For business customers, see Keeper's Enterprise end-user deployment guide:

The proceeding pages in this section are dedicated to various troubleshooting guides. Have a suggestion? Email our team at [email protected].

Keyboard Shortcuts

If you prefer to use keyboard shortcuts instead of mouse clicks to make the process of auto filling your passwords even more seamless, follow the steps below:

1. Navigate to the site you would like to log in to.

2. Type command+shift+k (for Mac OS) or alt+k (for Windows).

3. In the field provided, begin typing your search terms.

4. Use the up and down arrows on your keyboard to find and highlight the record you are searching for.

5. Use the enter key to quickly fill and log in to the site.

The proceeding pages in this section are dedicated to various FAQs, site-specific guides and other tips & tricks. Have a suggestion? Email our team at [email protected].

• Web Vault & Desktop App

• iOS - iPhone & iPad

• Android - Phone & Tablet

Microsoft Edge

Visit the link below to download Keeper Password Manager & Digital Vault from Microsoft Edge Addons.

In order for Keeper to be visible in your toolbar at all times, click on the extensions puzzle icon then click on the eye icon next to Keeper Password Manager to "Show in Toolbar".

Disable Built-In Password Manager

Next, we recommend that you disable Edge's built-in autofill features.

1. Click on the Edge menu icon and select Settings and under "Microsoft Wallet".

2. Click Passwords > Settings.

3. Disable "Offer to save passwords" and "Autofill passwords and passkeys".

Opera

Visit the link below to download Keeper Password Manager & Digital Vault from the Chrome Web Store.

In order for Keeper to be visible in your toolbar at all times, click on the extensions box icon and then the pin icon next to Keeper Password Manager.

If you are a website developer and your users are experiencing a compatibility issue with Keeper's browser extension, please follow the steps below.

Keeper Icon Appearing in Wrong Field

Keeper uses pattern matching to determine if a field should display a lock icon. If a lock icon is showing on a form field in error, you can supply a CSS class of keeper-ignore to your form element. For example:

<input id="user_field" type="text" class="keeper-ignore my_class"/>

Keeper supports the ability to login with Windows Hello or Touch ID on a vault that is tied to an SSO provider such as Microsoft Azure. To set this up, please follow the instructions below.

(1) Login to your vault using your SSO as usual, and click the Account Dropdown Menu (your email) > Settings > Security.

(2) Enable Windows Hello (or Touch ID if you're on a Mac). Note that if you previously tried using this setting, you should turn it OFF and ON in order to reset the master password storage in your device.

(3) The next time you login to the Keeper Desktop App, simply click the "Windows Hello" or "Touch ID" button.

(4) You will now be able to login seamlessly to your vault using Windows Hello or Touch ID, without having to constantly login using your SSO provider.

If you encounter an issue with the Keeper Desktop application and you need to reset the content and settings, follow the steps below.

Mac & Windows

While in the Keeper Desktop App, navigate to Help > Reset Keeper.

Mac Store Version

Additional information may need to be deleted manually if you installed Keeper from the Mac App Store. Open the "Terminal" application from your Applications > Utilities menu then run the below command:

KeeperFill provides unique features to help you change/rotate passwords on any website.

1. Login to the site using the KeeperFill browser extension

2. Visit the site's "Change Password" Page

3. Follow Keeper's on-screen instructions

See the below example video using Twitter.

If you would like to reset Keeper on your web browser follow the steps below:

1. Navigate to the "Extensions" page in your preferred browser and select "Keeper Password Manager & Digital Vault".

2. Click "Extension options".

About Our Security

Keeper is a Zero-Knowledge platform. The data stored in a Keeper vault is encrypted and decrypted locally on the user’s device. Check out this blog article which reviews how Keeper protects your information:

For a more in-depth technical description of our .

Keeper Security employees have no ability to decrypt customer data, because the encryption keys are managed by the customer. In addition to zero knowledge architecture, Keeper supports a number of two-factor authentication methods including FIDO2 WebAuthn devices, Google Authenticator, Microsoft Authenticator and SMS. Keeper Security is SOC2 Certified, ISO 27001, 27017 and 27018 certified, FedRAMP Authorized, StateRAMP authorized.

