application for users who login with Single Sign On. This reduces friction and steps for users who sign in often.

• Support for additional SAML SSO identity providers and elimination of any browser type recognition issues.

• Keeper Desktop now allows users to remain logged into their SSO identity provider. If you choose to remove Single Logout (SLO) from the SSO configuration, the user will not be logged out of their identity provider when they logout from Keeper. For more information about Single Logout configuration see the link below: https://docs.keeper.io/sso-connect-cloud/logout-configuration

• 🇺🇸 Support for the Amazon AWS GovCloud environment. Keeper is currently FedRAMP in-process and public sector entities can now establish their Keeper tenant in the GovCloud environment. Contact the public sector sales team at govsales@keepersecurity.com for more information.

• Support for the upcoming Compliance Reports feature. The Vault will encrypt appropriate compliance data from records and send it to the Admin Console. There is no change to the end user experience in the Vault.

• Added a Region Selector in login screens and KeeperFill for Apps

• Users on the Web Vault are encouraged to download the Desktop App for performing automated transfer from LastPass.

• Import from Bitwarden now supports TOTP seeds for Two-Factor Authentication.

• Import from Bitwarden now supports multiple URL fields.

Bug Fixes

• VAUL-4848: 1Password import not importing secure notes field

• VAUL-4851: Safari Sierra and High Sierra not importing passwords

• VAUL-4852: Import token invalid in AU region

• VAUL-4543: User cannot save an address that does not have a title

• VAUL-4586: Access Delay for Emergency Access displays incorrectly

• VAUL-4640: Long security answer blocks user from using Account Recovery

• VAUL-4797: Clicking the dice button on an existing record should not reduce the complexity.

• VAUL-4911: Kaspersky import fails when the data contains certain reserved words

• VAUL-4946: Card type not being displayed when typing in the credit card number

• VAUL-4960: File drag-and-drop into a New record is not being saved on first try

• VAUL-4941: Hebrew language is showing the TOTP code in reverse order

• Multiple Record Types bug fixes. Learn More about the upcoming record types feature.

Accessibility (508 Compliance)

• Keeper has been making UI changes across all web-applications and browser extensions to comply with Section 508 of the Rehabilitation Act (29 U.S.C. § 794d). The Keeper Web Vault and Desktop App now supports keyboard navigation and they are compatible with popular screen readers and other assistive technology.

Features and Improvements

• KDE-1079: Packaged an all new Safari browser extension with the latest features as Chrome, Firefox and Edge extension.

• KDE-1080: Added support for Windows Hello role enforcement policy

• KDE-1081: Upgraded the Electron framework to v12.0.9

• VAUL-4692: Add clarification around the minimum security answer length requirements

• VAUL-4588: Initial Support for 508 Compliance across Web Vault and Desktop Application

• VAUL-4694: Unless disabled by role enforcement policies, users will be required to configure Account Recovery instead of indefinitely delaying

• VAUL-4750: Simplified the new customer experience when purchasing Keeper prior to creating free Vault account.

• VAUL-4822: Improved the embedded image viewer

• VAUL-4092: Added Bitwarden to the available import formats

Bug Fixes

• KDE-1092: LastPass automated import broken for certain users due to iterations settings.

• VAUL-4830: 2FA enforcement with SSO user causes extension and vault to be out of sync during login.

• VAUL-4836: Auto-suggestion drop-down fills the entire screen when there are very long URLs stored in the vault.

• VAUL-4838: "Ghost" records in vault when deleting a shared folder containing an owned record

• VAUL-4840: Gracefully handle scenarios where team keys cannot be decrypted

• KDE-1073: UI issues caused when the vault logs out while push notifications are in front.

• KDE-1085: Denying the password importer prompts can lead to a frozen Keeper Desktop app.

This is a bug fix release that mainly focuses on the new Record Types feature (still in beta). Therefore most customers are not affected by the bug fixes listed below.

Bug Fixes

• KDE-1077: Logout from KeeperFill for Apps generates an error

• KDE-1067: Record Type creation not using the generated password

• VAUL-4811: Australia data center link to Keeper Importer generates 404

• VAUL-4784: Edit button missing

• VAUL-4790: Decryption issue with Linked Record Types

• VAUL-4786: Privacy Screen is hiding notes and custom fields

• VAUL-4789: Uploading large number of files produces "throttle" errors

• VAUL-4791: Decryption errors inside Shared Folders with Record Types

• VAUL-4667: Error message when using Account Recovery flow

• VAUL-4524: BreachWatch status failure with "status 400"

• VAUL-4787: Vault grid view now showing new Record Type icons

• VAUL-4800: Sharing and Emergency Access showing confusing messages

• VAUL-4805: Deleting shared record not showing in Deleted Items

• VAUL-4810: Newly attached files not creating record links, produces error with Record Types

• VAUL-4825: BreachWatch admin reports not getting updated

Improvements

• KDE-1072: Update Electron Framework to 12.0.6

New Features and Improvements

• Introducing Record Types for Web Vault & Desktop App (Limited Release) This release introduces a powerful new feature called "Record Types", which gives users the ability to create records of various template types, grouped into categories, each containing a unique collection of field types and functionality fields within the record. Record templates can be created by Admins that are custom to the needs of the business. This feature is only available for Enterprise customers, activated on an individual basis at this time, because the Browser Extension, iOS and Android apps are still under development. If you are interested in being an early adopter of Record Types, please contact your customer success team member at Keeper and we'll activate the feature.

