Using KeeperFill
User guides for the KeeperFill Browser Extension for Chrome, Firefox, Safari, Microsoft Edge, Opera and other Chromium-based browsers.
Last updated
User guides for the KeeperFill Browser Extension for Chrome, Firefox, Safari, Microsoft Edge, Opera and other Chromium-based browsers.
Last updated
Most users can log into the KeeperFill browser extension with their email address and master password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO login credentials.
When you log in or out of your Keeper Web Vault you will be simultaneously logged in or out of KeeperFill and vice-versa.
For customers who log in with SSO, typically entering the email address will route to the corresponding identity provider login screen. If your Keeper administrator requires a specific Enterprise Domain entry, click on Enterprise SSO Login.
If Keeper does not automatically route you to the proper data center location or identity provider, please contact your Keeper administrator.
For GovCloud customers, ensure that the "US (GOV)" region is selected.
By default, users are logged out of Keeper if their browser window closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to remain logged into Keeper for a configurable duration.
To enable Stay Logged In, click the options icon > Settings > Security, then enable "Stay Logged In Between Session".
Keeper recommends that you also set the "Inactivity Logout Timer" which automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer (minutes, hours, or days) and the timer will resume even once you close your browser.
Records now conveniently appear directly on the home screen as a list, with “suggested records” at the top to easily fill the credentials that match the website you're on.
Select a record to view all its details and from the top of the record, you can conveniently take common actions like filling, launching, sharing, editing, or favoriting a record.
Vault records appear directly on the browser extension home screen, making it quick and easy to find exactly what you are looking for.
Easily fill credentials with suggested records that match the website you're on. Favorite records will appear on top when more than one suggested record is shown.
Sort records by most recently used, name, or date modified. Filter by favorites, record type, and more.
The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials you create to your vault.
If it's the first time you are logging into a site with KeeperFill, you will be asked if you would like Keeper to autofill your login.
Keep in mind, you must already have created a Keeper record for this site containing the website address for Keeper to recognize, match and fill your login. Upon clicking Yes, your credentials will be autofilled into the login form and you will be logged in.
Records appear directly on the home screen as a list, with “Suggested Records” at the top to easily fill the credentials that match the website you're on. Select the record, then click Autofill to fill the credentials into the site's log in form.
The KeeperFill toolbar provides easy access to all of your vault records You can quickly search for a website login or anything else stored in your vault. The search feature is case insensitive and will match any record within your vault as you type.
When logging into a website, KeeperFill will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.
The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list and which specific record is selected as the default choice.
(1) If the page you're visiting has a subdomain (e.g. xyz.google.com), then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.
(2) After checking subdomain, Keeper looks at the "path" information (e.g. xzy.google.com/some/path) and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.
(3) If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.
With KeeperFill, there are multiple paths to create a new record and save it to your vault.
You can quickly create a record from the KeeperFill toolbar at any time by clicking the yellow plus button. If you have no suggested records for the website you are on, Keeper will display an Add Record button instead. Click this button to "quick add" a record by auto-generating its "Title" and "URL" based on the website you are visiting.
Alternatively, you can create a new record from a website's "account creation" or "sign in" page by selecting the Keeper icon in the form field. On "account creation" pages, click the Create a Record or Add to Keeper button that appears to be routed to a secure Extension Tab, where you can create a new vault record. On "sign in" pages, the same Create a Record and Add to Keeper buttons will appear if you have no matching records for that website.
If you do have matching record(s) and you'd like to create a new record, use the options menu in the prompt that appears to begin creating a new record in the secure Extension Tab.
When you begin creating a record in Keeper's Extension Tab, the record "URL" and "Title" will be auto-generated. If you entered any data into the site's username or password fields before opening the Extension Tab, those values will be automatically populated into the new record form as well.
Upon reviewing and saving the record details, the Extension Tab will close and you will be automatically routed back to the website you came from. For additional convenience, Keeper will auto-fill the username and password fields on this website, if they are not already populated.
The Extension Tab is a new security feature that eliminates risk of third parties mimicking Keeper's user interface to trick users into providing sensitive information.
A passkey is a cryptographic key that allows you to log into your accounts and apps without having to enter a password or second factor.
Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.
Passkeys can be used as a replacement for any FIDO2 security key for either first factor or second factor login to supported websites.
Passkeys as a primary login factor only work on websites and applications that have been specifically built to support them. The list of supported sites is growing every day.
To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" page of the website.
Upon clicking "Create Passkey" at the desired site, Keeper will intercept the request. Click Create Passkey to create and save the passkey to your vault.
The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to log in.
To learn more about Keeper and Passkeys, including Passkeys for mobile, click here.
Long, random passwords that are created for each account help protect your information and reduce your exposure to data breaches. Alternatively, by combining multiple words, passphrases are an even more secure alternative to traditional passwords.
Keeper's password generator can create and securely store strong, random passwords or passphrases for all of your sites and apps.
Generate a Password
To begin, click the dice icon within a new or existing record. You can customize your password by character length (8-99 characters) and choose to include lowercase and uppercase letters, numbers and symbols.