Firefox

Visit the link below to download Keeper Password Manager & Digital Vault from Firefox Browser Add-ons.

Once installed, the Keeper icon will appear in the upper right corner of your web browser window.

Next we recommend you disable your browser's built-in password saving features:

Chrome Web Store Install

Visit the link below to install Keeper Password Manager & Digital Vault from the Chrome Web Store.

In order for Keeper to be visible in your toolbar at all times, click on the puzzle icon and then the pin icon next to Keeper Password Manager.

Keeper needs to be enabled on all sites by default. To confirm, navigate to the extensions options screen. Site access should be enabled "On all sites".

Overview

The Security Audit screen gives the passwords stored in your vault an overall security score based on password strength. You can clearly view information about each record's password strength and reuse from this screen.

macOS Login with Touch ID

Keeper is compatible with Touch ID on macOS, a biometrics-based technology that allows users to authenticate and log into their device using a fingerprint. If Touch ID is configured on a user's device and enabled in Keeper, this eliminates the requirement for users to use SSO or enter their Master Password at the Keeper login screen, further expediting the login process.

To enable Touch ID, click Account Dropdown Menu > Settings > Security and toggle "Touch ID" on.

If you are new to logging into Keeper using DUO for Two-Factor Authentication, the videos below will demonstrate the process for Web Vault, iOS, and Android users. To learn more about DUO's Two-Factor Authentication method for Enterprise, click .

If you have attempted to use Keeper's automated import tool and have been unsuccessful, or you are running Linux OS, follow the directions below to complete the process manually. You will first need to perform a manual export of your passwords from Chrome and then import the file to Keeper as a Text File (.csv).

From your Chrome Browser, click Settings > Passwords then click

Export

To import from Avast Passwords, you must export your records first.

(1) Launch Avast Passwords and log in to your account

(2) Select Import/export data (3) Click Export to File (4) Name the file and click Save

Overview

By default, users are logged out of Keeper if their browser closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to instead remain logged into for a configurable duration. Continuing reading to learn how to enable Stay Logged In in the Keeper Web Vault, Desktop App and the KeeperFill Browser Extension.

One Record with Multiple Domains

Some sites have more than one domain (website address) that require the same exact login/password. If this is the case for any of your records, rather than creating an entirely separate record, Keeper allows you to store multiple website domains within one record.

So no matter what domain you are logging in from, KeeperFill will recognize that domain as an alias and allow you to log in with the same stored credentials.

To store multiple website domains within a single record:

Import from Excel

(1) If you are importing your passwords from Excel, first save the file in CSV format (UTF-8 encoded).

(2) Log into your Keeper web vault at

Export

To import from Passportal, you must export your records first.

(1) Click Settings > Import/Export

(2) Select checkbox to include field headers

(3) Click Export and save the file.

Export

To import from Kaspersky, you must export your records first.

(1) Click Settings > Import/Export

(2) Export to text file and Save

Export

To import from Safari, you must export your records first.

(1) From Safari, click on Safari > Settings then select the 'Passwords' tab.

(2) Select '...' then select 'Export All Passwords...'

(3) Save the Passwords.csv file.

The Keeper Commander SDK provides command-line or scripted capabilities to import records and folders into your Keeper Vault. Supported import formats are below:

• JSON import files can contain records, folders, subfolders, shared folders, default folder permissions and user/team permissions

• CSV import files contain records, folders, subfolders, shared folders and default shared folder permissions

Export

To import from MyKi, you must export your MyKi records first.

On Windows

(1) Click Settings > Import/Export

(2) Export to text file and Save

Export

To import from True Key, you must export your records first.

Mac

Keeper's Shared Records Report is available from the Settings menu of the Web Vault and Desktop App.

The Shared Records Report provides you with an audit of each shared record (either direct share, or shared folder). The export contains the following fields:

• Record UID

This page has moved:

Compatibility

Keeper works on every smartphone, tablet and computer. Keeper supports popular browsers including Chrome, Safari, Firefox, Edge, Opera, Brave and IE. Native app installation is available from the Keeper website and every public-facing app store (iTunes, Google Play, Microsoft Store, etc).