• Generate a Password in KeeperFill for Apps Keeper's password generator is now within easy reach in the KeeperFill for Apps toolbar landing screen. Users can generate and copy the secure password or use it to create a new record.

• Comprehensive Keyboard Command Functionality for KeeperFill for Apps

• Support for NTLM Authentication for Microsoft Windows Customers

Bug Fixes

• KDE-959: The "Session Timed Out" dialogue appears when logging into a different account after a session timeout occurs

• KDE-1034: When a user attempts to switch from US to EU region at login, an Uncaught TypeError is returned

• KDE-977: Selecting "Create an Account" in KFFA opens the login page on Keeper Desktop

• VAUL-4721: The "Admin Console" button in the Vault fails to redirect Enterprise users to the console

• VAUL-4516: Users are prompted for their 2FA code twice when logging into EU SSO Cloud account

New Features & Improvements

• Expansion to AU Data Center - Keeper now supports an AU data center. Users have the option to select "AU" from the region selector at login for Keeper Desktop App.

Bug Fixes

• KDE-1043: Horizontal scrollbar appears in record details

New Features

• New "Shared Records Report" added to the Export screen: https://docs.keeper.io/user-guides/export-and-reports/shared-records-report

Bug Fixes

• Operations that required re-authentication (e.g. export, reset master password, etc) were not accepting the password, if the session was resumed from a page reload or "Stay Logged In". This has been resolved.

Features

• KDE-990: Support for logout timer with more than 1440 minutes

Bug Fixes

• KDE-1021: Errors when logging into Azure

• VAUL-4643: Login hangs when a user converts from Master Password to Cloud SSO

• VAUL-4644: Record "info" screen is not showing the user who made the change

• KDE-839: Update Electron framework dependencies

• KDE-1009: Update Electron framework

• KDE-1005: Touch ID + Yubikey + using a backup 2FA method fails login

• KDE-1007: Signing in on KeeperFill for Apps using SSO and Duo not receiving verification email

• KDE-1013: Clicking to copy a field sometimes didn't copy

• KDE-1011: Better handling of Logout Timer setting

• KDE-990: Logout Timer improved handling and support for more than 1440 minutes

• KDE-1018: Windows Hello activation issue on Microsoft Store version

Bug Fixes

• VAUL-4643: Login hangs when a user converts from Master Password to SSO Cloud login.

• VAUL-4644: Record "info" screen sometimes does not return the user information in Last Modified date.

Bug Fixes

• REL-3160: Import instructions for Avast are missing

Improvements

• VAUL-4589: Support for Avast password import

Bug Fixes

• KDE-991: KFFA allows for special characters during hotkeys setup

• KDE-993: Defined hotkeys are still active when the Vault window is closed

• KDE-994: Keeper Desktop app fails to install on Windows 10 20H2

• VAUL-4557: Error message intermittently appears upon logout

Bug Fixes

• VAUL-4584: CSP error upon loading Web Vault v15.0.12

• KDE-989: JavaScript runtime error upon launching Keeper Desktop on Mac (Big Sur)

Improvements

• VAUL-4547: Support for Kaspersky password import

• VAUL-4552: Admins now receive a warning before removing themselves from a shared folder

• VAUL-4566: Improved performance handling of vaults with large data sets

• VAUL-4551: Enterprise users to receive notification with explanation for Master Password change and complexity requirements upon login

Bug Fixes

• KDE-945: User receives error message after closing Desktop App and relaunching

• KDE-962: "About Keeper" options menu fails to appear after first launch of Desktop App on Windows

• KDE-972: KeeperFill for Apps fails to respond to hotkeys when switching between apps

• KDE-973: Recipient of a shared record is required to login again after the shared record has been edited

• KDE-903: Hotkey "CMD+TAB" focuses on KeeperFill for Apps when hidden instead of Desktop App (Mac)

• VAUL-4560: Deleting a record shortcut also deletes the original record

• VAUL-4468: Importing CSV records with "can edit" permission does not set permission

• VAUL-4562: Entering an email address with a trailing space at login generates an error message

• VAUL-4574: Sharing a folder causes login errors for the sharing user

Bug Fixes

• VAUL-4549: Unable to reset Master Password with Browser Extension v15.0.2 installed

• VAUL-4548: Master Password reset hangs when session is resumes via "Stay Logged In" feature

• VAUL-4556: Shared folder/record invitation is not appearing on login

• KDE-975: Javascript error appears when opening Desktop Electron from Safari Extension

Special Notes

• Password Complexity requirements are checked upon every login, not just during Master Password Reset. If you have a user being asked to change your Master Password, they are likely using a password that does not meet the policy requirements.

