# Browser Extensions

## Overview KeeperFill is Keeper’s powerful, autofilling browser extension. Once you install the Keeper Browser Extension, you can conveniently autofill your logins, passwords, passkeys and save new records that you create to your Keeper Vault. The KeeperFill browser extension is available for every web browser including Chrome, Firefox, Safari, Edge, Opera and other Chromium-based browsers. ## Installation & Setup Below you will find browser-specific installation and setup instructions. Instructions will vary across different browsers and operating systems. * [Chrome](https://docs.keeper.io/en/user-guides/browser-extensions/keeperfill-for-chrome-and-brave) * [Firefox](https://docs.keeper.io/en/user-guides/browser-extensions/keeperfill-for-firefox) * [Safari](https://docs.keeper.io/en/user-guides/browser-extensions/keeperfill-for-safari) * [Edge](https://docs.keeper.io/en/user-guides/browser-extensions/keeperfill-for-edge) * [Opera](https://docs.keeper.io/en/user-guides/browser-extensions/keeperfill-for-opera) * [Other Chromium-based browsers](https://docs.keeper.io/en/user-guides/browser-extensions/keeperfill-for-chrome-and-brave) such as Brave ## Disable Your Browser's Password Manager Since your browser's native password manager can interfere with Keeper, we strongly recommend disabling it once you've downloaded the Keeper Browser Extension. This eliminates potential conflicts and ensures you receive the best possible KeeperFill experience without the hassle of manual configuration. * **Administrative Controls:** In a future release, administrative controls will be implemented in the Keeper Admin Console, allowing organizations to determine whether KeeperFill automatically disables a browser’s built-in password manager. * **Existing Passwords:** Existing passwords saved in your browser's password manager will not be removed if this feature is enabled. * **Autofill for Payments, Addresses & Personal Information:** Payments, addresses and personal information saved in your browser's password manager will be unaffected by this feature. **Existing Users** If you are an existing user, this new feature update *may* trigger the browser extension to register an error — if it does, just click "Turn on" or "Accept permissions" (depending on your browser) to re-enable Keeper. Accepting permissions allows Keeper the option to disable your browser's built-in password manager.

**Set Up** Upon logging into Keeper for the first time (or following an update) a prompt will suggest that you choose your default password manager and import the passwords from your browser. Click **Continue** to complete this quick setup or **Skip For Now.**

Check the box for "Keeper Security" or toggle "Disable Built-in Password Manager" on (this prompt will vary depending on if your specific browser type is detected or not). Next, click **Continue** to complete the process.

Keeper Selected as Default
Password Manager

{% hint style="info" %} ## Click "Skip For Now" at the bottom of the extension window if you'd like to skip this process at any point in the set up wizard. You can also manage this feature at any time from Keeper's Settings menu. {% endhint %} ## Logging In Most users can log into the KeeperFill browser extension with their email address and master password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO login credentials. When you log in or out of your Keeper Web Vault you will be simultaneously logged in or out of KeeperFill and vice-versa.

For customers who log in with SSO, typically entering the email address will route to the corresponding identity provider login screen. If your Keeper administrator requires a specific Enterprise Domain entry, click on **Enterprise SSO Login**.

{% hint style="info" %} If Keeper does not automatically route you to the proper data center location or identity provider, please contact your Keeper administrator. For GovCloud customers, ensure that the "US (GOV)" region is selected. {% endhint %} ## Stay Logged In By default, users are logged out of Keeper if their browser window closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to remain logged into Keeper for a configurable duration.

To enable Stay Logged In, click the **options icon** > **Settings > Security**, then enable "Stay Logged In".

Keeper recommends that you also set the "Inactivity Logout Timer" which automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer (minutes, hours, or days) and your session will resume even once you close your browser.

## Record Overview Records now conveniently appear directly on the home screen as a list, with “Suggested Record(s)” at the top to easily fill the credentials that match the website you're on.