Keeper Web Vault

The Keeper Web Vault is a fully featured web-based application. To access the Keeper Web Vault login, visit:

US Data Center

US Public Sector / GovCloud

EU Data Center

AU Data Center

CA Data Center

JP Data Center

Keeper Desktop Application

Keeper Desktop is a cross-platform native desktop application for Windows, MacOS and Linux. Several installer files are provided at the links below.

Download Options

• Windows AppInstaller

• Microsoft Store

• Mac OS .dmg

• Mac App Store

Enterprise Installation

See the for more advanced deployment options.

Checksum / Hash

Keeper Desktop SHA1 hashes for the latest version can be retrieved here:

Mobile App

iOS

Keeper for iOS can be installed directly from the App Store:

Android

Keeper for Android can be installed from the Google Play application at the link below:

KeeperFill Browser Extension

The latest Browser extensions can be installed by users at the links below: Chrome, Brave, Opera: Firefox:

Edge:

Safari:

Enterprise Deployment

For Keeper Enterprise administrators, please see the link below for Enterprise deployment options:

Overview

BreachWatch is a powerful, secure add-on feature that monitors the internet and dark web for breached accounts matching records stored within your Keeper Vault. BreachWatch delivers the most in-depth monitoring available to the public with a database of over a billion records while upholding Keeper's state-of-the-art, zero-knowledge security architecture.

BreachWatch alerts you so that you can take immediate action to protect yourself against hackers. Once activated, BreachWatch continuously monitors for compromised credentials and notifies you if any of your records are at risk.

User Experience

To sign up for BreachWatch from Keeper's Web Vault or mobile app, navigate to the BreachWatch screen and follow the on-screen prompts. You can also purchase BreachWatch directly from the . After signup, BreachWatch performs a local scan of passwords that are currently stored in your Keeper vault.

Once activated, BreachWatch will prompt the user on their device to Resolve the high risk password by changing it at the affected site and updating the corresponding record in their Keeper vault. If you Ignore the notification, then that record will be skipped on future scans until the password is reset. The user may also do nothing (deferring a response) and leave the risky password unchanged and thus still at risk.

Benefits & Features

• BreachWatch performs unlimited security scans of your passwords on all devices.

• Users are automatically alerted to take action if any of the passwords in their vault have been used in a publicly known breach that could leave them vulnerable to a credential stuffing attack, or an account takeover.

• BreachWatch continuously monitors for compromised credentials. Tracking over a billion known passwords while continuously adding new information as breaches are discovered on the dark web.

BreachWatch Scan

To start your BreachWatch scan, click BreachWatch in the left navigation menu, then click Let's Begin > Scan.

BreachWatch will then scan your records and report any risks associated with them. Clicking each record listed will allow you to view the steps needed to Resolve each risk. Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in your Keeper Vault with the same password.

Overview

Self-Destructing Record’s utilize Keeper’s existing One-Time Share technology which allows time-limited, secure sharing of a record to anyone, even if they don’t have a Keeper account.

Self-Destructing Records take our One-Time Share feature even further by automatically deleting the record from your vault once the share link is disabled and the recipient’s access is revoked. This reduces your workload to revoke record access and removing it from your vault at a later time.

Create a Self-Destructing Record

To create a Self-Destructing Record, create a new record as you normally would. Enter the record details and click Add Self-Destruct.

From the menu that is now presented, select when you want the share link to expire.

Once you've made your selection, click Save & Share to generate a One-Time Share link.

You have the option to copy the link directly, or send it in an invite or QR code format.

The recipient of a Self-Destructing Record simply clicks on the provided link and is instantly presented with the shared record in their web browser. One-Time Share links are bound to a single device, further strengthening security and preventing unauthorized distribution or viewing on multiple devices. The link will expire at the specified time or once the recipient has viewed the record for five minutes, whichever comes first.

Securely Share Files Using Self-Destruct

Keeper's Self-Destructing Records allow you to securely share records with file attachments that self-destruct at a specified time.

Create a record as you normally would and click Add Attachments to upload your file, or simply drag and drop the file directly into your vault.

Click Add Self-Destruct, select when you want the share link to expire, then click Save & Share to generate a One-Time Share link.