• Keeper prompts for 2FA prior to Master Password entry. This is part of our new Login V3 security model.

New Features

• VAUL-4470: Addition of "Stay Logged In" on the Settings > Security screen.

• VAUL-4539: Automated Safari / iCloud Keychain password import

Improvements

• KDE-868: Improved handling of KeeperFill for Apps filling through ConnectWise Control

• KDE-951: Improved handling of Microsoft 2FA token when scanning into the vault record

• KDE-870: Implementation of more secure "Copy" feature utilizing Microsoft API (Learn More)

• KDE-948: Allow KeeperFill for Apps widget to be moveable

• KDE-950: Implement basic keyboard navigation for KeeperFill for Apps menu system

• VAUL-4499: Increase length of Password Generator maximum length

• VAUL-4190: Right-click on "My Vault" to provide quick functionality within the vault

• VAUL-4495: Direct all new users to install of v15 Browser Extension instead of v14

• VAUL-4470: Improved handling of "Stay Logged In" feature across Vault, Desktop App and Extension

Bug Fixes

• VAUL-4502: Very large Keepass imports timing out

• VAUL-4492: Duo Push not adhering to 2FA duration setting for re-prompt

• VAUL-4511: PDF Export failing with error

Stay Logged In

This feature keeps the user's session active for the amount of time as set by their Logout Timer, even between browser and computer restarts.

For example if your logout timer is set to 30 minutes, you'll stay logged into Keeper for 30 minutes no matter which browsers you open and close, or if you restart your computer. "Stay Logged In" has been our most highly requested feature from customers.

Turning Off Stay Logged In

If you don't want this feature enabled, and you would like to disable this capability for yourself or all your users, there are two ways of controlling it:

(1) From the Admin Console go into the Role > Enforcement Policies > Account Settings and turn on the "Disable Stay Logged In" option. This will restrict the feature for users in the role and they will be unable to turn this feature on.

(2) For your own account, open the Keeper Desktop Application and go into Settings > Security and turn off Stay Logged In.

Bug Fixes

• VAUL-4472: "Salt/Iterations" error message when Master Password user tries to login with the SSO Alternate Master Password login screen.

• VAUL-4491: Unable to login on Chromium Edge from Extension in Microsoft Store version.

• VAUL-4494: Occasional failure to process Admin Approval for device approval step.

• VAUL-4265: Pressing "Enter" key while entering text in Japanese characters had unexpected results.

• KDE-941: Unexpected Logout occurring even if "Stay Logged In" enabled.

Bug Fixes

• VAUL-4487: Users who created their account prior to several years ago, who are part of an Enterprise without a Master Password policy, with a Master Password that is less than 10 characters, are being prompted to change their Master Password upon logging into the vault. However, the resulting flow is not enforcing the 10-character minimum, so the user may enter into a confusing loop. This issue is being fixed EOB today.

Improvements

• KDE-940: Removed legacy PBKDF2 Iteration settings

• KDE-939: "Stay Logged In" setting now appears on the Keeper Desktop application.

Bug Fixes

• KDE-933: Fix for minor UI display issue

• KDE-932: User unable to proceed past 2FA timeout screen and return to login upon clicking "OK" button when prompted

• VAULT-4478: Unable to login with SSO Cloud v15 in these scenarios: (1) Existing vault user, adds v15 extension, logging into the vault doesn't also login to the extension. (2) New vault device and new browser extension device, unable to login to the vault. The "push" screen blinks and hangs.

• VAUL-4482: User receives "You do not have the required privilege to perform this operation." when resetting their Master Password.

• VAUL-4483: User registration emails to create Vault with a Master Password do not work if the browser extension is pre-loaded on the device prior to receiving the invitation.

• VAUL-4484: User logging into the Extension is forced to change Master Password when complexity rules change. However, the Web Vault was not forcing prompt.

• VUL-4479: Account Recovery + Duo Push providing "invalid code" after submitting.

Enhancements & Benefits

• VAUL-4459: SSO Cloud users are able to auto-login and logout to the vault and browser extension simultaneously.

• VAUL-4400: Implementation of file attachment support for KDBX file format

• KDE-929: At login, the region automatically defaults to the region the user most recently has used

Bug Fixes

• VAUL-4471: The vault stores a cache for vault_login, overwriting new user Enterprise email invitations

• VAUL-4463: Excessive update_security_data requests are dispatched

• VAUL-4427: User unable to connect via Cloud SSO using Edge 44 and Firefox browsers

• VAUL-4311: Fix to allow the import of empty custom field values

• KDE-926: DUO push fails in EU accounts

• KDE-923: Windows Hello login fails in EU accounts

• KDE-919: "Clipboard Expiration" option missing from Settings menu

Features & Enhancements

• Login V3 General Availability (GA) More information available here: https://docs.keeper.io/enterprise-guide/login-api-v3

• Support provided for Touch ID and Windows Hello Login at the expired session screen

Bug Fixes

• Fixed: Accounts containing imported passwords do not calculate audit scores correctly.

