Keyboard Shortcuts

If you prefer to use keyboard shortcuts instead of mouse clicks to make the process of auto filling your passwords even more seamless, follow the steps below:

1. Navigate to the site you would like to log in to.

2. Type command+shift+k (for Mac OS) or alt+k (for Windows).

3. In the field provided, begin typing your search terms.

4. Use the up and down arrows on your keyboard to find and highlight the record you are searching for.

5. Use the enter key to quickly fill and log in to the site.

About Our Security

Keeper is a Zero-Knowledge platform. The data stored in a Keeper vault is encrypted and decrypted locally on the user’s device. Check out this blog article which reviews how Keeper protects your information:

For a more in-depth technical description of our encryption model documentation.

Keeper Security employees have no ability to decrypt customer data, because the encryption keys are managed by the customer. In addition to zero knowledge architecture, Keeper supports a number of two-factor authentication methods including FIDO2 WebAuthn devices, Google Authenticator, Microsoft Authenticator and SMS. Keeper Security is SOC2 Certified, ISO 27001, 27017 and 27018 certified, FedRAMP Authorized, StateRAMP authorized.

User Guides

• Web Vault & Desktop App

• KeeperFill for Apps

• KeeperFill for Chrome

• KeeperFill for Firefox

• KeeperFill for Safari

• KeeperFill for Edge

• KeeperFill for Opera

• iOS

  • Autofill & Passkey Setup for iOS

• Android

  • Autofill & Passkey Setup for Android

• Passkeys

• Enterprise End-User Setup (Master Password Login)

• Enterprise End-User Setup (SSO Login)

• Command-line CLI (Commander)

Enterprise Guides

• Enterprise Admin

• KeeperMSP

• SSO Connect Cloud

• Keeper Secrets Manager

• Keeper Commander

• Keeper Connection Manager

• Active Directory Bridge

Helpful Links

• Release Notes

• System Status

The proceeding pages in this section are dedicated to various troubleshooting guides. Have a suggestion? Email our team at .

If you would like to reset Keeper on your web browser follow the steps below:

1. Navigate to the "Extensions" page in your preferred browser and select "Keeper Password Manager & Digital Vault".

2. Click "Extension options".

1. You will then have the option to clear local storage, IndexedDB storage or, all storage.

The proceeding pages in this section are dedicated to various FAQs, site-specific guides and other tips & tricks. Have a suggestion? Email our team at .

KeeperFill provides unique features to help you change/rotate passwords on any website.

1. Login to the site using the KeeperFill browser extension

2. Visit the site's "Change Password" Page

3. Follow Keeper's on-screen instructions

See the below example video using Twitter.

• Web Vault & Desktop App

• iOS - iPhone & iPad

• Android - Phone & Tablet

• BreachWatch

• Secure File Storage

• Keeper Family Plan

• KeeperFill for Apps

• Import Passwords from Browsers

• Tips & Tricks

• Troubleshooting

This page has moved:

Chrome Web Store Install

Visit the link below to install Keeper Password Manager & Digital Vault from the Chrome Web Store.

In order for Keeper to be visible in your toolbar at all times, click on the puzzle icon and then the pin icon next to Keeper Password Manager.

Keeper needs to be enabled on all sites by default. To confirm, navigate to the extensions options screen. Site access should be enabled "On all sites".

Disable Chrome Built-In Password Manager

We recommend that you disable Chrome's built-in password saving features.

• Navigate to: chrome://password-manager/settings and ensure all autofill features are disabled.

Firefox

Visit the link below to download Keeper Password Manager & Digital Vault from Firefox Browser Add-ons.

Once installed, the Keeper icon will appear in the upper right corner of your web browser window.

Next we recommend you disable your browser's built-in password saving features:

1. In the upper right corner of your browser click on the Menu Icon (3 horizontal lines) and select Settings > Privacy & Security.

2. Under "Logins and Passwords", uncheck the box next to "Ask to save logins and passwords for websites".

To ensure you are using the latest version of KeeperFill and allow Keeper to run in private windows, enable both of these settings (pictured below) from the Keeper extension menu. Right-click on the Keeper extension icon in the upper-right corner of your browser window and select "Manager Extension".

Microsoft Edge

Visit the link below to download Keeper Password Manager & Digital Vault from Microsoft Edge Addons.

In order for Keeper to be visible in your toolbar at all times, click on the extensions puzzle icon then click on the eye icon next to Keeper Password Manager to "Show in Toolbar".

Disable Built-In Password Manager

Next, we recommend that you disable Edge's built-in autofill features.

1. Click on the Edge menu icon and select Settings and under "Microsoft Wallet".

2. Click Passwords > Settings.

3. Disable "Offer to save passwords" and "Autofill passwords and passkeys".

Opera

Visit the link below to download Keeper Password Manager & Digital Vault from the Chrome Web Store.

In order for Keeper to be visible in your toolbar at all times, click on the extensions box icon and then the pin icon next to Keeper Password Manager.

For business customers, see Keeper's Enterprise end-user deployment guide:

Overview

Time-Limited Access allows you to securely share credentials or secrets with other Keeper users on a temporary basis, automatically revoking access at a specified time. Time-Limited Access prevents long standing privileges and ensures that information is removed from the recipient’s vault, greatly reducing the risk of unauthorized access.

Share a Record

Select the record from your vault and click Share, entering their email address or selecting it from your contacts list. Set their permission level and click Add.

Select the “Permissions” dropdown and click Set Expiration. Here you can select one of the default expirations or click custom date and time to set your own. Next, check the box if you would like the record owner, such as yourself, or users with edit access to be notified via email when the recipient's record access expires. Click Done to save.

Share a Folder

Open the shared folder from your vault and click the edit icon and from the “Users” tab, add the user or team you would like to share the folder with.

Set their permissions and from the dropdown menu click Set Expiration, following the same steps you would for a single record share (described above).

Next, check the box if you would like users with "can manage records" permissions over the folder to be notified via email when the recipient's record access expires. Click Done to save.

Overview

The Security Audit screen gives the passwords stored in your vault an overall security score based on password strength. You can clearly view information about each record's password strength and reuse from this screen.

Calculation of Security Score

The calculation of password strength and reuse is performed continuously from your vault across all platforms including Keeper Desktop, Web Vault, iOS and Android devices.

Keeper's password "strength" is a calculated score based on the complexity of the password, with a score rating between 0 and 100 according to the metrics below:

Very Weak: < 20 Weak: 20-40 Good: 40-60 Strong: 60-80 Very Strong: 80+

For more information on how Security Scores are calculated, visit the following page:

You can easily view a record that contains a high-risk password by clicking on it from the provided list. To resolve the risk, you will be directed to change the password at the record's website and then update the corresponding record in your vault.

If you are a website developer and your users are experiencing a compatibility issue with Keeper's browser extension, please follow the steps below.

Keeper Icon Appearing in Wrong Field

Keeper uses pattern matching to determine if a field should display a lock icon. If a lock icon is showing on a form field in error, you can supply a CSS class of keeper-ignore to your form element. For example:

<input id="user_field" type="text" class="keeper-ignore my_class"/>

One Record with Multiple Domains

Some sites have more than one domain (website address) that require the same exact login/password. If this is the case for any of your records, rather than creating an entirely separate record, Keeper allows you to store multiple website domains within one record.

So no matter what domain you are logging in from, KeeperFill will recognize that domain as an alias and allow you to log in with the same stored credentials.

To store multiple website domains within a single record:

1. While viewing the record, click Edit.

2. Click the + Custom Field button.

3. Select URL from the Custom Field types

4. In Website Address, enter the site's alternate domain name.

5. To finish, click Save.

6. You can continue to repeat this process for additional domain names by clicking the + Custom Field button again.

macOS Login with Touch ID

Keeper is compatible with Touch ID on macOS, a biometrics-based technology that allows users to authenticate and log into their device using a fingerprint. If Touch ID is configured on a user's device and enabled in Keeper, this eliminates the requirement for users to use SSO or enter their Master Password at the Keeper login screen, further expediting the login process.

To enable Touch ID, click Account Dropdown Menu > Settings > Security and toggle "Touch ID" on.

Touch ID Setup

If Touch ID is not yet configured on your Mac, you will need to first enable the feature from your device settings. Once you have configured Touch ID , close out of the Settings window and return to your vault to proceed with the steps above.

Logging In with Touch ID

Next time you log in to Keeper, tap on the Touch ID icon from the login screen. Once authenticated, your vault will be decrypted and you will be automatically logged into Keeper.

By clicking Cancel you will be returned to the login screen to log in with your master password or SSO instead.

Keeper supports the ability to login with Windows Hello or Touch ID on a vault that is tied to an SSO provider such as Microsoft Azure. To set this up, please follow the instructions below.

(1) Login to your vault using your SSO as usual, and click the Account Dropdown Menu (your email) > Settings > Security.

(2) Enable Windows Hello (or Touch ID if you're on a Mac). Note that if you previously tried using this setting, you should turn it OFF and ON in order to reset the master password storage in your device.

(3) The next time you login to the Keeper Desktop App, simply click the "Windows Hello" or "Touch ID" button.

(4) You will now be able to login seamlessly to your vault using Windows Hello or Touch ID, without having to constantly login using your SSO provider.

If you are new to logging into Keeper using DUO for Two-Factor Authentication, the videos below will demonstrate the process for Web Vault, iOS, and Android users. To learn more about DUO's Two-Factor Authentication method for Enterprise, click here.

Web Vault

iOS

Android

Import from Excel

(1) If you are importing your passwords from Excel, first save the file in CSV format (UTF-8 encoded).

(2) Log into your Keeper web vault at https://keepersecurity.com/vault/

(3) Click on your account email in the upper right-hand corner, then click on Settings > Import.

(4) Select “Text file (.csv)” from the list of options.

(5) Drag and drop the exported file into the target window.

(6) You can use the drop-down menu in each column to map to the correct Keeper field.

(7) Click Next.

(8) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(9) Click Import.

Export

To import from Avast Passwords, you must export your records first.

(1) Launch Avast Passwords and log in to your account

(2) Select Import/export data (3) Click Export to File (4) Name the file and click Save

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Avast from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from EnPass, you must export your records from first.

Mac

(1) Click File > Export.

(2) Select .json as your file format.

(3) Choose the location to save the file.

(4) Name the file and click Save.

Windows

(1) Click on the menu in the upper left-hand side.

(2) Click on File > Export.

(3) Select .json as your file format.

(4) Choose the location to save the file.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose EnPass from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(7) Click on Import.

Export

To import from Kaspersky, you must export your records first.

(1) Click Settings > Import/Export

(2) Export to text file and Save

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Kaspersky from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from MacPass, you must export your records first.