Select a record to view all its details as well as conveniently take common actions like launching, sharing, editing, and accessing the record's options menu.

## Suggested Records, Sort & Filter Vault records appear directly on the browser extension home screen, making it quick and easy to find exactly what you are looking for.

Easily fill credentials with suggested records that match the website you're on. Favorite records will appear on top when more than one suggested record is shown.

Sort records by most recently used, name, or date modified. Filter by favorites, record type, and more.

## Autofill Your Passwords The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials you create to your vault. If it's the first time you are logging into a site with KeeperFill, you will be asked if you would like Keeper to autofill your login. Keep in mind, you must already have created a Keeper record for this site containing the website address for Keeper to recognize, match and fill your login. Upon clicking **Yes**, your credentials will be autofilled into the login form and you will be logged in.

Records appear directly on the home screen as a list, with “Suggested Records” at the top to easily fill the credentials that match the website you're on. Select the record, then click **Autofill** to fill the credentials into the site's log in form.

Autofill Your Login Credentials With KeeperFill

{% embed url="" %} AutoFill With KeeperFill {% endembed %} ## KeeperAI Autofill Keeper offers AI-powered autofill that intelligently recognizes and fills login forms across websites using local AI processing with zero-knowledge encryption. Unlike traditional autofill solutions that struggle with modern single-page applications, complex authentication flows, and multilingual websites, KeeperAI Autofill uses locally-processed machine learning to understand form context, recognize usage patterns and predict multi-step authentication sequences to intelligently suggest the most appropriate login credentials. The system is designed with privacy as a core principle. All AI model inference runs locally within the browser extension runtime, ensuring that form data, credentials and browsing patterns never leave the user's device. {% hint style="info" %} To report any issues with KeeperAI Autofill please email [feedback+aIautofill@keepersecurity.com](mailto:feedback+AIautofill@keepersecurity.com). {% endhint %} #### Activate KeeperAI To activate KeeperAI Autofill, navigate to your extension **Settings**, select **KeeperAI Autofill** then toggle the feature on.

{% hint style="info" %} For Business and Enterprise users, the use of KeeperAI Autofill may be restricted by your Keeper Administrator. {% endhint %} ## Searching Your Vault The KeeperFill toolbar provides easy access to all of your vault records You can quickly search for a website login or anything else stored in your vault. The search feature is case insensitive and will match any record within your vault as you type.

## Understanding Record Matching When logging into a website, KeeperFill will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields. The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list and which specific record is selected as the default choice. **(1)** If the page you're visiting has a subdomain (e.g. xyz.google.com), then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used. **(2)** After checking subdomain, Keeper looks at the "path" information (e.g. xzy.google.com/some/path) and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used. **(3)** If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field. ## Create a New Record With KeeperFill, there are multiple paths to create a new record and save it to your vault. ### Toolbar Window You can quickly create a record from the KeeperFill toolbar at any time by clicking the **yellow plus button**. If you have no suggested records for the website you are on, Keeper will display an **Add Record** button instead. Click this button to "quick add" a record by auto-generating its "Title" and "URL" based on the website you are visiting.

You can also choose which folders any given record is stored in. Record location can be selected on existing records as well as new records you are in the process of creating. Simply click the "Location" dropdown menu to select the folder or subfolder you would like the record to reside in.

{% hint style="info" %} #### Check the box for "Trim URL" if you would like Keeper to automatically simplify the URL and improve matching across different pages of the website. {% endhint %} ### Fill Prompt Alternatively, you can create a new record from a website's "account creation" or "sign in" page by selecting the Keeper icon in the form field. On "account creation" pages, click the **Create a Record** or **Add to Keeper** button that appears to be routed to a secure Extension Tab, where you can create a new vault record. On "sign in" pages, the same **Create a Record** and **Add to Keeper** buttons will appear if you have no matching records for that website.

If you do have matching record(s) and you'd like to create a new record, use the options menu in the prompt that appears to begin creating a new record in the secure Extension Tab.