The recipient of a Self-Destructing Record simply clicks on the provided link and is instantly presented with the shared record in their web browser. They can then click on the file to download it to their local device.

Delete a Self-Destructing Record

You can delete a Self-Destructing Record at any time, thus disabling the share link by clicking Delete Now. Deleted Self-Destructing Records will appear in your vault's “Deleted Items” with the option to "Restore".

Give trusted family and friends access to your Keeper Vault in the event of an emergency or loss of life. You can designate up to five emergency contacts and decide how much time should pass before their access is granted.

From the Account Dropdown Menu (your email address), select Account > Emergency Access.

Click Trusted Users and enter the email addresses of up to five contacts (Keeper users). Optionally, select a "Delay Access" duration from the dropdown menu for each user, then click Send.

The amount of time between your request to provide emergency access and access granted can be set up to three months per contact. If a delay is configured, the countdown begins the moment the trusted user attempts to login to your vault.

In order for the recipient to accept the request, you must first establish a "sharing" relationship if one hasn't already been established through Keeper's record/folder sharing features.

If prompted, click Send Invite.

Once the recipient accepts your sharing request, you will need to invite them to be your emergency contact once more from the “Emergency Access” section of your vault. This step is not necessary if a sharing relationship has previously been established.

Emergency Contact Workflow

Once a sharing relationship has been established, the recipient will notice a red notification indicator has appeared in the "Emergency Access" section of their Account screen. By clicking My Access they can Accept or Decline emergency access to your account.

Once accepted, clicking Login will allow them to access the account they have been granted access to (once the access delay has passed, if enabled).

View Status of Invites & Edit Contacts

To view the status of your emergency access invites click Account > Emergency Access > Trusted Users. From here, you can also delete your emergency contacts at any time.

Overview

Keeper offers Secure File Storage to protect your confidential files, photos, and videos. Securely upload and store files such as passport photos, medical cards, drivers licenses, tax and loan documents, videos and any other private file to your Keeper vault.

Files are encrypted during the upload process and the user holds the encryption key for complete privacy and security. Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information.

Benefits & Features

• Just like our password encryption technology, Keeper protects your confidential files with 256-bit AES encryption using record-level keys.

• Secure file storage is available across all of your devices as a Secure Add-on, including iOS, Android, Web Vault and Desktop App.

• Files can be easily and securely shared with other Keeper users, from vault-to-vault.

Web Vault & Desktop App

From within the vault, users can either create a new record or add an attachment to an existing record. While editing a record, click Add Attachments to upload your file, or simply drag and drop the file directly into your vault. Once the upload is complete, click Save.

By clicking the download icon next to the file or photo within a record, you can quickly View or Download it.

Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information. Within the record click Share, then enter the email address(es) of the other Keeper user(s) you would like to share the record with.

iOS & Android

Secure File Storage is also available for iOS and Android. You can either add an attachment to any existing record or create a new record using the "File Attachment" record type. Within the record, tap Add Files or Photos to upload your file.

Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information. While viewing the record, tap Share > Share with User and enter the email address(es) of the Keeper users you would like to share the record with.

Understanding Attachment Status Icon:

When viewing a record with file attachments, you may see an icon next to a file if it hasn't fully synced to your Keeper Vault.

• File Not Yet Uploaded / Sync Pending:

• If you see this icon (a cloud symbol with a line through it), it means that this specific file attachment has not yet successfully uploaded or synced to your Keeper Vault's cloud storage. The file is currently only stored locally on the device from which you attempted the upload.

• File attachments require an active internet connection to upload. If you are offline, attachments cannot be added or uploaded. If this icon appears, it typically signifies an unexpected issue or an interruption (e.g., a lost internet connection, an error during transfer) that prevented the file from reaching the cloud.

• While the icon is present, the file is not yet backed up to the cloud and may not be accessible from other devices or the Keeper Web Vault.

Internet Explorer

Consider Switching to Edge With IE Mode

From the Microsoft website: "Since 1/12/16, Microsoft no longer provides security updates or technical support for old versions of Internet Explorer."

Although Keeper maintains the Internet Explorer 11 extension, we recommend that customers stop using IE or consider the latest Microsoft Edge with "IE Mode" as documented here: . If you still require the use of IE for legacy applications, please see the instructions below.