Mac

(1) Click File > Export as XML.

(2) Name the file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose MacPass from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(8) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(7) Click on Import.

Export

To import from MyKi, you must export your MyKi records first.

On Windows

(1) Click Settings > Import/Export

(2) Export to text file and Save

On Mac

(1) Click on File > Export CSV

(2) Select folder destination and Save

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose MyKi from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Passpack, you must export your records first.

Web Vault

(1) Click Settings > Export.

(2) Click on Download.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Passpack from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

If you encounter an issue with the Keeper Desktop application and you need to reset the content and settings, follow the steps below.

Mac & Windows

While in the Keeper Desktop App, navigate to Help > Reset Keeper.

Mac Store Version

Additional information may need to be deleted manually if you installed Keeper from the Mac App Store. Open the "Terminal" application from your Applications > Utilities menu then run the below command:

rm -rf ~/Library/Application\ Support/Keeper\ Password\ Manager/

Overview

Self-Destructing Record’s utilize Keeper’s existing One-Time Share technology which allows time-limited, secure sharing of a record to anyone, even if they don’t have a Keeper account.

Self-Destructing Records take our One-Time Share feature even further by automatically deleting the record from your vault once the share link is disabled and the recipient’s access is revoked. This reduces your workload to revoke record access and removing it from your vault at a later time.

Create a Self-Destructing Record

To create a Self-Destructing Record, create a new record as you normally would. Enter the record details and click Add Self-Destruct.

From the menu that is now presented, select when you want the share link to expire.

Once you've made your selection, click Save & Share to generate a One-Time Share link.

You have the option to copy the link directly, or send it in an invite or QR code format.

The recipient of a Self-Destructing Record simply clicks on the provided link and is instantly presented with the shared record in their web browser. One-Time Share links are bound to a single device, further strengthening security and preventing unauthorized distribution or viewing on multiple devices. The link will expire at the specified time or once the recipient has viewed the record for five minutes, whichever comes first.

Securely Share Files Using Self-Destruct

Keeper's Self-Destructing Records allow you to securely share records with file attachments that self-destruct at a specified time.

Create a record as you normally would and click Add Attachments to upload your file, or simply drag and drop the file directly into your vault.

Click Add Self-Destruct, select when you want the share link to expire, then click Save & Share to generate a One-Time Share link.

The recipient of a Self-Destructing Record simply clicks on the provided link and is instantly presented with the shared record in their web browser. They can then click on the file to download it to their local device.

Delete a Self-Destructing Record

You can delete a Self-Destructing Record at any time, thus disabling the share link by clicking Delete Now. Deleted Self-Destructing Records will appear in your vault's “Deleted Items” with the option to "Restore".

Overview

BreachWatch is a powerful, secure add-on feature that monitors the internet and dark web for breached accounts matching records stored within your Keeper Vault. BreachWatch delivers the most in-depth monitoring available to the public with a database of over a billion records while upholding Keeper's state-of-the-art, zero-knowledge security architecture.

BreachWatch alerts you so that you can take immediate action to protect yourself against hackers. Once activated, BreachWatch continuously monitors for compromised credentials and notifies you if any of your records are at risk.

User Experience

To sign up for BreachWatch from Keeper's Web Vault or mobile app, navigate to the BreachWatch screen and follow the on-screen prompts. You can also purchase BreachWatch directly from the . After signup, BreachWatch performs a local scan of passwords that are currently stored in your Keeper vault.

Once activated, BreachWatch will prompt the user on their device to Resolve the high risk password by changing it at the affected site and updating the corresponding record in their Keeper vault. If you Ignore the notification, then that record will be skipped on future scans until the password is reset. The user may also do nothing (deferring a response) and leave the risky password unchanged and thus still at risk.

Benefits & Features

• BreachWatch performs unlimited security scans of your passwords on all devices.

• Users are automatically alerted to take action if any of the passwords in their vault have been used in a publicly known breach that could leave them vulnerable to a credential stuffing attack, or an account takeover.

• BreachWatch continuously monitors for compromised credentials. Tracking over a billion known passwords while continuously adding new information as breaches are discovered on the dark web.

• Keeper reports the latest scan date and time as well as tracks the resolution history of every breached password for historical auditing.

BreachWatch Scan

To start your BreachWatch scan, click BreachWatch in the left navigation menu, then click Let's Begin > Scan.

BreachWatch will then scan your records and report any risks associated with them. Clicking each record listed will allow you to view the steps needed to Resolve each risk. Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in your Keeper Vault with the same password.

Give trusted family and friends access to your Keeper Vault in the event of an emergency or loss of life. You can designate up to five emergency contacts and decide how much time should pass before their access is granted.

From the Account Dropdown Menu (your email address), select Account > Emergency Access.

Click Trusted Users and enter the email addresses of up to five contacts (Keeper users). Optionally, select a "Delay Access" duration from the dropdown menu for each user, then click Send.

The amount of time between your request to provide emergency access and access granted can be set up to three months per contact. If a delay is configured, the countdown begins the moment the trusted user attempts to login to your vault.

In order for the recipient to accept the request, you must first establish a "sharing" relationship if one hasn't already been established through Keeper's record/folder sharing features.

If prompted, click Send Invite.

Once the recipient accepts your sharing request, you will need to invite them to be your emergency contact once more from the “Emergency Access” section of your vault. This step is not necessary if a sharing relationship has previously been established.

Emergency Contact Workflow

Once a sharing relationship has been established, the recipient will notice a red notification indicator has appeared in the "Emergency Access" section of their Account screen. By clicking My Access they can Accept or Decline emergency access to your account.

Once accepted, clicking Login will allow them to access the account they have been granted access to (once the access delay has passed, if enabled).

View Status of Invites & Edit Contacts

To view the status of your emergency access invites click Account > Emergency Access > Trusted Users. From here, you can also delete your emergency contacts at any time.

Overview

Starting with version 17.1 of the Keeper Browser Extension, we have drastically increased the speed at which we can resolve autofill issues while also training Keeper's Machine Learning models to safeguard autofill accuracy across the web.

We've introduced a new "Snapshot Tool" in the Keeper Browser Extension that greatly simplifies the process of fixing autofill issues on customer-owned websites or internal tools that were previously difficult for our engineers to access. By submitting a snapshot to our team, we can turn around site-specific autofill improvements in a matter of minutes.

Reporting Autofill Issues with the Snapshot Tool

To report an Autofill Issue, there are 2 locations to access this feature: From the on-page form fill and the browser extension toolbar.

On-Page Form Fill

From the on-page form filling screen, click on the overflow menu > Report an Autofill Issue

Browser Extension Toolbar

From the browser extension toolbar window, click on the overflow menu > Report an Autofill Issue.

Submitting Snapshots & Reporting Issues

Next, click Take Snapshot to take a screen capture of your browser window.

If you are having trouble with a website's login page, simply select Report an Autofill Issue from the extension Options menu or from the fill tool.

Click Take Snapshot to take a screen capture of your current browser window. Click Next: Preview to review exactly what data will be sent to Keeper, ensuring there is no confidential information included before you proceed.

Next, select from the provided list of autofill issues or describe your own.

Keeper will NOT send credentials or confidential information. We only send the screenshot and HTML page structure exactly as displayed in the preview window.

Click Report Issue to send the information to the Keeper Team.

Snapshot Resolution

The Keeper team will promptly receive the necessary information to diagnose and resolve the filling issue. Once a solution is implemented, an update will be released to all customers. You will receive an email notification confirming the update. In many cases, site-specific fixes can be turned around within the same day.

Autofill Issues

See the page to request a fix for a website that isn't filling properly. Our team can process fixes on the same day.

Check for Extension Updates (Chrome)

To experience the latest KeeperFill updates and features, you want to make sure you running the latest version of the Keeper Browser Extension. To update KeeperFill, follow the steps below:

1. In your browser's search bar, navigate to chrome://extensions.

2. In the upper right corner, toggle "Developer mode" on.

3. In the list of your current browser extensions, locate the "Keeper Password Manager & Digital Vault" extension and click Details.

4. In the upper left corner, click Update.

Check for Extension Updates (Firefox)

To update KeeperFill in Firefox, follow the steps below:

1. In your browser's search bar, navigate to about:addons.

2. In the upper right corner, click the gear icon and select "Check for Updates"

3. Ensure that Keeper is updated to the latest version.

Capturing Error Messages (Chrome)

If you are experiencing an error, it is helpful to provide Keeper support with any console errors that might be occurring. To capture the errors, follow the steps below.

• In your browser's search bar, navigate to chrome://extensions.

• In the upper right corner, toggle "Developer mode" on.

• In the list of your current browser extensions, locate the "Keeper Password Manager & Digital Vault" extension and click on "background.html"

• Click on the "Console" tab. Check for any errors in red. Take a screenshot of any error messages and send them to support.

Conflicting Extensions

Sometimes, other browser extensions or software installed on the computer can conflict with Keeper. Common examples are products which filter web content, block popups or perform any sort of website traffic manipulation.

If you are experiencing a strange issue with your KeeperFill browser extension, we recommend turning off all of your other 3rd party extensions to determine if there is a conflict. If you find a conflict, please provide this information to Keeper support.

Troubleshooting Video

This video explains how to capture errors from the KeeperFill extension when working with the support team.

Resetting the Chrome Extension

If you are unable to login to the KeeperFill Chrome extension, a reset of the extension may be required. To reset your KeeperFill Chrome extension, follow the below steps:

• Open Chrome and select Chrome > Settings > Extensions

• From the Keeper extension, select Details > Extension Options

• Click on "Clear All Storage"

• Restart Chrome

Resetting the Safari Extension

If you are unable to login to the KeeperFill Safari extension, a reset of the extension may be required. To reset your KeeperFill Safari extension, follow the below steps:

• Open Safari and select Safari > Settings

• From the Keeper extension, select Settings

• Click on "Clear All Storage"

• Restart Safari

Please follow the steps below to provide Keeper Support with information to assist vault related errors.

(1) Using Chrome browser, open the Web Vault at:

(2) Click on View > Developer > Developer Tools.

(3) Login to your Keeper Vault.

(4) On the Developer Tools window, click on the "Console" tab and check for any errors in red.

(5) If there are errors, take a screenshot and/or copy-paste the information for the Keeper Team.

Internet Explorer

Consider Switching to Edge With IE Mode

From the Microsoft website: "Since 1/12/16, Microsoft no longer provides security updates or technical support for old versions of Internet Explorer."

Although Keeper maintains the Internet Explorer 11 extension, we recommend that customers stop using IE or consider the latest Microsoft Edge with "IE Mode" as documented here: . If you still require the use of IE for legacy applications, please see the instructions below.