When you begin creating a record in Keeper's Extension Tab, the record "URL" and "Title" will be auto-generated. If you entered any data into the site's username or password fields before opening the Extension Tab, those values will be automatically populated into the new record form as well. Upon reviewing and saving the record details, the Extension Tab will close and you will be automatically routed back to the website you came from. For additional convenience, Keeper will auto-fill the username and password fields on this website, if they are not already populated.

Create a New Record in Keeper's Extension Tab

### Save Prompt Keeper will offer to save a password to the vault, if you login manually on a site by typing or pasting in the login and password. The "Save Password Prompt" feature is enabled by default, and can be disabled in the browser extension settings menu. For Enterprise customers, this feature can also be enforced on or off.

Note: For enterprise environments, the "Save Password Prompt" will only appear if the password entered by the user meets the complexity requirements enforced by the Keeper Administrator. See [role policies](https://app.gitbook.com/s/-LO5CAzpxoaEquZJBpYz/roles/enforcement-policies#record-passwords) for more information on password complexity enforcements. ### Add Additional Website Address When creating a new record or editing an existing record, users can add additional website addresses to the record by clicking the **Add Custom Field** button and selecting URL. This functionality allows users to efficiently store and organize all related website domains for a record directly from the browser extension.

Add as many website addresses as you'd like and easily reorder them with drag-and-drop. Click the **option icon** to the right of a website address to: * Set it as the primary address (this will swap the selected address with the record's primary address) * Edit the field label * Remove the website address ***

## Passkeys A passkey is a cryptographic key that allows you to log into your accounts and apps without having to enter a password or second factor. Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault. Passkeys can be used as a replacement for any FIDO2 security key for either first factor or second factor login to supported websites. {% hint style="info" %} Passkeys as a primary login factor only work on websites and applications that have been specifically built to support them. [The list of supported sites](https://www.keepersecurity.com/passkeys-directory/) is growing every day. {% endhint %} ### Create a Passkey To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" page of the website. Upon clicking "Create Passkey" at the desired site, Keeper will intercept the request. Click **Create Passkey** to create and save the passkey to your vault.

### Log In With a Passkey The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click **Use Passkey** in the KeeperFill window to log in.

{% hint style="info" %} To learn more about Keeper and Passkeys, including Passkeys for mobile, [click here](https://docs.keeper.io/en/user-guides/passkeys). {% endhint %} ## Password & Passphrase Generators Long, random passwords that are created for each account help protect your information and reduce your exposure to data breaches. Alternatively, by combining multiple words, *passphrases* are an even more secure alternative to traditional passwords. Keeper's password generator can create and securely store strong, random passwords or passphrases for all of your sites and apps. ### **Generate a Password** To begin, click the **dice icon** within a new or existing record. You can customize your password by character length (8-99 characters) and choose to include lowercase and uppercase letters, numbers and symbols. Check the box at the bottom of the toolbar if you'd like to make your selections the default setting for all passwords moving forward. Select **Use Password** to update the record or **Copy Password** to copy it to your clipboard.

### **Generate a Passphrase** Click the **dice icon** within a new or existing record and from the dropdown menu next to "Type", select **Passphrase**. You can customize your passphrase by setting the length, including capitals and numbers in the passphrase and choosing from various symbols to separate the words. Passphrases can be up to 20 words long, with a minimum length of 5 words and each word including at least 3 characters. Check the box at the bottom of the toolbar if you'd like to make your selections the default setting for all passphrases moving forward. Select **Use Passphrase** to update the record or **Copy Passphrase** to copy it to your clipboard.

{% hint style="info" %} This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click [here ](https://docs.keeper.io/en/user-guides/tips-and-tricks/password-changing-with-keeperfill)to learn how to easily change your password with KeeperFill. {% endhint %} Alternatively, you can generate a standalone password or passphrase by clicking the **Options Menu >** **Password Generator**.