KeeperFill for IE installer is only available on request. After installing Keeper for Internet Explorer, you may need to perform the following actions:

Disable user names and passwords on forms:

1. Exit and restart the browser to activate Keeper.

2. Right-click along the top bar and ensure Command bar is selected for display.

3. Open Internet Explorer, click on the Tools icon, then Internet Options.

4. Click the Content tab.

Disable enhanced protected mode & enable third-party browser extension:

1. Open Internet Explorer, click on the tools icon, then Internet Options.

2. Click on the Advanced tab.

3. Under the "Security" section, ensure that enhanced protected mode is disabled.

4. Under the "Browsing" section, Enable third-party browsing extensions.

IE11 - Trusted Sites Policy

Customers who login to Keeper with SSO, or customers who are on corporate networks that deploy group policies for Internet Explorer, ensure that the following entries exist in your Trusted Sites settings under Tools > Internet Options > Security.

US / Global Customers:

keepersecurity.com

*.keepersecurity.com

US Public Sector / GovCloud:

govcloud.keepersecurity.us

*.govcloud.keepersecurity.us

EU Data Center Customers (Dublin, Ireland):

keepersecurity.eu

*.keepersecurity.eu

AU Data Center:

keepersecurity.com.au

*.keepersecurity.com.au

CA Data Center:

keepersecurity.ca

*.keepersecurity.ca

JP Data Center:

keepersecurity.jp

*.keepersecurity.jp

Enterprise customers must push group policies to end-users with these Trusted Sites in order to fully function with SSO and other critical features.

KeeperFill Right-Click Context Menu

If a website form field does not display the Keeper lock icon, users can right-click on the field to produce a context menu with KeeperFill features. The context menu offers the ability to fill logins, payment cards, addresses and create new passwords.

The KeeperFill right-click context menu provides the following features:

• Filling record login fields

• Filling payment card fields

• Filling billing and address fields

• Filling TOTP Codes

• Creating a new record

• Opening the extension window

• Launching the Web Vault

• Logging out of your account

Windows Hello Login

Keeper is compatible with Windows Hello, a biometrics-based technology that allows users to authenticate and log into their Windows device using biometric facial recognition, fingerprint reader, or pin (available on Windows 10). If Windows Hello is configured on a user's device and enabled in Keeper, this eliminates the requirement for users to enter their master password at the Keeper login screen, further expediting the login process.

Enable Windows Hello:

1. Open the Account Dropdown Menu.

2. Click Settings > Security.

3. Toggle "Windows Hello Login" on.

4. Once you have read the warning notification, click Enable

Windows Hello Setup

If Windows Hello is not yet configured on your device, you will receive a prompt to open your Windows Settings to configure it. Once you have configured Windows Hello, close out of the Settings window and return to your Vault to proceed with steps 3 & 4 above (Enabling Windows Hello).

Logging in with Windows Hello

Next time you log in to Keeper, Windows Hello will first attempt to authenticate your identity. Once authenticated, your vault will be decrypted and you will be automatically logged into Keeper.

By clicking Cancel you will be returned to the login screen to log in with your Master Password instead.

Overview

At the foundation, Keeper is an encryption platform with policies and controls in place to protect customer data. In this security model, the customer is also responsible for protecting access to their vault by following recommended security practices. This document outlines key recommendations that will help you secure the data stored within your vault.

Create a Strong Master Password

For customers who login to Keeper with a Master Password, the key to decrypt and encrypt the Data Key is derived from the Master Password using the password-based key derivation function (PBKDF2), with 1,000,000 iterations by default. All customers who login to the vault are automatically migrated to 1,000,000 iterations.

After the user types their Master Password, the key is derived locally and then unwraps the user's 256-bit AES Data Key. After the Data Key is decrypted, it is used to unwrap the individual 256-bit AES record keys and folder keys. The Record Key then decrypts each of the stored record contents locally.

Keeper implements several mitigations against unauthorized access, device verification, throttling and other protections in the Amazon AWS environment. Enforcing a strong Master Password complexity significantly reduces any risk of offline brute force attack on a user's encrypted vault.