KeeperFill for IE installer is only available on request. After installing Keeper for Internet Explorer, you may need to perform the following actions:

Disable user names and passwords on forms:

1. Exit and restart the browser to activate Keeper.

2. Right-click along the top bar and ensure Command bar is selected for display.

3. Open Internet Explorer, click on the Tools icon, then Internet Options.

4. Click the Content tab.

5. Under "AutoComplete", click on Settings.

6. Disable 'User names and passwords on forms".

Disable enhanced protected mode & enable third-party browser extension:

1. Open Internet Explorer, click on the tools icon, then Internet Options.

2. Click on the Advanced tab.

3. Under the "Security" section, ensure that enhanced protected mode is disabled.

4. Under the "Browsing" section, Enable third-party browsing extensions.

IE11 - Trusted Sites Policy

Customers who login to Keeper with SSO, or customers who are on corporate networks that deploy group policies for Internet Explorer, ensure that the following entries exist in your Trusted Sites settings under Tools > Internet Options > Security.

US / Global Customers:

keepersecurity.com

*.keepersecurity.com

US Public Sector / GovCloud:

govcloud.keepersecurity.us

*.govcloud.keepersecurity.us

EU Data Center Customers (Dublin, Ireland):

keepersecurity.eu

*.keepersecurity.eu

AU Data Center:

keepersecurity.com.au

*.keepersecurity.com.au

CA Data Center:

keepersecurity.ca

*.keepersecurity.ca

JP Data Center:

keepersecurity.jp

*.keepersecurity.jp

Enterprise customers must push group policies to end-users with these Trusted Sites in order to fully function with SSO and other critical features.

Overview

At the foundation, Keeper is an encryption platform with policies and controls in place to protect customer data. In this security model, the customer is also responsible for protecting access to their vault by following recommended security practices. This document outlines key recommendations that will help you secure the data stored within your vault.

Create a Strong Master Password

For customers who login to Keeper with a Master Password, the key to decrypt and encrypt the Data Key is derived from the Master Password using the password-based key derivation function (PBKDF2), with 1,000,000 iterations by default. All customers who login to the vault are automatically migrated to 1,000,000 iterations.

After the user types their Master Password, the key is derived locally and then unwraps the user's 256-bit AES Data Key. After the Data Key is decrypted, it is used to unwrap the individual 256-bit AES record keys and folder keys. The Record Key then decrypts each of the stored record contents locally.

Keeper implements several mitigations against unauthorized access, device verification, throttling and other protections in the Amazon AWS environment. Enforcing a strong Master Password complexity significantly reduces any risk of offline brute force attack on a user's encrypted vault.

The National Institute of Standards and Technology (NIST) provides password guidelines in: . The guidelines promote a balance between usability and security; Or in other words, passwords should be easy to remember but hard to guess. The NIST instruction recommends an eight character minimum but a higher value will ultimately result in a harder to guess/crack password. Keeper enforces a minimum of 12 character master passwords.

Enable 2FA on Your Keeper Account

2FA can be added to any consumer or business account. Business customers can enforce the use of 2FA with various levels of control and security options. The 2FA step comes before the Master Password entry. Performing the device verification and 2FA step prior to the Master Password entry phase offers mitigation of several attack vectors including brute force attack, password testing and account enumeration.

To activate Two-Factor Authentication, visit the Settings screen of the Keeper Web App, Desktop App or mobile application.

Keeper also supports FIDO2-compatible WebAuthn hardware-based security key devices such as YubiKey and Google Titan keys as a second factor. Security keys provide a convenient and secure way to perform two-factor authentication.

Enable 2FA on Your Email Account

Access to your email account is a key component in the overall security of your personal information. Ensure that your email account uses a strong auto-generated password created by Keeper. And ensure that you are protecting your email account with multi-factor authentication. Follow the steps provided by your email provider to lock down your account with the most restrictive methods possible.

We recommend that customers protect email accounts using a hardware-based Yubikey or Google Titan key when possible. If this is not available from your email provider, or if you don't own a Yubikey device, the next best thing is using a TOTP code generator.

Keeper supports the ability to store TOTP codes for logging into your email account or other service. To learn more about protecting TOTP codes in your Keeper Vault, .

While using SMS as a two-factor authentication setting is better than having nothing at all, we don't recommend relying on SMS due to well documented .

Be Careful of Browser Extensions

As a general security practice, we recommend that our customers be very cautious with installation of 3rd party browser plugins / browser extensions, such as ad blockers, coupon tools and other "helpful" utilities. Many browser extensions request elevated permissions which have the ability to access any information within any website or browser-based application that you visit. Make sure you fully trust the company who developed the browser extension, and look for their security certifications before you install it.

If you have any other security related questions, feel free to email our team at [email protected].

Overview

By default, users are logged out of Keeper if their browser closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to instead remain logged into for a configurable duration. Continuing reading to learn how to enable Stay Logged In in the Keeper Web Vault, Desktop App and the KeeperFill Browser Extension.

Web Vault & Desktop App

Sign in to the Keeper Web Vault or Desktop App and click the Account Dropdown Menu (your account email) > Settings > Security and turn "Stay Logged In" on.

Keeper will then recommend that you also enable the "Auto-Logout" setting, to protect your account if you walk away from your device. Also known as the "Inactivity Logout Timer", this automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer and it will continue to count down if you close your browser.

If you've downloaded the KeeperFill Browser Extension, you can manage the Auto-Logout setting from the extension's security settings menu (more on this in the section below).

Browser Extension

If you've downloaded the KeeperFill Browser Extension you can enable both the Stay Logged In and Logout Timer features from the extension's security menu.

Click Settings > Security and enable (or disable) "Stay Logged In Between Sessions" and set a "Inactivity Logout Timer".

Android

To enable Stay Logged In on your Android device, navigate to Keeper's Settings menu and toggle "Stay Logged In" on. Once enabled, the setting will apply to all of your devices.

Security

Keeper's Stay Logged In feature uses . The user's Master Password is NOT stored on the device or computer when using the Stay Logged In feature. Keeper utilizes advanced encryption, session management tokens and device authorization capabilities to protect your vault.

Microsoft 2FA Configuration

Keeper can protect Azure AD / Office 365 logins with our TOTP (time-based one-time password) feature. By default, Microsoft provides a different type of code which supports their push method. Below are the step by step instructions to setting up Office 365 TOTP code support properly.

(1) From your Microsoft Azure / Office 365 Profile Screen, visit your security settings screen. The Microsoft site seems to change often, so we won't add a hyperlink here. Click on "Add Method" to set up two factor authentication on your Microsoft account.

(2) Select "I want to use a different authenticator app" as your preferred option

The QR code will be generated and displayed:

(3) On Keeper from your record, click on "Add Two-Factor Code". Or if you're using the mobile app, you can tap on "Add Two-Factor Code" to scan it with the camera.

(4) Enter the verification code as displayed in your Keeper app

(5) Click Next and then Save the record in the Keeper vault.

(6) To ensure that Autofill works with all the various Microsoft sites you may be using, we recommend adding several custom fields to your Keeper record similar to the screen below.

Logging in with Two Factor Code

When logging into Microsoft Online, use Keeper's right-click menu as a simple way to fill the TOTP code.

KeeperFill Right-Click Context Menu

If a website form field does not display the Keeper lock icon, users can right-click on the field to produce a context menu with KeeperFill features. The context menu offers the ability to fill logins, payment cards, addresses and create new passwords.

The KeeperFill right-click context menu provides the following features:

• Filling record login fields

• Filling payment card fields

• Filling billing and address fields

• Filling TOTP Codes

• Creating a new record

• Opening the extension window

• Launching the Web Vault

• Logging out of your account

Windows Hello Login

Keeper is compatible with Windows Hello, a biometrics-based technology that allows users to authenticate and log into their Windows device using biometric facial recognition, fingerprint reader, or pin (available on Windows 10). If Windows Hello is configured on a user's device and enabled in Keeper, this eliminates the requirement for users to enter their master password at the Keeper login screen, further expediting the login process.

Enable Windows Hello:

1. Open the Account Dropdown Menu.

2. Click Settings > Security.

3. Toggle "Windows Hello Login" on.

4. Once you have read the warning notification, click Enable to accept.

Windows Hello Setup

If Windows Hello is not yet configured on your device, you will receive a prompt to open your Windows Settings to configure it. Once you have configured Windows Hello, close out of the Settings window and return to your Vault to proceed with steps 3 & 4 above (Enabling Windows Hello).

Logging in with Windows Hello

Next time you log in to Keeper, Windows Hello will first attempt to authenticate your identity. Once authenticated, your vault will be decrypted and you will be automatically logged into Keeper.

By clicking Cancel you will be returned to the login screen to log in with your Master Password instead.

If you have attempted to use Keeper's automated import tool and have been unsuccessful, or you are running Linux OS, follow the directions below to complete the process manually. You will first need to perform a manual export of your passwords from Chrome and then import the file to Keeper as a Text File (.csv).

From your Chrome Browser, click Settings > Passwords then click

A popup will appear, click Export Passwords... and complete the necessary steps to save the passwords to your computer as .csv file.

From Keeper, click Settings > Import > Text file (.csv)

Drag and drop the exported file into the target window "Drop a File Here"

Use the dropdown menus to set the column headers to the following: Title, URL, Login, Password, then click Import

Instructions

To import from 1Password, you must export your records from the 1Password application on MacOS or Windows.

MacOS

(1) Log into your 1Password account using a desktop computer.

(2) Select the vault you want to export.

(3) Choose File > Export > Your Vault

(4) Enter your Master Password to unlock

(5) Choose the file format: 1PUX or CSV, then click Export Data. The 1PUX format is preferred since it contains all data.

(6) Choose a location to save the export. Make sure to delete this file after the import is complete.

Windows

(1) Open and unlock 1Password.

(2) Select the vault you want to export.

(3) Click on the 3 vertical dot menu and choose Export > Your Vault

(4) Choose the file format: 1PUX or CSV, then click Export Data. The 1PUX format is preferred since it contains all data.

(5) Choose a location to save the export.

Import to Keeper

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose 1Password from the list.

(5) Drag the exported file into the target window "Drop a File Here"

If you intend to share all top-level folders with other people, check the box "Import Root Level Folders as Shared". Otherwise leave it unchecked.

(6) Click on Import.

CLI Import with Keeper Commander

Keeper Commander also supports a 1Password import that allows more configurable options, such as default folder permissions. See the below link for more details:

.KDBX File Import Overview

Keeper supports the ability to import directly from encrypted Keepass files in .kdbx file format. Keeper can import both password-protected and private key-protected formats. All versions of .kdbx files are supported.