• Fixed: Various login screen display issues causing various login/logout side effects (Safari).

• Fixed: When a user attempts to close the quick start module upon first login to the Web Vault, an error is triggered and window closes.

• Fixed: Logging out while in Offline Mode, generates an "Internal Error" message.

• Fixed: Canceling a Windows Hello Login, generates an "Error" message.

• Fixed: KeeperFill for Apps crashes when user attempts to search their records.

• Fixed: User unable to back out of the login screen once "Touch ID " is selected (Mac OS).

Bug Fixes

• Fixed: The Web Vault logs out ahead of the browser extension and generates error messages

• Fixed: Shared folder permissions changes do not automatically appear for users in detail view as expected.

Benefits & Enhancements

• Support Email Address Change - Enterprise (SSO) users now have the ability to change their email address from their Vault (if role enforcement policies allow).

Bug Fixes

• Fixed: The "record_open" ARAM event sends duplicate requests to the server when users are opening a record.

• Fixed: Users are prompted for 2FA Keeper Push approval twice.

• Fixed: First time login to the web vault from the browser extension fails in Firefox browsers.

Bug Fixes

• Fixed: New Enterprise users (non-SSO) are prompted for device approval prior to account creation.

• Fixed: User login to web vault from browser extension fails on IE11 browsers.

Benefits & Features

• New "Help" Button - A "Get Help" button has been integrated into the Vault login page. Upon clicking this button, the user will be prompted to select either "Forgot Master Password" or "Get Help". "Get Help" redirects the user to Keeper's Support page where our user guides and Support Team can be reached.

• Enhanced Enterprise Authentication Flow - Keeper has launched a new authentication flow for our customers with Enterprise plans that simplifies deployment and usability while enhancing security.

  • If Keeper recognizes an end user’s email domain as an SSO-enabled Enterprise, the user will be automatically routed to their identity provider instead of having to type in the Enterprise Domain string.

  • For Master Password users, if a device is recognized, and 2FA is activated, the user will receive a prompt prior to typing in their Master Password.

  • Keeper Push, Keeper’s proprietary notification-based device approval system, simplifies the device approval process without compromising security. Keeper will now support 2FA code entry from a TOTP or text message, or a push notification to an existing, recognized device.

Bug Fixes

• Fixed: An error message fails to appear when a user has reached device approval limit.

• Fixed: Upon logging into the vault, the device approval Keeper Push prompt displays a key value.

• Fixed: When an SSO user attempts to delete all their owned records they a incorrectly prompted to enter a Master Password.

• Fixed: An internal error message appears after a user denies DUO push verification.

• Fixed: InvalidKey error message appears in place of the correct KeePass translation string during import process.

Bug Fixes

• Fixed: The import instructions from a ZOHO file are incorrect causing fields to not parse correctly.

• Fixed: User receives error when attempting to import a .csv file with three fields.

• Fixed: Import instructions missing for JSON files.

• Fixed: Automated import form LastPass is unresponsive and no longer displays progress animation.

Features & Enhancements

• Privacy Screen - Admins now have the ability to control the viewing (unmasking) of passwords based on a specified domain. Additionally, it prevents the user from changing the website URL after the record has been saved. This policy is enforceable by the Admin for individual domains within each of their Generated Password Complexity settings by enabling "Apply Privacy Screen".

• Master Password Re-entry Enforcement - This role enforcement allows Admins to require their users to re-enter their Master Password in order to unmask or copy a password.

• Sharing & Uploading Enforcement Policy - This role enforcement policy allows Admins to prevent their users from importing records from Web App and Desktop App.

Bug Fixes

• Fixed: "Can Edit" and "Can Manage" text is not translated when a user attempts to import from a JSON file. Instructions for the JSON import feature have been updated and can be referenced here.

• Fixed: New user accounts prematurely display step 3 of the "Quick Start" walkthrough as completed.

• Fixed: Various issues related to the privacy screen feature within the Admin Console.

• Fixed: KeeperFill for Apps crashes when unlocking in offline mode.

• Fixed: The Keeper icon is missing from the dock on Linux operating systems.

Benefits & Enhancements

• Password Importer Update - The Keeper Import Tool has been updated to version 14.0.6, supporting Brave, Chromium and Edge browsers along with several bug fixes.

Bug Fixes

• Fixed: KeeperFill for Apps crashes when a viewed record is deleted or transferred.

• Fixed: Record edits made in KeeperFill for Apps are not displayed until after the user logouts/logins.

• Fixed: 401 error appears when a user redirects between US and EU accounts.

• Fixed: Users receive "exceeded_depth" error message in an attempt to delete a root folder with a large quantity of subfolders.

• Fixed: Issues with DUO push for back-up Two-Factor Authentication method and "Forgot Password" flow.