Check the box at the bottom of the toolbar if you'd like to make your selections the default setting for all passwords moving forward. Select Use Password to update the record or Copy Password to copy it to your clipboard.
Generate a Passphrase
Click the dice icon within a new or existing record and from the dropdown menu next to "Type", select Passphrase.
You can customize your passphrase by setting the length, including capitals and numbers in the passphrase and choosing from various symbols to separate the words.
Passphrases can be up to 20 words long, with a minimum length of 5 words and each word including at least 3 characters.
Check the box at the bottom of the toolbar if you'd like to make your selections the default setting for all passphrases moving forward. Select Use Passphrase to update the record or Copy Passphrase to copy it to your clipboard.
This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.
Alternatively, you can generate a standalone password or passphrase by clicking the Options Menu > Password Generator.
To view your password/passphrase history, click the clock icon within the generator screen. Hover your cursor over a password to either view it or copy it to your clipboard.
Your password generator history can be cleared at any time by clicking Clear History.
Password Enforcement Policies (Business/Enterprise Users)
The password generator on end-user vaults will adhere to the minimum character length, minimum number of lowercase/uppercase/numbers/symbols and allowed list of symbols as defined by your Keeper Administrator.
The passphrase generator on end-user vaults is enabled by default, but can be disabled by your admin. Passphrases will adhere to the minimum number of words and can be configured to include capital letters and numbers. The separators between words will be selected from the list of allowed symbols.
For more information on record password enforcement policies, please see our Enterprise Guide.
KeeperFill makes it easy to change your passwords. When a user visits a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
Autofill your old/current password
Automatically generate and autofill a new secure password
Confirm the changes and save them to your vault
Keeper can automatically fill custom fields into login forms. From the Keeper Web Vault, create a custom field in your record, ensuring the label matches that of the field you want to fill. (e.g. "Last 4 digits of SSN").
You can also fill the the custom field value via the fill window.
If you prefer to use keyboard shortcuts instead of mouse clicks to autofill your passwords, follow the steps below:
Navigate to the site you would like to log in to.
To open the KeeperFill extension, enter shift+command+K (Mac) or Alt+K (Windows).
In the field provided, enter your search terms.
Use the up and down arrows on your keyboard to find and select the record you are searching for.
Use the enter/return key to open the record details and shift+enter/return keys to launch and fill a record.
You can modify the shortcut command to your preference in your browser's extension settings.
Upon autofilling your username and password via KeeperFill, when prompted, a stored two-factor code will also be autofilled into the field provided.
Alternatively, you can click the copy icon next to the code and paste it into the field provided.
Storing two-factor codes in your Keeper Vault has several advantages:
Keeper two-factor codes are more secure than using SMS text messages.
Two-factor codes stored in Keeper are protected with strong zero-knowledge encryption.
They can be auto-filled quickly while logging in to a site, saving time and reducing friction.
Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.
Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code.
From the fill window you can view and fill the payment cards and addresses that are stored in your vault.
KeeperFill is fully integrated with your browser's right-click context menu and offers an alternative filling method. Simply right-click on a login field to produce a context menu. Select Keeper to fill logins, two-factor codes, payment cards, addresses and create and edit records.
For security reasons, only records with a matching domain name for the site you visit will display in the menu of autofill options.
All your KeeperFill tools and settings are consolidated in an easy to use Options Menu found in the upper right corner of the KeeperFill toolbar.
The Settings Menu covers everything from security settings, appearance, autofill and autosubmit functionality, the various KeeperFill prompts, and much more.
Users can customize their viewing experience with the ability to expand the extension window via “Landscape Mode”. The dual-pane window allows you to view your record details and records list at the same time – providing seamless access to what you need most.
You can easily switch between “Landscape” and “Portrait” mode with a single click of a button on your extension toolbar.
Users have the option to entirely disable form field icons – these are the Keeper icons that appear within website login fields. This will allow you to disable the icons without disabling KeeperFill’s autofill and auto submit functionality.
If "Autofill on page load" is enabled, Keeper will automatically fill a matching record into the login fields of the website. Users can enable this feature on an individual record basis.
If "Autosubmit After Autofill" is enabled, Keeper will automatically submit the form and log in to the website after autofilling your username and password. Users can enable this feature on an individual record basis, or universally enable it for all of your records within KeeperFill's Settings Menu.
With the accessibility setting, users have the ability to control tabbing behavior and focus on the Keeper icon within form fields.
Select the Options Menu > Settings > Accessibility to disable this setting, preventing focus on the Keeper icons when tabbing through form fields with keyboard controls.
The "Match on Subdomain" setting enables KeeperFill to differentiate a record's subdomain (if present) from its domain. In doing so, Keeper will only display records matches based on strict subdomain matching to the website you are currently visiting.
Example: If a user has a record with a website address containing a subdomain and domain such as "subdomain1.company.com" and another record with the website address containing only the domain "company.com" and attempts to log in to "subdomain1.company.com, the only record match that will appear is "subdomain1.company.com".
To enable this feature, select the Options Menu > Settings > Match on Subdomain.