This import includes Folders, Password, Custom Fields and even File Attachments! 🥳

To import into Keeper, please locate your encrypted .kdbx file, and if you are protecting your Keepass file with a private key, you will need that file as well.

Import Steps

(1) Login to Keeper on your computer

Login to the Keeper Web Vault:

• (US)

• (EU)

Or, download the Keeper Desktop App:

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose KeePass (.kdbx).

(5) Type in your KeePass Password.

(6) Click on the Key File + button and navigate to your Key File if one was used.

(7) Locate your .KDBX file and drag and drop it the target labeled "Drop a File Here".

(8) If necessary, use the drop-down menu in each column to map to a Keeper field. For KeePass files, the structure is automatically mapped so you should not need to perform any manual mapping.

(9) Click on Import to complete the process.

If you run into any issues, you may need to first update your Keepass application to a newer version, or export your Keepass database to a newer format.

Export

To import from Password Boss, you must export your records first.

Mac & Windows

(1) Click File > Export Data.

(2) Choose Password Boss JSON - Not Encrypted.

(3) Navigate to where you want to save the file. Click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Password Boss from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Proton Pass, you must export your passwords first.

(1) Open the Proton Pass browser extension for Chrome or Firefox and click Settings.

(2) Click on the Export tab. Ensure "Encrypt your Proton Pass data export file" is unchecked.

(3) Click Export. A file title "Proton Pass_export_[date].zip" will be saved to your computer's downloads.

Import

(1) Log into the Keeper Web Vault or Desktop App.

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Proton Pass from the list of password managers.

(5) Drag-and-drop the exported zip file into the target window "Drop a File Here".

(6) If you intend to share all first level folders, check the box "Import Root Level Folders as Shared". By selecting this option, all first level folders will become shared.

(7) Click Import.

Export

To import from Psono, you must export your records first.

(1) From Psono, click email address on upper right then 'Other'

(2) Click 'Export' then select JSON

(3) Save the file.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Psono from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from ZOHO, you must export your records first.

Web Vault

(1) Click the Tools tab and choose Export Secrets on the left panel.

(2) You can either export all the secrets or export only the ones that belong to a particular secret type

(3) Choose General CSV and click on the Export Secrets button.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose ZOHO from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Sticky Password, you must export your records first.

Mac

(1) Click on File > Export > Unencrypted.

(2) Name the file and click Save.

Windows

(1) Click Menu > Export.

(2) Click Export All or Export only selected items.

(3) Select Sticky Password 6 XML.

(4) Click Next.

(5) Name the file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Sticky Password from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(8) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(7) Click on Import.

The Keeper Commander SDK provides command-line or scripted capabilities to import records and folders into your Keeper Vault. Supported import formats are below:

• JSON import files can contain records, folders, subfolders, shared folders, default folder permissions and user/team permissions

• CSV import files contain records, folders, subfolders, shared folders and default shared folder permissions

• delinea/thycotic import includes private folders, shared folders, permissions, file attachments, TOTP codes

• Keepass files will transfer records, file attachments, folders and subfolders

• lastpass file format is supported, however for end-users we recommend the which supports folders, shared folders and file attachments.

• lastpass full enterprise import supports shared folders

• myki import method supports records and folders

• 1password method supports records, folders and file attachments

• manageengine method supports records, folders and file attachments

Most features available in the Keeper Admin Console are available through Commander's interactive shell and SDK interface.

Safari

(1) Visit the link below to download Keeper for Safari from the Mac App Store.

(2) Open your Safari browser and navigate to Safari > Preferences > Extensions.

(3) If you have an existing KeeperFill extension, uninstall it.

(4) Activate the newly downloaded Keeper Password Manager extension by clicking the checkbox.

(5) At some point you will be asked for permissions. Make sure to select "Always Allow on Every Website" so that Keeper can work across websites that you visit.

(6) Now the KeeperFill extension should be displayed in your browser toolbar. However, you may need to restart Safari in order for the Keeper icon to appear.

(7) We recommend that you disable Safari's built-in autofill features. Open Safari > Preferences > AutoFill and disable "user names and passwords".

Troubleshooting

Crash after install: If a user installs Keeper for Safari on both M1 Mac and Intel Mac at the same time via the "Share Across Devices" feature of Safari, it may require taking the following action:

1. Open your Safari browser and go to Safari > Preferences > Extensions.

2. Disable and enable the Keeper for Safari extensions.

3. Try to launch Keeper again.

Export

To import from Bitwarden, you must export your records first.

Option 1: From Windows & Mac

(1) Launch the Bitwarden Desktop App and log in to your account.

(2) Select File > Export Vault.

(3) Select file format .csv from the dropdown and enter your Master Password.

(4) Click the Submit button and Export Vault.

(5) Select your destination for the .csv file and click Save.

Option 2: From Bitwarden Web Vault

(1) Click on Tools > Export Vault.

(2) Select file format .csv from the dropdown and enter your Master Password.

(3). Click Export Vault twice to confirm the action.

(4) Open the file to save it. Select your destination for the .csv file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Bitwarden from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Passportal, you must export your records first.

(1) Click Settings > Import/Export

(2) Select checkbox to include field headers

(3) Click Export and save the file.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Passportal from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Safari, you must export your records first.

(1) From Safari, click on Safari > Settings then select the 'Passwords' tab.

(2) Select '...' then select 'Export All Passwords...'

(3) Save the Passwords.csv file.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Text file (.csv) from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

The mappings are as follows:

• Title: Title

• URL: URL

• Login: Username

• Password: Password

• Notes: Notes

• Two-Factor Code: OTPAuth

(8) Click on Import.

Export

To import from SplashID, you must export your records first.

Mac

(1) Click File > Export > CSV.

(2) Name the file and click Save.

Windows

(1) Click the SplashID Icon > Export > Export to CSV.

(2) Name the file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose SplashID from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from True Key, you must export your records first.

Mac

(1) Click on the Settings icon.

(2) Click App Settings > Export Data > Export.

(3) After warning appears, click Continue.

(4) Enter your Master Password.

(5) Name your file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose True Key from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from KeePass, you must export your records first.

Windows

(1) Click File > Export > KeePass XML File. Use XML for KeePass 2.0 and above. XML supports folder organization. If you use KeePass 1.X, export as a CSV file. If you have a .kdbx file, use the Import from KeePass KDBX instructions instead.

(2) Provide a filename and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose KeePass. If you have a .kdbx file, see Importing fom KeePass KDBX.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Overview

Keeper is fully integrated into the login experience of every website and app using the Passwords button that appears above your device's keyboard.

Autofill supports the following features:

• Passwords

• Two-Factor (TOTP) codes

• Passkeys

Setup

iOS 18 and Above

With the update of iOS 18, you can enable KeeperFill directly from the Keeper app in one quick step. From the Settings menu, tap Enable KeeperFill > Turn On.

iOS 17 and Below

Before you can utilize KeeperFill's autofill features, you will first need to perform a few simple setup steps:

1. Open your device's Settings app.

2. Scroll down and select Passwords.

3. Tap Password Options and ensure "AutoFill Passwords" is toggled on.

4. Select Keeper below both "Allow filling from" and "Set up Verification Codes using"

5. Follow the prompt and uncheck all other password managers (including keychain).

Autofill

Once the setup steps are complete, you will see a Passwords button appear above the keyboard when logging into an app or website. Tapping Passwords will launch KeeperFill.

KeeperFill will present a matching record from your vault. Alternatively, you can search for a record or create a new record. If there is a record match, tap Fill to autofill your login credentials.

Two-factor codes will be automatically copied to your clipboard when possible. To copy a code manually, tap the copy icon next to the code and when prompted paste the code into the field provided.

Passkey Setup

• Launch the Settings app on your iOS device and select Passwords.

• Next, choose Password Options.

• Toggle ON AutoFill Passwords and Passkeys.

• Then tap Keeper so a blue tick appears. If you have used Autofill before, iCloud Passwords & Keychain may have a blue tick as well. For optimal accuracy when using Keeper for Passkeys, make sure to tap iCloud Passwords & Keychain to remove it as an option.

Passkeys

Once the setup steps are complete, websites or applications that support passkeys will either prompt you to create a passkey or will provide a setting in your account section to setup a passkey login.

• Creating a passkey for a website or app is a simple process on your iOS device.

• Tapping Create Passkey on a site or app will trigger Keeper to intercept the request. Keeper then prompts you to create a passkey for your associated login and saves it to your vault.

• Returning to sites or apps where you have a stored passkey you will either be prompted to sign in with passkey or will be able to select Sign in with Passkey. Keeper does the rest!

Overview

Keeper offers Secure File Storage to protect your confidential files, photos, and videos. Securely upload and store files such as passport photos, medical cards, drivers licenses, tax and loan documents, videos and any other private file to your Keeper vault.

Files are encrypted during the upload process and the user holds the encryption key for complete privacy and security. Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information.

Benefits & Features

• Just like our password encryption technology, Keeper protects your confidential files with 256-bit AES encryption using record-level keys.

• Secure file storage is available across all of your devices as a Secure Add-on, including iOS, Android, Web Vault and Desktop App.

• Files can be easily and securely shared with other Keeper users, from vault-to-vault.

• Like your other Keeper records, you can set sharing permissions for records that contain your secure files (can edit, can share, can edit & share, and read only).

• File sizes are supported up to 100MB for Web Vault, 5GB for Desktop App, Android and iOS.

Web Vault & Desktop App

From within the vault, users can either create a new record or add an attachment to an existing record. While editing a record, click Add Attachments to upload your file, or simply drag and drop the file directly into your vault. Once the upload is complete, click Save.

By clicking the download icon next to the file or photo within a record, you can quickly View or Download it.

Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information. Within the record click Share, then enter the email address(es) of the other Keeper user(s) you would like to share the record with.

iOS & Android

Secure File Storage is also available for iOS and Android. You can either add an attachment to any existing record or create a new record using the "File Attachment" record type. Within the record, tap Add Files or Photos to upload your file.

Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information. While viewing the record, tap Share > Share with User and enter the email address(es) of the Keeper users you would like to share the record with.

Understanding Attachment Status Icon:

When viewing a record with file attachments, you may see an icon next to a file if it hasn't fully synced to your Keeper Vault.

• File Not Yet Uploaded / Sync Pending:

• If you see this icon (a cloud symbol with a line through it), it means that this specific file attachment has not yet successfully uploaded or synced to your Keeper Vault's cloud storage. The file is currently only stored locally on the device from which you attempted the upload.

• File attachments require an active internet connection to upload. If you are offline, attachments cannot be added or uploaded. If this icon appears, it typically signifies an unexpected issue or an interruption (e.g., a lost internet connection, an error during transfer) that prevented the file from reaching the cloud.