Benefits & Enhancements

• Support for Chrome v80 Password Import - Support established for the import of passwords from Chrome v80 and newer on Windows devices.

Bug Fixes

• Fixed: A blank page appears when a user navigates first to the Sharing feature of a record then to Security Audit.

• Fixed: A user receives "device_id" error upon editing an record.

• Fixed: Issue preventing a user from saving Personal Info after an edit has been made.

• Fixed: After the 2FA duration enforcement change has been made, system is unresponsive to DUO Push verification.

• Fixed: Creating a new account following a login to an SSO account, triggers an error notification.

Benefits & Enhancements

KeeperFill for Apps Redesign - This release entails a comprehensive design and technical update of KeeperFill for Apps, dramatically enhancing the user experience with the Keeper Desktop App. The Desktop App window can now be closed but remain running and accessed through the system tray via the familiar Keeper icon.

Many of the existing features of Keeper's Desktop App can now be applied through KeeperFill for Apps, such as: filling credentials and launching websites, viewing all records and favorites, adjusting settings, and accessing Keeper's User Guides. Additionally, within the Settings menu, the following KeeperFill hotkey actions can be customized by the user, further streamlining their experience with Keeper for Desktop:

• Launch KeeperFill

• Fill Username

• Fill Password

• Open Desktop App

• Logout

Bug Fixes

• Fixed: Users are not able to save a new billing address when it is created within the New Payment Card window.

• Fixed: The shadow of KeeperFill for Apps remains behind after the window has been closed.

• Fixed: In certain scenarios, a password import from newer versions of Firefox cause the Keeper Desktop App to crash.

Bug Fixes

• Fixed: SSO Connect login is unsuccessful using Firefox's Private Browsing mode.

• Fixed: Issue causing the SSO Connect link to hang on Microsoft Edge (non-Chromium) and Internet Explorer browsers.

Benefits & Enhancements

Imported Browser Password are Now Viewable - In order for users to verify what passwords have been successfully imported from their browser, the password characters are now viewable by clicking on the eye icon upon import.

Bug Fixes

• Fixed: Users receive two error messages during the import process from the KeePass database causing the import to fail.

• Fixed: An error message is received when a user attempts to cancel out of "Find Duplicates" from the Settings menu.

• Fixed: Empty subfolders are not included in a user's attempt to export from a .csv file.

• Fixed: The Recent Activity log in the admin console incorrectly reports a "changed identity" event when a user creates a new identity in the Personal Info section of their vault.

Bug Fixes

• Fixed: QR code scanning window is unresponsive when a user attempts to set-up Two-Factor Authentication.

Bug Fixes

• Fixed: "Sharing" screen fails to open when accessed from BreachWatch view.

• Fixed: Following a user's attempt to "Reset Keeper", the application fails to close.

• Fixed: Uploaded files over 4GB hang indefinitely at the end of buffering, preventing the user from saving the record.

• Fixed: Google IDP prevents some users from logging into SSO due to disabling Google's "Less secure app access".

Bug Fixes

• Fixed: A blue error screen appears when logging into the desktop app with U2F (universal 2nd factor)

  on MacOS (High Sierra).

• Fixed: Encrypted files are not uploading properly causing the user to receive an error message.

• Fixed: The "Empty Trash" function within Recently Deleted records is not working properly.

Features & Enhancements

• Support for Windows Hello This release introduces Keeper's compatibility with Windows Hello (available on Windows 10), a biometrics-based technology that allows users to authentic and log in to their Windows device using biometric facial recognition, fingerprint reader, or pin.

  • If Windows Hello is enabled on a user's device, this eliminates the requirement for users to enter their Master Password at the Keeper login screen, further expediting the login process.

  • Users can enable "Windows Hello Login" within their Vault's security settings. In doing so, at their next login to Keeper, Windows Hello will attempt to authenticate the user's identity. Once authenticated, the user will automatically be logged into Keeper.

  • Support for Windows Hello for Business is also included in this release.

Bug Fixes

• Fixed: Imported records from Password Boss are missing the URLs if they are contained under the "login_url" key.

• Fixed: Users that have an apostrophe in their email address receive an error message denying them access at the login screen.

• Fixed: Creating record shortcuts between shared folders are unsuccessful in certain scenarios.

Bug Fixes

• Fixed: A broken video appears within the KeeperFill window after a new record is created and saved in the Vault.

Bug Fixes

• Fixed: Comma delimited string of URLs are grouped into a singular custom field during a .csv import from 1Password's Windows application.

Features & Enhancements

• Support for Chromium-based Edge Extension - Keeper now supports communication with the Chromium-based Edge Extension recently available in the Microsoft Edge Addons Store.

• Password Import Instructions Update - password import instructions for csv files have been created for various password managers.

Bug Fixes

• Fixed: Some third party components of the Keeper desktop app that are not up to date.

• Fixed: External displays not detecting previous position of desktop app and returning it to the primary or current display if disconnection occurs.