Options Menu > Password/Passphrase Generator

### Generator History To view your password/passphrase history, click the **clock icon** within the generator screen. Hover your cursor over a password to either view it or copy it to your clipboard.

Your password generator history can be cleared at any time by clicking **Clear History**.

### **Password Enforcement Policies** For Enterprise customers, the password generator on end-user vaults will adhere to the minimum character length, minimum number of lowercase/uppercase/numbers/symbols and allowed list of symbols as defined by your Keeper Administrator. The passphrase generator on end-user vaults is enabled by default, but can be disabled by your admin. Passphrases will adhere to the minimum number of words and can be configured to include capital letters and numbers. The separators between words will be selected from the list of allowed symbols. For more information on record password enforcement policies, please see our [Enterprise Guide](https://docs.keeper.io/en/v/enterprise-guide/roles/enforcement-policies#password-generator). ## Change a Password KeeperFill makes it easy to change your passwords. When a user visits a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking **Yes**, Keeper will run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions: * Autofill your old/current password * Automatically generate and autofill a new secure password * Confirm the changes and save them to your vault

{% embed url="" %} Changing Your Passwords {% endembed %} ## Autofill Custom Fields Keeper can automatically fill custom fields into login forms. From the Keeper Web Vault, create a custom field in your record, ensuring the label matches that of the field you want to fill. (e.g. "Last 4 digits of SSN**"**).

You can also fill the the custom field value via the fill window.

## Keyboard Shortcuts If you prefer to use keyboard shortcuts instead of mouse clicks to autofill your passwords, follow the steps below: 1. Navigate to the site you would like to log in to. 2. To open the KeeperFill extension, enter **shift+command+K** (Mac) or **Alt+K** (Windows). 3. In the field provided, enter your search terms. 4. Use the **up and down arrows** on your keyboard to find and select the record you are searching for. 5. Use the **enter/return** key to open the record details and **shift+enter/return** keys to launch and fill a record. {% hint style="info" %} You can modify the shortcut command to your preference in your browser's extension settings. {% endhint %}

## Two-Factor Codes for TOTP ### Autofilling 2FA Codes Upon autofilling your username and password via KeeperFill, when prompted, a stored two-factor code will also be autofilled into the field provided. Alternatively, you can click the **copy icon** next to the code and paste it into the field provided.

{% embed url="" %} Two-Factor Codes Integration {% endembed %} Storing two-factor codes in your Keeper Vault has several advantages: * Keeper two-factor codes are more secure than using SMS text messages. * Two-factor codes stored in Keeper are protected with strong zero-knowledge encryption. * They can be auto-filled quickly while logging in to a site, saving time and reducing friction. * Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes. * Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code. ### TOTP Scanner When configuring multi-factor authentication for any account, you can capture TOTP codes directly through the Browser Extension without switching between apps. Simply hover to the right of a record name click the **options icon** and select **Scan 2FA Code**. Keeper will automatically detect and save the 2FA code to your Keeper record, making it instantly available for future logins.

TOTP codes can also be quickly added from the record "Create" and "Edit" screens. If a secret key is provided instead of a QR code, you can manually enter it to generate your two-factor code.

## Payment Cards & Addresses From the fill window you can view and fill the payment cards and addresses that are stored in your vault.

Payment Cards & Addresses Stored in Keeper

## Right-Click Context Menu KeeperFill is fully integrated with your browser's right-click context menu and offers an alternative filling method. Simply right-click on a login field to produce a context menu. Select Keeper to fill logins, two-factor codes, payment cards, addresses and create and edit records.

Fill Payment Card via Right-Click Context Menu

{% hint style="info" %} For security reasons, only records with a matching domain name for the site you visit will display in the menu of autofill options. {% endhint %} ### Add 2FA Codes to Records You can also quickly capture 2FA codes from the right-click context menu. When a website displays a QR code during two-factor authentication (2FA) setup, simply right-click on the QR code to open the context menu and select **Keeper > Scan 2FA Code** to save it directly to the matching record in your vault.