• While the icon is present, the file is not yet backed up to the cloud and may not be accessible from other devices or the Keeper Web Vault.

• To ensure your file is securely backed up and accessible across all your devices, please verify your internet connection.

Overview

Keeper's secure messaging solution, KeeperChat, allows you to chat with friends, family member and colleagues with peace of mind knowing you are in control of the content you share and who you share it with. KeeperChat has best-in-class security with end-to-end encryption for messages at rest and in transit. KeeperChat runs on a variety of devices and platforms including Android, iOS, Windows, and Mac OS. Download KeeperChat from the or .

Benefits & Features

• Like your passwords, your private messages are stored in a secure, digital vault which can be accessed using the same credentials or biometric login method (Fingerprint or Face ID) you use to login to Keeper Password Manager.

• For increased security, two-factor authentication is available, providing an extra layer of protection against unauthorized access.

• Just like our password encryption technology, Keeper protects your messages with zero knowledge, 256-bit AES encryption security architecture.

• Self-destruct timer and message retraction remove unwanted or sensitive messages and files without a trace.

• Message history and chat threads automatically sync across all your devices.

• Securely share sensitive photos and videos with complete privacy. Photos and videos are saved to your private gallery without leaving a trace on your camera roll.

User Experience & Preview of Features

KeeperChat is free to use with all features. To access additional storage, unlimited self-destructs, and unlimited message retraction, upgrade to .

Biometric Login & 2FA

Access Two-Factor Authentication and Biometric Login Settings by navigating to KeeperDNA.

Self-Destruct & Retract

Before sending your message, tap the timer icon and use the slider to set the self-destruct timer.

To retract, edit or set the self-destruct timer for a message that has already been sent, long press (or click) on the message and make a selection from the generated menu.

Private Media Gallery

Navigate to the Gallery to upload and securely share sensitive photos and videos.

Group Chats

Select the create chat icon and then select Start a Group Chat to add contacts.

Privately communicate and collaborate with groups of friends, family members and coworkers.

Keeper Forcefield: Windows Endpoint Protection

Overview

Keeper Forcefield is an advanced endpoint security feature for Microsoft Windows that protects sensitive applications and processes from unauthorized access. It is specifically designed to defend against threats such as infostealers and password-stealing malware installed from phishing or other attacks.

Forcefield is bundled with the Keeper Desktop application for Windows and operates silently in the background to ensure data protection without impacting performance or usability.

Getting Started

Installing Keeper Forcefield via Keeper Desktop

To activate Forcefield from the Keeper Desktop application, install the latest .

After installation:

• Navigate to Settings > Security in Keeper Desktop

• Visit the Forcefield screen and activate the service.

Once enabled, Forcefield will immediately begin protecting your computer.

Standalone Installation

The installation of the standalone version of Keeper Forcefield is available through an MSI installer based on the architecture.

x86/64-bit

ARM/64-bit

Status and Updates

The system tray provides a Forcefield status icon and the ability to check for a new version. Keeper will check on a daily basis for a new version, but the update must be explicitly installed by the user.

Applications Protected by ForceField

Forcefield is built to protect designated applications by verifying their process name, file name, and code signature. The following applications are secured using this validation approach:

Keeper Applications:

• Keeper Desktop

• Keeper Secrets Manager

• Keeper Commander

• Keeper Gateway

• Keeper Bridge

• KeeperChat

• Keeper Importer

Web Browsers:

• Chrome

• Microsoft Edge

• Firefox

• Brave

• Opera

• Vivaldi

If you would like Keeper Forcefield to protect additional applications, please email us at [email protected] and we'll review your request.

Quick Testing

To verify that Keeper Forcefield is protecting your machine:

1. Open Task Manager.

2. Right-click on a protected process.

3. Choose Create memory dump file.

4. The .dmp file should be 0 bytes if blocked.

Advanced Documentation

For more in-depth information regarding Keeper Forcefield including technical specs and IT Admin rollout, see the Enterprise Guide:

Create a Free Family Plan from a Business or Enterprise Account

All Keeper Enterprise users can create a free, Keeper Family Plan for up to 5 family members with unlimited devices. To create your personal vault, follow the steps below:

(1) Log into the Keeper Web Vault or Desktop App.

(2) Click on the Account Dropdown Menu (your email address).

(3) Select Account.

(4) Enter your personal email within the "Keeper Family License for Personal Use" section and click Send Email.

(5) Logout from your business vault on your browser by clicking on the Account Dropdown Menu > Logout.

Create Family Account

(1) Open the Keeper invitation sent to your personal email and click Verify Email Address.

(2) You will then be redirected to Sign Up by creating a master password for your personal account.

Important Note About Data Center Location

If you follow the link sent on your desktop computer, you'll be properly routed to the same geographic data center that is associated with your Keeper Business Vault. Therefore we recommend using your Desktop computer to create your personal Keeper Vault.

If you decide to use your mobile device for creating your personal vault, see the instructions below.

Creating Account on Mobile

If you decide to create your personal account on an iOS or Android device, please ensure you are in the correct data center location.

If you set up your personal Keeper account in the wrong region, you'll need to contact Keeper support to delete and re-create your account.

Confirming License Activation

After your personal account has been created, it will appear in your business vault Account Menu.

Important Notes Regarding Your Linked Personal Account

• Your linked personal account is licensed as a Keeper Family Plan account with 10GB of secure file storage and BreachWatch dark web monitoring.

• The company managing your Business vault does not have any access rights or ability to decrypt information stored in your personal vault.

• Your linked personal account will remain free on unlimited devices for as long as the business account is active.

• If you leave the business, or if the business does not renew their subscription with Keeper, your Family license converts into a Keeper Free subscription. You may continue to use your personal license on one device, or purchase a Family or Unlimited subscription for all of the premium features.

• Your Business Admin may remove the ability to share records from the business vault to the linked personal vault.

Switch Between Accounts

You can easily switch between your business/enterprise and personal accounts on Keeper for Web Vault, iOS and Android.

From your Web Vault, click the Account Dropdown Menu (your email address) > Account > Switch Account.

You will then be redirected to sign into that account using your master password.

Import Methods

Keeper provides several methods of importing data into the vault. Each method is fully documented with screenshots and example data in the subsequent pages of this user guide.

Records created in any platform will instantly sync to the your other devices. Records that are shared among users will receive updates in real time.

Importing from other password managers

Export

To import from Dashlane, you must export your records first.

Dashlane Web Client

DASH: Dashlane Secure Archive

1. Login into https://www.dashlane.com.

2. Under My Account, select Settings, Export Data.

3. Under DASH: Dashlane Secure Archive click on Export to Dash.

4. Create a password and confirm it in the second field.

5. Click on Export data.

6. A file called Dashlane Export.dash will be made where you have assigned downloads to go.

CSV: Non Secure Export

1. Login into https://www.dashlane.com.

2. Under My Account, select Settings, Export Data.

3. Under CSV, click on Export to CSV.

4. A file called "dashlane-credential-export.zip" will be made where you have assigned downloads to go. Warning: This can be read by anyone.

Import Into Keeper

Once your files have been exported from Dashlane using one of the two methods above, continue to Keeper's Web Client or Desktop App to import.

DASH: Dashlane Secure Archive

1. Log into the Keeper Web Vault or Desktop App.

2. Click on your account email in the upper right-hand corner.

3. Click on Settings > Import.

4. Choose Dashlane from the list.

5. Drag your Dashlane Export.dash file to the Drop a File Here. window.

6. Enter the Dashlane password you assigned it during the export.

7. Use the drop-down menus in blue to map each column to a Keeper field. Click Next.

8. If you intend to share all first level folders, check the box Import Root Level Folders as Shared.

9. Review and approve the import by pressing the “Import” button.

CSV: Non Secure Export

1. Log into the Keeper Web Vault or Desktop App.

2. Click on your account email in the upper right-hand corner.

3. Click on Settings > Import.

4. Choose Text File (.csv) from the list.

5. Your file from Dashlane may be zipped, un-zip it and select the right .csv you want imported. Dashlane separates files by credentials, ids, payments, personal info, secure notes.

6. Select the .csv you want imported and drag it to Drop a File Here.

7. Use the drop-down menus in blue to map each column to a Keeper field.

8. If you intend to share all first level folders, check the box Import Root Level Folders as Shared.

9. Review and approve the import by pressing the Import button.

Export

To import from mSecure, you must export your records first.

Mac

(1) Click File > Export CSV.

(2) Accept the warning by clicking OK.

(3) Select Export All Records.

(4) Name the file and click Export.

Windows

(1) Click on the Settings Icon

(2) Click on Backups > Export.

(3) Name file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose mSecure from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from RoboForm, you must export your records first.

Macintosh

(1) Before proceeding, make sure you do not have your Passcards organized in folders in RoboForm.

(2) Click File > Print List > Logins or Identities or SafeNotes

(3) Right-Click HTML page and choose Save As...

(4) Select the format as Webpage, HTML Only.

(5) Navigate to where you want to save the file and click Save.

Windows App

(1) Click on the RoboForm dropdown menu in the upper left column.

(2) Choose Options, then Account & Data.

(3) Choose Export.

(4) Under Format, select CSV file.

(5) Browse the location to save and choose Export.

Windows Extension

(1) Select the RoboForm icon on your taskbar or toolbar.

(2) Click on the Overflow Menu.

(3) Choose Options then Account & Data.

(4) Choose Export.

(5) Under Format, select CSV file.

(6) Browse the location to save and choose Export.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose RoboForm from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

The Keeper Web Vault and Desktop application provide export and reporting capabilities. For consumer accounts, this is available for all users. On Enterprise accounts, this may be restricted by the Keeper Administrator.

Export Options

CSV

Keeper's CSV format supports Folders, Subfolders and Shared Folders. CSV files can be imported and exported with Keeper.

File Format:

Folder,Title,Login,Password,Website Address,Notes,Shared Folder,Custom Fields

JSON

The JSON format is structured as an array of Shared Folder objects, and an array of Record objects. The JSON format is compatible with Keeper's import tools and the Keeper Commander CLI.

PDF

For a printer-friendly version of records, the PDF version is also available.

To print the PDF, click on the printer icon at the bottom:

Encrypted Keepass (.kdbx)

Web Vault and Desktop App

Keeper supports encrypted KeePass export through the Web Vault, Keeper Desktop application and Keeper Commander CLI which is available to all customers.

From the Web Vault and Desktop App, select KDBX export format and you'll be asked to provide the desired KeePass Master Password. You can also provide a Key File to encrypt the KeePass file. The Master Password you provide here is used to encrypt the KeePass file - this is NOT your Keeper Master Password.

Commander

Keeper Commander, our Command-line CLI and SDK platform also provides a flexible KeePass export option.