• Fixed: Incorrect prompt received when user launches site from a record's URL on the updated Chromium-based Microsoft Edge browser.

• Fixed: Issue causing the Web Vault to prompt for the 2FA token after user logs into the browser extension and opts to remember 2FA token.

• Fixed: When creating an account, emails containing special characters are incorrectly being rejected, prompting an invalid error message.

• Fixed: Password Boss import failures.

• Fixed: Errors received when a user proceeds to log in to the Keeper browser extension upon logging out of their Web Vault (Firefox).

• Fixed: Importing records into a shared folder does not inherit the default folder settings that are enabled.

Features & Benefits

• Extension Connection Update - the browser extension connection has been updated to recognize the login type (SSO or normal) enabling it to seamlessly login to SSO accounts.

Features & Enhancements

• Launch Icon - A launch icon has been integrated into KeeperFill, allowing users to quickly navigate to a record's URL with one click from within their Vault.

• Password Boss Added as Import Option - Password Boss has been added to the extensive list of existing password managers users are able to import their passwords from (JSON file).

Bug Fixes:

• Fixed: Once configured, custom hotkeys for KeeperFill are not functioning properly when user closes and reopens app.

• Fixed: Desktop version does not retain the device token for two-factor authentication if a Web Vault enforcement is set (Enterprise customers).

• Fixed: Issues regarding Touch ID, including the added visibility of a prompt to initiate Touch ID at the login screen.

• Fixed: When registering for a new account (SSO), user receives an error message indicating their email address is already in use with that Enterprise SSO Login.

• Fixed: A blank screen appears when records are filtered to view only those with TOTP codes.

• Fixed: Language updates are not automatically reflected in the "Identity & Payments" section.

Bug Fixes:

• Fixed: An issue causing hotkeys such as Ctrl+N (create a new record) as well as some menu items, such as "New Record" to not function properly.

• Fixed: When a user authenticates with SSO on a EU domain

  a blank screen appears during login.

Enhancements & Benefits:

• The Chrome-sandbox permissions have been re-configured to allow the app to run correctly upon install.

Bug Fixes:

• Fixed: Unable to re-authenticate using touch ID and YubiKey from lock screen after auto-logout.

Bug Fixes:

• Fixed: A run time error that is causing DNA/RSA 2FA to not function properly within the Web Vault.

Bug Fixes:

• Fixed: Non-English locales show an "unable to connect" alert upon launching desktop app.

Bug Fixes:

• Fixed: Breach Watch performs an infinite scan when account contains 1000+ records.

• Fixed: Double error message appearing in personal information section when logging in with emergency access.

• Fixed: Duplicate records are not recognized when importing a previously exported .csv file.

• Fixed: After session timeout at login screen, email field is locked and user unable to input email address.

Bug Fixes

• Fixed: Password changes are not triggering events or alerts.

Features & Benefits

• Support for 2FA using Duo + Yubikey hardware security keys in OTP mode. When presented with Duo authentication, simply tap the Yubikey device and the OTP code is verified by the Duo Auth API integration.

• Improved the search algorithm of KeeperFill for Apps to mirror the search results of the Keeper Desktop main screen. This includes finding records stored within shared folders as well as custom fields.

• Upgraded the electron framework from 6.0.7 to 6.0.11.

• Upgraded the Keeper Safari Extension version to mirror the latest features and enhancements of KeeperFill Browser Extension v12.5.8.

• Enhanced the Import/Export capabilities to include stored Two-Factor Codes.

• Added color codes at the record level inside "Grid View".

• After auto-logout, user can tap on Touch ID in touch bar to activate biometric login.

• In the Folder View, you can now click on the chevron icon to expand/collapse the folder without selecting the folder.

Bug Fixes

• Fixed: When IP allowlisting on a role is enabled, logging into Keeper Desktop gets a dialog that has "Work Offline" as an option, but this does not work.

  If offline mode is allowed, the user should be able to work offline if IP is blocked.

• Fixed: Small UI and visual alignments.

• Fixed: When using KeeperFill for Apps over a remote connection (e.g. Remote Desktop or other remote access tools), the password injection sometimes sends the wrong character codes.

• Fixed: Push notifications received while editing a record cancel the operation.

• Fixed: Some competitor imports are not mapping every field.

• Fixed: Shared folder names are not included in PDF export feature.

• Fixed: Account recovery fails with confusing error message when the user is attempting the recovery within the wrong data center login domain.

Security Updates

• Resolved: A potential cross-site scripting exploit was found by Adam Roberts of NCC Group in one of the Keeper Desktop application popups related to the security certificate warning when connecting to a network proxy. The popup message on the Keeper Desktop application included information from the signed certificate to the user via the proxy. An iFrame in the certificate warning pulled information from the network proxy which could contain injected content. Although Keeper's Content-Security-Policy disallows inline scripts from executing, Adam pointed out that an iFrame can open a local asset and potentially be a source of vulnerability. In order to exploit this, a user would need to first download a file to their local desktop and then connect to a network proxy which injected content via the certificate content. To prevent this from becoming a vulnerability, we now disallow iFrames via the Content-Security-Policy. Special thanks to Adam Roberts of NCC Group for reporting this bug.