Right-Click Context Menu to Scan 2FA Code

## Account Switching Have more than one Keeper account? Keeper supports the use of multiple vaults on the same device and makes it easy to seamlessly switch between your personal and business accounts for example, without having to log out of your current session. To switch accounts, click on your **user icon** and select the account you'd like to switch to or tap **Add Account** to register another account on that browser.

{% hint style="info" %} Quick account switching only works for active sessions that are already logged in. {% endhint %} Easily remove unwanted accounts from the browser by hovering to the right of an account email then clicking on the **remove icon**.

## Tools & Settings All your KeeperFill tools and settings are consolidated in an easy to use Options Menu found in the upper right corner of the KeeperFill toolbar.

The Settings Menu covers everything from security settings, appearance, autofill and autosubmit functionality, the various KeeperFill prompts, and much more.

### Landscape Mode Users can customize their viewing experience with the ability to expand the extension window via “Landscape Mode”. The dual-pane window allows you to view your record details and records list at the same time – providing seamless access to what you need most. You can easily switch between “Landscape” and “Portrait” mode with a single click of a button on your extension toolbar.

### Reporting Autofill Issues with the Snapshot Tool From time to time, users inform us that autofill is not functioning as expected on certain websites. The Snapshot Tool greatly simplifies the process of reporting and fixing autofill issues by seamlessly providing Keeper's Engineering Team with key website information. To report an Autofill Issue, there are 2 locations to access this feature: From the on-page form fill and the browser extension toolbar. #### On-Page Form Fill From the on-page form filling screen, click on the overflow menu > Report an Autofill Issue

#### Activation This works on: * Login pages (Username, Password) * TOTP code pages * Payment and identity pages #### Reporting Issues If you are having trouble with a website's login page, simply select **Report an Autofill Issue** from the extension Options menu or from the fill tool.

#### Browser Extension Toolbar From the browser extension toolbar window, click on the **overflow menu** > **Report an Autofill Issue**.

Click **Take Snapshot** to take a screen capture of your current browser window. Click **Next: Preview** to review exactly what data will be sent to Keeper, ensuring there is no confidential information included before you proceed.

Next, select from the provided list of autofill issues or describe your own. Keeper will NOT send credentials or confidential information. We only send the screenshot and HTML page structure exactly as displayed in the preview window.

Click **Report Issue** to send the information to the Keeper Team.

{% hint style="info" %} If you need to re-submit an issue for a website, return to the extension toolbar or fill tool and click **Report an Autofill Issue > Retake**. {% endhint %} #### Autofill Fixes The Keeper Team will promptly receive the necessary information to diagnose and resolve the filling issue. Once a solution is implemented, an update will be released to all customers. You will receive an email notification confirming the update. In many cases, site-specific fixes can be turned around within the same day. ### Biometric Login with Passkeys Keeper supports biometric login with a passkey, allowing users to authenticate using a device-bound passkey that replaces all traditional login methods – including master password, SSO, and 2FA. {% hint style="info" %} **Biometric login with Passkeys is available on Chrome, Edge and other Chromium-based browsers**. Mozilla Firefox support will be available with Firefox release 147 or 148 pending [this Mozilla ticket](https://bugzilla.mozilla.org/show_bug.cgi?id=1956484). Safari is also pending native passkey support from Apple. {% endhint %} To activate biometric login, navigate to the extension "Settings" menu and Select **Biometric Login**. When you toggle biometric login “on”, Keeper will prompt you to create a Passkey and the platform will request a biometric or PIN authentication, depending upon the capabilities of your device.

Create a Passkey Using Your Device's Biometric Scanner

{% hint style="info" %} For Business and Enterprise users, the use of Biometric Login may be restricted by your Keeper Administrator. {% endhint %} Once created, the passkey login acts as a complete replacement for both your first factor – master password or SSO and the second factor such as TOTP, SMS, or DUO (if configured).