To install Keeper Commander, visit this link:

The command to run is the export command, documented at this link below:

Compatibility

Keeper works on every smartphone, tablet and computer. Keeper supports popular browsers including Chrome, Safari, Firefox, Edge, Opera, Brave and IE. Native app installation is available from the Keeper website and every public-facing app store (iTunes, Google Play, Microsoft Store, etc).

Keeper Web Vault

The Keeper Web Vault is a fully featured web-based application. To access the Keeper Web Vault login, visit:

US Data Center https://keepersecurity.com/vault

US Public Sector / GovCloud https://govcloud.keepersecurity.us/vault

EU Data Center https://keepersecurity.eu/vault

AU Data Center https://keepersecurity.com.au/vault

CA Data Center https://keepersecurity.ca/vault

JP Data Center https://keepersecurity.jp/vault

Keeper Desktop Application

Keeper Desktop is a cross-platform native desktop application for Windows, MacOS and Linux. Several installer files are provided at the links below.

Download Options

• Windows AppInstaller Install Link

• Microsoft Store Microsoft Store Link

• Mac OS .dmg Install Link (.dmg)

• Mac App Store Mac App Store Link

• Linux Fedora, Red Hat, CentOS, Debian, Ubuntu and Linux Mint Download Page Link

• Snap Store for Linux https://snapcraft.io/keepersecurity

Enterprise Installation

See the for more advanced deployment options.

Checksum / Hash

Keeper Desktop SHA1 hashes for the latest version can be retrieved here: https://keepersecurity.com/desktop_electron/SHASUM256.txt

Mobile App

iOS

Keeper for iOS can be installed directly from the App Store:

Android

Keeper for Android can be installed from the Google Play application at the link below:

KeeperFill Browser Extension

The latest Browser extensions can be installed by users at the links below: Chrome, Brave, Opera: https://chrome.google.com/webstore/detail/keeper%C2%AE-password-manager/bfogiafebfohielmmehodmfbbebbbpei Firefox: https://addons.mozilla.org/en-US/firefox/addon/keeper-password-manager/

Edge: https://microsoftedge.microsoft.com/addons/detail/keeper%C2%AE-password-manager-/lfochlioelphaglamdcakfjemolpichk

Safari: https://apps.apple.com/us/app/keeper-for-safari/id6444685332

Enterprise Deployment

For Keeper Enterprise administrators, please see the link below for Enterprise deployment options:

https://docs.keeper.io/enterprise-guide/deploying-keeper-to-end-users

Overview & Benefits

Families share nearly everything – documents, photos, videos, website accounts, bank info, social media, security system codes and personal identification numbers. Keeper Family Plan allows you to securely store and share this information between family members with ease.

The major features and benefits that are included with the Keeper Family Plan:

• Up to 5 Family Members with Private Vaults

• Minimum 10GB Secure File Storage

• Unlimited Password Storage

• Unlimited Devices & Sync

• Secure Record Sharing

Signing Up

Signing up for Keeper Family Plan is easy and can be done by visiting our Family Plan page, simply click "Buy Now" to get started. You will then be asked to enter your email address which will be used to create and login to your Keeper account.

At the checkout page, you can make the following customizations to your plan:

• Subscription Term

• Base Plan

• Recommended Add-Ons: Secure File Storage (10GB, 50GB, 100GB), KeeperChat and BreachWatch

Upon submitting payment, check your inbox for an email from Keeper Security inviting you to create your Keeper account.

Invite Family Members

Once you have logged into your Keeper account, inviting family members to join is easy and can be done from a desktop (Web Vault, Desktop App) or mobile device (iOS, Android).

From your Account Dropdown click Account > Subscription > Manage.

Enter the email(s) of the family member(s) you would like to invite, then click Send. This will generate an email inviting the user to setup their private Keeper account.

Once sent, you can view the status of each invite and click the more options icon (three horizontal dots) to resend or delete the invite.

Accept a Keeper Invite

If someone in your family has invited you to join Keeper, will receive an email from Keeper Security, (Subject: Keeper Invitation) inviting you to set up your own, private account.

To set up your account, click Get Started.

You will then be directed to Keeper's "Create Your Keeper Account" page.

To create your Keeper account, first enter your email address then you will be asked to create and confirm a Master Password which will be the only password you have to remember. We recommend that you choose a strong Master Password that is only used for Keeper -- don't forget your Master Password!

To finalize your account and proceed to your vault, you will be asked to enter the security verification code that was sent to your email.

Share Records

Once an invited family member has created a Keeper account, records can be shared with them.

To share a record, simply click Share.

Enter the email address(es) of the family member(s) you would like to share the record with or select their email(s) from the dropdown menu.

Keeper for Business

While Keeper Family Plan is perfect for families, Keeper Business Plan is best suited for your business organization. Keeper has purposefully created different plans to fit the unique needs of all types of users. That is why Keeper has a dedicated Business Plan, specializing in protecting companies of all sizes across every industry.

Only Keeper for Business/Enterprise offers the following world-class features, specifically designed for business environments:

• Shared Team Folders

• Enforcement Policies

• Security Audit

• Role-Based Access

• Activity Reporting

• Team Management

• Unlimited Users (billed per user)

What's a Passkey?

A passkey is a cryptographic key that lets you log in to your accounts and apps without having to enter a password or a second factor. Passkeys are phishing-resistant.

Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.

Supported Websites

Passkeys only work on websites and applications that have been specifically built to support them. The list of supported sites is pretty small right now, but it will grow over time.

Creating a Passkey

To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" screen of the website. In the below example, we'll be showing Best Buy.

When clicking the "Create a Passkey" button, Keeper will intercept the request and ask you to save the passkey to your vault.

Logging In With a Passkey

The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to login. Sometimes you'll first need to enter your email address and the site will prompt you for a passkey login selection.

In the case of Best Buy, clicking on "Sign in with a Passkey" initiates the passkey login process with Keeper. Click on "Use Passkey" and you'll be logged in.

That's it! Using a passkey with Keeper and supported websites is very straightforward for sites that support it.

Vault Storage

In the Keeper Vault, you will see a Passkey field attached to the record. The Passkey field contains several pieces of information:

• Date the passkey was created

• Username

• Relying party (website or app)

Passkey records can be managed in your vault, placed in folders or shared with other users.

Using Passkeys on Mobile Devices

Passkeys on mobile devices, a highly anticipated feature for enhanced security and convenience, is now available on Android devices running Android 14 and Apple devices running iOS 17. This update marks a significant enhancement in our mobile applications capabilities, offering users an even more secure and streamlined experience.

Passkey Setup for Android

1. Launch the Settings app on your Android device and select Passwords, passkeys & accounts.

2. Set Keeper as your Preferred Autofill Service

   1. If Keeper hasn’t already been enabled through the Keeper app, tap on "Change" and select Keeper from the list of available services.

      1. If you had already enabled KeeperFill in the Keeper app, it should already be set as your autofill service.

Passkey Setup for iOS

1. Launch the Settings app on your iOS device and select Passwords.

2. Next, choose Password Options.

3. Toggle ON AutoFill Passwords and Passkeys.

4. Then tap Keeper so a blue tick appears. If you have used Autofill before, iCloud Passwords & Keychain may have a blue tick as well. For optimal accuracy when using Keeper for Passkeys, make sure to tap iCloud Passwords & Keychain to remove it as an option.

The Future of Passkeys

We're excited about the future of passkeys. Here's our plan for passkeys this year:

• Support on desktop web browsers is now live

• Launch of Web Vault and Desktop App support for passkey management is now live

Have Questions?

We would love to hear your feedback on passkeys. Please email our team at [email protected].

Overview

Keeper is a zero-knowledge platform. Please note that if you forget your master password and lose your recovery phrase, you will not be able to login to your vault and Keeper Support will be unable to help you regain access.

Consumer and Family Plan customers: If you have forgotten your master password and have lost your recovery phrase, please create a new account. To create a new account with the same email address, please reach out to [email protected] for assistance. If you still need assistance, open a support ticket with our consumer support team.

Enterprise and MSP end-users: Business accounts may login to Keeper using a Single Sign-On product, and there is no master password involved. If you are an end-user in a business account, please contact your Keeper administrator for assistance. If you still need help, open a ticket.

Enterprise Admins: Please open a ticket with Keeper support.

What to do if you forget your Master Password

• From the Web Vault or Desktop App, click on Need Help > Forgot Master Password to begin the account recovery process. If you forgot your master password and you lost your recovery phrase, Keeper support cannot help you.

• If you are able to login with biometrics (Face ID, Touch ID) on a mobile or desktop device, simply login and then visit the Settings > Reset Master Password screen.

• If you exceeded the number of failed attempts, please contact support and we'll reset the throttling system for you to try again.

• Once you recover your account, make sure to back up your Master Password and Recovery Phrase somewhere safe, so this doesn't happen again.

Account Recovery

Keeper provides account recovery using a randomly generated 24-word recovery phrase. The recovery phrase can be used to regain access to your Keeper Vault in case you forget your Master Password.

Keeper implements recovery phrases using the industry-standard BIP39 word list, which is a set of 2,048 words used to generate an encryption key with 256 bits of entropy. Each word in the BIP39 list is carefully chosen to improve legibility and make the recovery process less error-prone.

The recovery phrase is generated locally on the user's device using the BIP39 word list. Keeper's backend systems do not have access to this recovery phrase, nor do any employees of Keeper. Keeper is a zero-knowledge platform and we cannot assist in the recovery process.

Resetting Your Master Password

Web Vault & Desktop App

If you would like to change your master password from the Web Vault & Desktop App, click the account dropdown menu (your email), select Settings and next to "Master Password" click Reset Now. You will then be prompted to enter your current master password and create and confirm a new master password.

If you are able to log into Keeper's mobile app using Biometrics, you can reset your master password without having to enter your current master password. Navigate to Settings > Reset Master Password and authenticate with Biometrics.

iOS and Android Mobile App

To change your master password on iOS and Android devices, from Settings, scroll down and tap Reset Master Password. You will then be prompted to enter your current master password (unless Biometrics is enabled and you are authenticated), then create and confirm a new master password.

Account Recovery Setup

Upon initial vault login, new users will be prompted to set up Account Recovery. Click Generate Recovery Phrase to begin.

Once your recovery phrase has been generated, be sure to store it in a safe place. For added convenience, you will be given the option to copy or download it. Check the box to acknowledge you have stored it in a safe place and click Set Recovery Phrase to complete the setup.

Reset Recovery Phrase

If you know your master password and would simply like to setup Account Recovery, from the account dropdown menu (your email) select Settings > Recovery Phrase.