Features & Benefits

• Support for HTTP Proxy devices in Enterprise environments

Bug Fixes

• Improved the ability to edit long notes

• Fixed: Copy Function on IE is not consistently copying data to clipboard

• Fixed: Importing password screen is not working correctly on IE

• Fixed: Cannot upgrade free trial account in IE 11

• Update "Try Keeper for Business" link to new landing page.

Features & Benefits

• Implemented more efficient record import that uses one API call instead of one per record.

• Improved messaging when re-directing a user from US to EU data center (or vice-versa)

• Changed the default password generator length to 20 characters

• Notify user on the Web Vault to download the Desktop App in order to utilize the 2FA scanning feature.

• Replaced Lastpass export instructions with automated export instructions

Bug Fixes

• Removed Hard-coded error string when account recovery not available

• Fixed: 2FA screen localizations

• Fixed: List view not showing color tags

• Fixed: 2FA Duration storage setting ignored on initial setup

• Fixed: Unable to setup 2FA if self destruct checkbox was toggled off/on

• Fixed: 2FA Code Duration enforcements are are not honored by the client user interface (forcing users to enter 2FA every login). Visual issue, not any 2FA bypass or security vulnerability.

• Fixed: Deep link into account recovery does not bring up the recovery UI

• Fixed: Pasting info to the notes section using the right-click overwrites the selection

• Fixed: Right click > Paste doesn't work for 2FA TOTP codes in Facebook

• Fixed: Master Password verification window for PDF Export inconsistent among browsers.

• Fixed: Records with German UTF8 characters fails to Import correctly

Enhancements & Benefits

This release encompasses the new two-factor authentication functionality including TOTP and a couple of feature improvements along with bug fixes. Below you can find the summary of these items and their benefits.

• Two-factor Authentication - This release adds new two-factor authentication functionality to our existing list of capabilities. The new method using TOTP (Time-based One-time Password) adds

  tokens to records which are unique time-based multi-digit codes commonly used by websites and apps for two factor authentication and makes the capability available across the Chrome Web Store, Mozilla Add-ons and Windows Store. TOTP covers the following functionality:

  • Protects Two-Factor Codes in an encrypted vault record

  • Prevents lost access to a Two-Factor Code due to continuous backup

  • Synchronize Two-Factor Codes to multiple devices and computers

  • Sharing of Two-Factor Code among individual users & teams

  • Autofill capability for Two-Factor Codes

  • Emergency Access to your vault

  • Account Transfer of a user’s vault with Two-Factor codes to admin when off-boarding

  • Free trial users are restricted to 2 TOTP-enabled records

• Improvement of the account recovery process

Bug Fixes:

• Fixes related to Apple Watch 2FA verification

• Fixing issues with export to .csv functionality

• Fixing breadcrumb being cut-off in the event that the text is too long

Features & Benefits

• Added support for Password Generator Complexity enforcement policy

• Added ability to immediately transfer ownership of a record to another Keeper user from the "Share" screen.

Note: If more than one email is specified, the first user will receive ownership and the subsequent emails will be re-shared back to the record.

Bug Fixes

• Astericks (*) in Website URLs are removed

• Payment Card country selector improvement

• Password strength meter disappeared on certain views

• Password generator bug fixes

Bug Fixes

• Resolved: User moved from non-SSO to SSO enabled node unable to complete registration

• Resolved: Self Destruct on Mac Store App version not working

• Resolved: SSO Login to vault not compatible with Keeper SSO Connect v11.

• Resolved: IE Extension vault redirect produces error message

• Resolved: Vault Safari install links pointing to old Safari version

Features & Benefits

• Added new "Duplicate Record" feature that is available from the right-click menu and the record "Options" view. This feature will duplicate all record fields including file attachments and place the record in the same folder location. Shares will NOT be duplicated.

• Added generic "Copy" and "Paste" items to the right-click menu inside vault.

• Record History moved into the (info) screen:

Known Limitations

• "Create Duplicate" feature only works for owned records

Bug Fixes

• IE language selection

• SSO login issues with IE

• Enterprise Admin receiving upgrade prompt on file storage

• Various encryption related bug fixes

• German translation issues

• Additional handling for Offline Mode if Amazon AWS has any outage situations

• Ensure Self Destruct is activated when the incorrect password is entered while offline

• Ensure proper redirects occur if US-based user attempts to login to EU data center

• Blocked user unable to accept transfer consent

• Drag & Drop file upload issues with Mac Store App

Features & Benefits

• Added capability for supporting the new Safari 14.1 extension

Bug Fixes

• Resolved SSO Login issues when a mixed-case email is provisioned

• Resolved SSO account registration failure if a different user previously logged in with "Remember Email" set.