You can now unlock the Keeper Browser Extension using your device’s built-in biometric authentication. Click **Biometric Login** at Keeper's login screen and use your fingerprint or facial recognition to access your vault instantly.

Biometric Login Initiated on Google Chrome for Mac

Multiple Passkeys can be stored in your Keeper account to account for the various platforms you may use. In this example, a passkey is available in iCloud Keychain, Windows Hello and Google Chrome. On each platform where you use Keeper, click **Manage Passkeys** to create a new one.

### Advanced Settings Keeper offers two advanced settings for individual records tailored to certain autofill use cases. #### **Overwrite Field Content** This setting allows users to control whether a record’s Custom Fields can autofill into fields on a webpage that are already populated. Previously, Custom Field content wouldn't autofill into an already-populated field. #### **Autofill on Subsequent Pages** This setting will prevent Keeper from attempting to autofill any given record on multiple pages in a row. Disabling this setting can help prevent accidental “false positive” autofill scenarios, where Keeper autofills on a page you don’t want it to. To access the Advanced Settings menu, select the record overflow menu/options icon.

### Field Icons Users have the option to entirely disable form field icons – these are the Keeper icons that appear within website login fields. This will allow you to disable the icons without disabling KeeperFill’s autofill and auto submit functionality.

### Clipboard Expiration If "Clipboard Expiration" is enabled, Keeper will automatically clear your computer’s clipboard after a short delay whenever you copy information from your browser extension. Durations range from 30 to 120 seconds. This security feature mitigates the risk of confidential data remaining on your clipboard for extended periods, thereby reducing potential exposure to other applications.

### Autofill on Page Load If "Autofill on page load" is enabled, Keeper will automatically fill a matching record into the login fields of the website. Users can enable this feature on an individual record basis.

Autofill On Page Load Enabled for Record

### Autosubmit After Autofill If "Autosubmit After Autofill" is enabled, Keeper will automatically submit the form and log in to the website after autofilling your username and password. Users can enable this feature on an individual record basis, or universally enable it for all of your records within KeeperFill's Settings Menu.

Autosubmit After Autofill Enabled for Record

### Verify Mode When Verify Mode is enabled, pasting a password into a login form triggers an instant check against the records in your vault. If the site doesn't match a record, you'll receive a real-time warning before anything is submitted, showing which site triggered the alert, with the option to proceed or cancel. This security setting protects against phishing and accidental exposure.

To enable Verify Mode, navigate to **Settings > Security**.

You can then customize how aggressively the extension monitors your activity: * **Off:** Passwords fill or paste without any confirmation. * **Medium:** You'll only be warned if you copy a password from your vault and paste it into a *different* site than the one it's saved for. * **High:** You'll be warned any time you paste a password on a site that isn't saved in your vault at all, regardless of where the password came from. * **Maximum:** You'll always be asked to confirm before pasting a password, even on websites you've already saved and trust. Choose a higher level of protection if you want more peace of mind, or a lower one if you prefer fewer interruptions during your normal browsing. ### Accessibility With the accessibility setting, users have the ability to control tabbing behavior and focus on the Keeper icon within form fields. Select the **Options Menu > Settings > Accessibility** to disable this setting, preventing focus on the Keeper icons when tabbing through form fields with keyboard controls.

### **Match on Subdomain** The "Match on Subdomain" setting enables KeeperFill to differentiate a record's subdomain (if present) from its domain. In doing so, Keeper will only display records matches based on strict subdomain matching to the website you are currently visiting. Example: If a user has a record with a website address containing a **subdomain** and **domain** such as "subdomain1.company.com" and another record with the website address containing only the **domain** "company.com" and attempts to log in to "subdomain1.company.com, the only record match that will appear is "subdomain1.company.com". To enable this feature, select the **Options Menu >** **Settings > Match on Subdomain**.