Create Your Keeper Account

Your Keeper vault is easy to create, simple to use and you’ll be up and running in just minutes. You can create and access your Keeper vault by either logging in directly from Keeper via an email invitation from your Keeper Administrator or from your SSO provider dashboard.

Create Your Account - Email Invitation

You may have received an email from your organization's Keeper Administrator inviting you to create a Keeper account with a subject line that reads: "Action Required >> Instructions for Your Keeper Security Account"

To create your Keeper account, click the yellow action button that by default says "Set Up Your Account Now", however, your organization may have chosen to customize the exact wording.

Since your Keeper account is deployed through your Single Sign-On Identity Provider (IdP) integration, you will automatically be routed to authenticate against your IdP if a current SSO session is not active.

Once you have successfully authenticated to the IdP, you will be routed to your Keeper vault. Upon accessing your vault, you may receive a "Vault Transfer" acceptance dialog.

Next, you will be guided through a "Quick Start" walkthrough, that will help you either import passwords from your browser or other password manager (if enabled by your Keeper Admin) or manually create new records.

Create Your Account - SSO Dashboard

Alternatively, you can create your Keeper account by visiting your SSO provider dashboard. This is called "Identity Provider-initiated login". First, log in to your existing Single Sign-On identity provider as you normally do.

You will observe your Keeper administrator has integrated Keeper into your identity provider dashboard. Simply click the Keeper icon to launch the Keeper application.IdP-Initiated Login

You will be guided through a "Quick Start" walk through, that will help you either import passwords from your browser or other password manager (if enabled by your Keeper Admin) or manually create new records.

Login Flows

Once your Keeper account has been created, logging into your Keeper Vault is both easy and secure. Users can do so from either Keeper's vault login page or from their SSO provider dashboard.

Keeper Initiated Login

You can login to Keeper by entering either your email address or Enterprise Domain at Keeper's login page.

Login to your Keeper vault by region:

Email Address Login

From the Keeper vault login page, enter your email address and click Next

You will automatically be routed to your Identity Provider to sign in. Once you have successfully authenticated to the IdP, you will be routed to your Keeper vault.

Enterprise Domain Login

From the Keeper vault login page, select Enterprise SSO Login > Enterprise Domain

Enter your Enterprise Domain and click Connect

You will automatically be routed to your Identity Provider to sign in. Once you have successfully authenticated to the IdP, you will be routed to your Keeper vault.

SSO Initiated Login

Log in to your existing Single Sign-On identity provider as you normally do.

Simply click the Keeper icon to launch the Keeper application and you will be routed to your Keeper vault.

Device Approvals

If you sign into Keeper on a new platform, you may encounter a "device approval" notification (SSO Cloud Users Only). If you are attempting to log in on an unrecognized device or browser, a device approval must take place before you can proceed to your Keeper vault. Users have two methods of approval to choose from, Keeper Push or Admin Approval.

If you select Keeper Push, a notification (push) will be appear in your vault at an approved device or browser. Select Yes to approve the new device.

Alternatively, if you select Admin Approval, your Keeper Admin will receive notification for approval. Once the device has been approved, you will be able to proceed to your Keeper Vault.

Overview

Keeper Importer can automatically import unprotected passwords from web browsers such as Chrome, Firefox, Edge, Safari, Internet Explorer and Opera automatically from the Keeper Web Vault and Keeper Desktop Application.

Import Instructions

(1) Log into Keeper's web vault at https://keepersecurity.com/vault/ or simply login to the Keeper Desktop App (download from https://keepersecurity.com/download)

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import then select Import button at the top of the screen.

(4) If you are using the Web Vault, Keeper will prompt you to download the Keeper Import Tool. This is a small application that runs on your computer to import any found passwords. The Import Tool will download into your default Downloads folder. Please download, unzip and run this application to continue.

(5) Copy the code provided to your clipboard by clicking the copy button.

(6) If using the Web Vault, unzip the Keeper Import application in your download folder.

(7) If using the Web Vault, launch the Import Tool from the Download folder.

On a Windows PC

On Windows, you can just double-click the Importer application and Run when prompted.

(8) Keeper will then ask for your token. Paste the code you copied previously in step 5 and click Import.

(9) Keeper will import all of the passwords that it can find in your local web browsers. Review the passwords and select which records you would like to import. Click Add to Keeper to import the selected passwords.

(10) Once you have completed the import and verified that the data appears properly in your Keeper Vault, we recommend deleting stored passwords from your web browser, and turning off password saving features from your web browser settings.

On Mac OS (Safari)

For Mac users, to complete import of passwords from Safari and the iCloud Keychain, you will need to complete a few more steps as described below.

(1) Click "Next" to open Accessibility Settings

(2) Click on "Open System Preferences"

(3) Click the Lock to unlock permissions

(4) Check "Keeper Import"

(5) Safari will open in a few seconds. When prompted, type in your computer password to unlock Safari passwords.

(6) Keeper will then ask for your token. Paste the code you copied previously in step 5 and click Import.

(7) Keeper will import all of the passwords that it can find in your local web browsers. Review the passwords and select which records you would like to import. Click Add to Keeper to import the selected passwords.

(8) Once you have completed the import and verified that the data appears properly in your Keeper Vault, we recommend deleting stored passwords from your web browser, and turning off password saving features from your web browser settings.

Keeper supports multiple methods of importing your vault records from LastPass, both manual and automatic.

Option 1: LastPass Automated Transfer

The Keeper Desktop application provides automatic transfer of your LastPass vault to Keeper. Features included:

• Transfer of all passwords

• Transfer of Folders

• Transfer of Shared Folders

• Transfer of Templates and Custom Fields to Keeper Record Types

• Transfer of custom fields, TOTP seeds

• Transfer of Record File Attachments

(1) Download Keeper Desktop from: https://keepersecurity.com/download

(2) Login to Keeper Desktop

(3) Click on your account email in the upper right-hand corner

(4) Click Settings > Import

(5) Choose LastPass

(6) Input your LastPass Email and Password and click Next. To import your Shared Folders from LastPass select the "include shared folders" option.

(7) Review the import and map fields if needed.

(8) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(9) Click Import.

Option 2 - Keeper Commander

Keeper supports automatic import of your LastPass vault using Keeper Commander, our CLI tool.

The Keeper Commander LastPass import feature supports:

• Transfer of all Passwords

• Transfer of Folders

• Transfer of Shared Folders

• Transfer of Shared Folder permissions (users and teams)

• Transfer of Templates and Custom Fields to Keeper Record Types

• Transfer of Record File Attachments

To learn more, click here:

https://docs.keeper.io/secrets-manager/commander-cli/using-commander/lastpass-import

Option 3 - Manual .CSV File Export from LastPass to Keeper

If the automated methods are not available to you, follow the below instructions.

(1) Log into the LastPass vault at https://lastpass.com/?ac=1 with your username and master password. Or, from the LastPass Browser Extension click on the LastPass Extension Icon > Open My Vault.

(2) On the bottom left-hand side, navigate to Advanced Options and under Manage Your Vault you will select Export. This will send an email to your email associated with LastPass to confirm the Export Request.

(4) Once confirmed, return to your LastPass vault and select Export again.

(5) Depending if your LastPass Extension includes the Binary Component... With Binary Component: Enter a file name for your export, then click Save to save the CSV export file. Without Binary Component: Your exported data will be displayed on a webpage, and also downloaded to your downloads folder as a .csv file named "lastpass_vault_export".

(5) Log into your web Vault at https://keepersecurity.com/vault/

(6) Click on your account email in the upper right-hand corner.

(7) Click Settings > Import.

(8) Choose LastPass from the list.

(9) Drag the exported file into the target window "Drop a File Here".

(10) Use the drop-down menu in each column to map to a Keeper field.

(11) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(12) Click Import

In today’s digital world, securing your online accounts is crucial. Multi-factor authentication (MFA) adds an extra layer of protection by requiring something you know (your password) and something you have (a time-based one-time password or TOTP) to access your accounts. Keeper helps you store and autofill these TOTP codes, making the authentication process faster and more secure.

Storing TOTP Codes in Keeper

Keeper supports time-based one-time passwords (TOTP) to enhance your security for two-factor authentication (2FA). By integrating TOTP codes into Keeper, you can safely store them within your records, alongside your login credentials. This integration allows you to easily retrieve these codes for websites or services that require them, streamlining the login process.

For example, when you enable MFA on a service like Office 365 or Google Workspace, you’ll typically be asked to scan a QR code or enter a secret key into an authenticator app. With Keeper, you can save these TOTP keys directly in your vault. Simply scan the QR code or enter the secret key into Keeper, and you’ll have your TOTP code securely stored and ready for use whenever you need it.

Filling TOTP Codes with KeeperFill

Browser Extension

When you store login credentials and time-based one-time password(TOTP) codes within Keeper, the Browser Extension can automatically enter the appropriate TOTP code when you’re logging into a site that requires two-factor authentication (2FA). Here’s how it works:

Automatic TOTP Code Entry:

• If the website you're logging into has both login credentials and a TOTP code saved in your Keeper vault, Keeper will automatically detect the TOTP field and fill in the correct code for you.

Context Menu:

• Two-factor codes can also be selected and filled directly from the . Right-click on the TOTP field, choose Keeper, and then select the proper record title and Two-Factor Code to fill into the field.

Accessing TOTP Codes from the Browser Extension Menu:

• You can also click on your account in the Keeper Extension menu (found in your browser toolbar). The extension will display the most appropriate record associated with the webpage you're currently on, making it easier to retrieve the correct login details and two-factor code.

• From there, you can either autofill both the login credentials and the TOTP code, or copy the TOTP code manually to paste into the proper field.

Mobile Apps

Keeper’s mobile apps for both Android and iOS offer a smooth experience when managing your TOTP codes. Here's how it works:

• iOS

  • Automatic TOTP Code Entry: When your login credentials and TOTP code are stored in your Keeper vault, Keeper’s autofilling browser extension, KeeperFill, will suggest the appropriate records at the top of your keyboard when you're logging into a website or app that requires it. If Keeper can't automatically match a record, you can manually launch the extension via the "Passwords" button or the key on the upper right of the keyboard. From there, you can search for the desired record.

• Copying a TOTP Code: When you view a record that contains a TOTP, you can tap the Fill button within the Keeper extension to automatically copy the code to your clipboard, ready for pasting into the appropriate field. Alternatively, you can tap the "two-factor code" field in the record itself, and this will copy the code to your device's clipboard.

• Android

  • Automatic TOTP Code Entry: Keeper will suggest the appropriate records at the top of your keyboard when you're logging into a website or app that requires a TOTP code, if you have a matching record stored in your vault.

• Copying the TOTP Code: If automatic copying of a two-factor code doesn't occur, you’ll need to tap the TOTP field within Keeper. After doing so, a notification will appear, letting you know that the code has been copied to your clipboard and is ready to be pasted.