• Resolved "Bad client key" error

• Several other minor bug fixes

This release is focused on bug fixes and performance improvements for the Web Vault and Desktop App platform.

Desktop App Issues Resolved

• Step 2 of onboarding was skipped in certain flows

• Shortcut key to quit in Fedora Linux didn't work

• Improve speed of vault lockout when logout timer triggered

• Two-Factor Authentication SMS codes generated when network connection changes state

Web Vault Issues Resolved

• CPU and Memory usage spikes due to enhanced crypto levels

• Thumbnail empty after restoring record

• Region redirect between US and EU regions resolved

• Localization / Translation outstanding issues

• Admin Console link from Internet Explorer not working

• "Action Restricted" error message

• Dragging a file into the vault duplicates the file

• Clicking "x" on the share invite popup denies the invite

• Design of Payment Card screens does not match design spec

• Security Question box shrinks on the screen on certain browsers

• Error messages when attempting to share a record within Emergency Access

• Phone number should not be required to save a personal information object

• Inconsistency with the number of "dots" displayed when masking passwords

• On launch website using "Don't Ask Again" open the site in frameless window

• German translations missing in BreachWatch screens

• UI / Design issues in Internet Explorer

• Enrollment in Duo with redirects are resolved

• "Next" button on onboarding flow does nothing in certain cases

• SSO Domains with whitespace break hyperlink invites

• Issues with Safari 11 accessing the vault on older Mac OS versions

• First install of extension logs you out of vault and SSO

• Mixed-case email address fails account recovery (forgot password)

New Features & Benefits

• New "Launch" feature integrated into the Tile and List views on rollover to reduce clicks

• Improved user interface and animations

• Added additional "Emergency Access" delay timers (up to 3 months) for consumer customers

Features & Benefits

• For Business & Enterprise users the web vault now supports the ability to work offline. When an online connection is lost the vault will switch over to "Offline Mode" as indicated at bottom of vault.

• While offline users can view the vault contents in a read-only manner, a won't be able to add new records or folders.

• The offline vault is updated whenever you are back online. When logging in a "lightning bolt" next to your email address will indicate whether your vault will be available when offline.

• If you don't want to vault to be stored on your local device you can click the "x" by your login email name.

• Added "Right Click" option to create a new record from the vault screen

• Added Admin Console link on the left-hand navigation (for Admins Only)

Bug Fixes

• Resolved password importer issues with Internet Explorer

• UI issues in custom fields and long notes

• Properly redirect the user to EU vault when logging in on the US vault

• Removing image on personal info screen does nothing

• Can't view a file immediately after uploading

• Master password strength not reported to Admin Console until record creation

• BreachWatch screen showing old scan results for free users

• Reduced number of duplicate records created by Import Tool when using multiple browsers

Special Notes

• SSO Users can login with Master Password option only if permitted by Keeper Administrator

• Offline mode must be enabled by the Keeper Administrator

• LINK: Admin Console Release Notes

• LINK: Backend API Release Notes

• LINK: Offline Access User Guide

Enhancements & Benefits

• ​New modern user interface with expandable side-menu navigation

• Improved clarity around Shared Record and Shared Folder permissions

• KeeperFill for Apps now supports YubiKey / U2F authentication

• KeeperFill for Apps provides more feedback on login flow

• Password importer on Web Vault includes a process flow update to improve reliability

• Available on Web, via Browser Extensions, and for the Apple Mac desktop.

Video Demo

For a demo of the new Web Vault see the video below.

Bug Fixes

• ​Logout Timer enforcement policy is now set to the exact value specified by the Keeper Administrator. The user can reduce the logout timer setting from the default, since that will increase the security level.

• Restoring a record causes the "Resolved" checkbox to show.

• Other visual / UI related fixes

Coming Soon

Version 15.0 is a major release coming soon which contains the below features:

• 100% full offline mode on the Web Vault and Desktop App platform

• Ability to set a Master Password for SSO users to login while offline or disconnected from the identity provider (enabled via Admin Console)

This release was an emergency update to fix a bug introduced in version 14.1.1. This bug was responsible for increased network traffic and API calls to the Keeper backend system, which caused latency and API failures. More details were posted on the Keeper Security Status Page (https://statuspage.keeper.io).

Enhancements & Benefits

• ​Additional EMEA corporate logos in grid view

• Support for enhanced Audit & Reporting backend

• Localization / translation improvements

• Automatically fixes "ownerless records" created by specific Account Transfer scenarios

• Several bug fixes reported by customers regarding 2FA token expiration

• Created integrity hash files that will be published to the Keeper download page

Known Limitations

• ​None

Bug Fixes

• ​PDF export not sorting by folders

• User receiving a second 2FA prompt after login

• Remove debug output when running application in command-line mode

• Auto-logout on Desktop App reverts "remember 2FA for 30 days" setting

Coming Soon

• ​Web Vault release 14.4.0 is a feature release which supports Passphrase-Based SSO Offline Mode.