Troubleshooting TOTP Code Discrepancies

Why TOTP Codes May Differ Between Devices:

If you notice that the TOTP codes generated on your mobile device differ from those on your desktop or browser extension, this is often due to a time mismatch between the devices. Since TOTP codes are time-sensitive, even a few seconds of difference can result in codes that don’t match.

To resolve this:

1. Set Device Time to "Automatic": Ensure that both your mobile and desktop devices are set to automatically synchronize their time with a reliable time server. On most devices, this can be done by enabling the “Set Automatically” option in your date and time settings.

   1. On iOS/Android: Go to your device’s settings, find the Date & Time settings, and enable “Set Automatically.”

   2. On Desktop: Check your computer’s date and time settings to make sure they’re synced with the correct time zone and server.

This will ensure that your TOTP codes remain synchronized across all devices, allowing you to enter the correct code for login.

Security Best Practices for TOTP Codes

While Keeper ensures your TOTP codes are securely stored and managed, here are some additional tips for maximizing your security:

• Never Share Your TOTP Key: Keep your TOTP secret keys private. Only store them within Keeper, and never share them with anyone.

• Use Strong Master Passwords: Your Keeper vault is only as secure as your master password. Use a strong, unique password to protect your vault.

By using Keeper to store and autofill your TOTP codes, you not only protect your accounts with an extra layer of security, but you also streamline the 2FA process. Keeper’s integration with your browser and mobile devices makes managing TOTP codes hassle-free, while keeping your credentials and codes safely protected.

For the examples below, the site "X" (Twitter) will be used, however, Keeper works across all social media platforms.

Create a Record

Web & Desktop App

To create a new record from Keeper's Web Vault or Desktop App, click the Create New > Record. Select a record type from the dropdown menu and enter a record "Title".

Enter the record details including your username, password and URL (if it wasn't auto-generated for you). Use Keeper's password generator by clicking on the dice to create a strong, random password or enter your existing password. Click Save when done.

KeeperFill

You can also create new records using the KeeperFill Browser Extension, which allows you to autofill your passwords and save new login credentials to your vault. KeeperFill is available for every web browser. Download KeeperFill for your browser by visiting our .

To create a record while at the site's login page, click the Add Record button in the KeeperFill toolbar. This “quick add” functionality will auto-generate a record “Title” and “URL” based on the website you are visiting.

Use Keeper's password generator by clicking on the dice to create a strong, random password or enter your existing password.

Make any necessary edits to the record details and click Save when done.

Launch and Autofill Log In

Next time you need to log in to a site, you can quickly launch the record's website from your web or desktop vault, navigate to the site directly, or search for the record in your KeeperFill toolbar then autofill your login credentials by clicking the fill icon.

Two-Factor Code Setup & Use

Setup

For extra security on supported sites and apps, store two-factor authentication (2FA) codes for standard TOTP (Time-Based One-Time Passwords) in your Keeper records.

Navigate to the site's "security settings" or similar page to enable two-factor authentication. Of the methods listed, select "Authentication app" and follow the steps as directed.

Next you will be asked to link the authenticator app (Keeper) to your account.

Log in to the Keeper Desktop app, navigate to the corresponding record, click the edit icon and Add Two-Factor Code.

Click Scan. This will open a scan window.

Return to the target site and drag the scan window over the QR code that is presented.

Once the QR code is identified, it will automatically generate a two-factor code in the Keeper record. Hover next to the two-factor code and click the copy icon that will appear.

Paste the code into the field provided. Once confirmed, setup is complete.

Autofill Two-Factor Codes

The next time you log in to a site or app where you have enabled two-factor authentication, copy the code from your Keeper vault or autofill it from the KeeperFill browser extension.

Upon autofilling your username and password via KeeperFill, when prompted, the stored two-factor code will also be autofilled into the field provided.

Alternatively, you can click the copy icon next to the code and paste it into the field provided.

Changing Your Passwords

KeeperFill makes it easy to change your passwords. When visiting a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. Keeper will then run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault.

To begin, navigate to the site's "Change Password" page, or similar. Once there, Keeper will recognize the page and ask if you would like help changing your password, click Yes.

Next, follow the steps provided that will guide you to click on the Keeper icons in each password field. This will create and fill a strong, random password using Keeper's password generator.

Once you submit the change on the site, you will have a chance to review the changes and save them to your vault.

If the change was successful, click Yes. If not, click No - Revert Change to revert the record back to its original state.

Keeper's Shared Records Report is available from the Settings menu of the Web Vault and Desktop App.

The Shared Records Report provides you with an audit of each shared record (either direct share, or shared folder). The export contains the following fields:

• Record UID

• Record Title

• Shared To (email)

• Shared From (Shared Folder or Direct Share)

• Permissions (Read Only, Can Edit, Can Edit and Share)

• Folder Path

Export Options

CSV

File Format:

Record UID,Record Title,Shared To,Shared From,Permissions,Folder Path

JSON

The JSON format is structured as an array of shared_record objects.

PDF

For a printer-friendly version of the report, the PDF version is also available.

To print the PDF, click on the printer icon at the bottom:

Commander

Commander also provides a CLI for the Shared Records Report: Command: shared-records-report (or "srr")

Example output:

Admin-Level Access Permissions Report

For Enterprise customers, we provide an advanced enterprise-wide Access Report through the Keeper Compliance Reports feature.

Compliance Reports provide on-demand visibility to access permissions on records and credentials in your enterprise. These reports simplify the compliance auditing process for Sarbanes Oxley (SOX) and other regulations requiring periodic access control auditing.

To learn more about Keeper Compliance Reports, click here:

This guide provides important compatibility information and troubleshooting tips for using hardware security keys with Keeper on iOS devices. If you're encountering issues with PINs, autofill, or NFC key support, this page will help you understand which iOS versions are compatible and how to resolve common problems.

Which hardware keys are supported with Keeper on iOS?

• Keeper works with any FIDO® Certified security keys. Ensure you have the latest version of Keeper installed for full compatibility with hardware keys.

  • For a complete list of certified keys from the FIDO Alliance, visit the FIDO® Certified Showcase.

• Unsupported Keys: Currently, software keys such as Passkeys or iCloud Keys are not supported for login or autofill with Keeper.

What are the iOS version requirements for hardware key compatibility?

To help you understand the compatibility of your iOS version with hardware keys and Keeper, refer to the table below:

Do I need a PIN for my hardware security key on iOS?

• Setting a PIN for your hardware security key is optional. You can choose whether or not to set up a PIN when configuring your key. The PIN setup process is done through the hardware key manufacturer’s software (e.g., Yubico Authenticator).

• Once a PIN is set for your security key, iOS will ask you to enter the PIN every time you use the key, whether for login or filling passwords.

• No PIN Bypass: Unlike the Keeper Web Vault, iOS does not support bypassing the PIN. You must enter the PIN each time the key is used.

What happens if I enter the wrong PIN for my hardware key too many times?

• If you enter the wrong PIN 6 times in a row, your hardware key will be locked. To unlock it, you will need to reset the key before you can use it again.

  • To reset your hardware security key please use the hardware key manufacturer’s software (e.g., Yubico Authenticator).

Can I use NFC hardware keys on iOS devices?

• Yes, NFC hardware keys are supported on most iOS devices.

• iPads do not support NFC hardware keys at all. This is a restriction at the OS level, and only physical hardware keys that plug into the device (via Lightning or USB-C) will work.

• NFC hardware keys are not supported in Keeper extensions (Autofill | KeeperFill) on iOS.

  • Recommendations to work around this limitation can be found HERE.

Can I use my hardware keys on my iPad?

• Yes, you can use hardware security keys with your iPad, but please note that only hardware keys that plug into the device (via Lightning or USB-C) are supported. NFC hardware keys are not compatible with iPads due to limitations at the OS level. This means that if you're using a hardware key with only NFC functionality, it will not work on iPad devices.

  • Combination hardware keys, that support both plug-in and NFC, will work via the plug-in method only.

  • USB-C keys require Keeper Version 16.12.0 or greater.

For iPad users, ensure your key is compatible with the appropriate connector (Lightning or USB-C) and that you have the latest version of Keeper installed to ensure full functionality.

Known Issues

YubiKey FIDO PIN Loop

Issue Overview: Some users with FIDO CTAP 2.1 compliant security keys (specifically YubiKeys with firmware version 5.7) may experience an issue after upgrading to Safari 18.1 or iOS/iPadOS 18.1. When attempting to authenticate, they are repeatedly prompted to enter their FIDO PIN in a loop, even after entering it correctly. This prevents the authentication process from completing.

Affected Devices and Scenarios

• Operating Systems: iOS 18.1, iPadOS 18.1, and macOS 15.1 (with Safari 18.1).

• Specific Behaviors on iOS/iPadOS:

  • Physical Key (USB-C/Lightning): When the key is plugged in, users often receive an error message immediately after entering the FIDO PIN.

  • NFC Authentication: The system may fail to prompt the user to tap their security key.

Status & Recommendation

Apple has resolved this FIDO PIN loop issue. The fix is included in the public releases of iOS 18.2, iPadOS 18.2, and macOS 15.2. Please update your device to the latest available software version through Settings > General > Software Update.

Troubleshooting & Workaround Options If you're unable to update your device immediately or are still encountering issues, consider the following options;

1. Re-register Your Key: If you have updated to iOS/iPadOS 18.2 and the issue persists, removing the security key from your account settings and then re-registering it can sometimes resolve lingering problems.

2. As a temporary workaround, you can log into your Keeper account on another device or browser and remove the hardware key from your authentication settings. This will allow you to use other two-factor authentication methods until you can update your iOS device.

For more details and updates, please refer to the Yubico support article.

Long-Tap Autofill and Hardware Security Keys

With the addition of iOS 18, Apple introduced a new long-tap autofill feature that allows users to quickly fill in login credentials from their password manager directly into apps or websites. However, when using a hardware security key for authentication, long-tap autofill will not work as expected. This limitation occurs because the system requires interaction with the hardware key to complete authentication, which isn’t compatible with the autofill feature’s workflow.

Affected Devices and Scenarios

• iOS/iPadOS 18+ Devices: The long-tap autofill feature does not work with accounts secured by hardware security keys.

Recommendation To work around this limitation, we recommend using the following steps:

1. Enable "Stay Logged In":

   1. Open the Keeper app and enable the "Stay Logged In" option. This will ensure you remain authenticated for a longer period, allowing long-tap autofill to function without needing to re-authenticate with your hardware key.

2. Log into the Keeper Main app on your iOS device and then you can proceed to use the long-tap autofill feature as intended.