The National Institute of Standards and Technology (NIST) provides password guidelines in: . The guidelines promote a balance between usability and security; Or in other words, passwords should be easy to remember but hard to guess. The NIST instruction recommends an eight character minimum but a higher value will ultimately result in a harder to guess/crack password. Keeper enforces a minimum of 12 character master passwords.

Enable 2FA on Your Keeper Account

2FA can be added to any consumer or business account. Business customers can enforce the use of 2FA with various levels of control and security options. The 2FA step comes before the Master Password entry. Performing the device verification and 2FA step prior to the Master Password entry phase offers mitigation of several attack vectors including brute force attack, password testing and account enumeration.

To activate Two-Factor Authentication, visit the Settings screen of the Keeper Web App, Desktop App or mobile application.

Keeper also supports FIDO2-compatible WebAuthn hardware-based security key devices such as YubiKey and Google Titan keys as a second factor. Security keys provide a convenient and secure way to perform two-factor authentication.

Enable 2FA on Your Email Account

Access to your email account is a key component in the overall security of your personal information. Ensure that your email account uses a strong auto-generated password created by Keeper. And ensure that you are protecting your email account with multi-factor authentication. Follow the steps provided by your email provider to lock down your account with the most restrictive methods possible.

We recommend that customers protect email accounts using a hardware-based Yubikey or Google Titan key when possible. If this is not available from your email provider, or if you don't own a Yubikey device, the next best thing is using a TOTP code generator.

Keeper supports the ability to store TOTP codes for logging into your email account or other service. To learn more about protecting TOTP codes in your Keeper Vault, .

While using SMS as a two-factor authentication setting is better than having nothing at all, we don't recommend relying on SMS due to well documented .

Be Careful of Browser Extensions

As a general security practice, we recommend that our customers be very cautious with installation of 3rd party browser plugins / browser extensions, such as ad blockers, coupon tools and other "helpful" utilities. Many browser extensions request elevated permissions which have the ability to access any information within any website or browser-based application that you visit. Make sure you fully trust the company who developed the browser extension, and look for their security certifications before you install it.

If you have any other security related questions, feel free to email our team at [email protected].

Export

To import from MacPass, you must export your records first.

Mac

(1) Click File > Export as XML.

(2) Name the file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose MacPass from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(8) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(7) Click on Import.

Export

To import from Bitwarden, you must export your records first.

Option 1: From Windows & Mac

(1) Launch the Bitwarden Desktop App and log in to your account.

(2) Select File > Export Vault.

(3) Select file format .csv from the dropdown and enter your Master Password.

(4) Click the Submit button and Export Vault.

(5) Select your destination for the .csv file and click Save.

Option 2: From Bitwarden Web Vault

(1) Click on Tools > Export Vault.

(2) Select file format .csv from the dropdown and enter your Master Password.

(3). Click Export Vault twice to confirm the action.

(4) Open the file to save it. Select your destination for the .csv file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Bitwarden from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Please follow the steps below to provide Keeper Support with information to assist vault related errors.

(1) Using Chrome browser, open the Web Vault at: https://keepersecurity.com/vault

(2) Click on View > Developer > Developer Tools.

(3) Login to your Keeper Vault.

(4) On the Developer Tools window, click on the "Console" tab and check for any errors in red.

(5) If there are errors, take a screenshot and/or copy-paste the information for the Keeper Team.

.KDBX File Import Overview

Keeper supports the ability to import directly from encrypted Keepass files in .kdbx file format. Keeper can import both password-protected and private key-protected formats. All versions of .kdbx files are supported.

This import includes Folders, Password, Custom Fields and even File Attachments! 🥳

To import into Keeper, please locate your encrypted .kdbx file, and if you are protecting your Keepass file with a private key, you will need that file as well.

Import Steps

(1) Login to Keeper on your computer

Login to the Keeper Web Vault:

• (US)

• (EU)

Or, download the Keeper Desktop App:

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose KeePass (.kdbx).

(5) Type in your KeePass Password.

(6) Click on the Key File + button and navigate to your Key File if one was used.

(7) Locate your .KDBX file and drag and drop it the target labeled "Drop a File Here".

(8) If necessary, use the drop-down menu in each column to map to a Keeper field. For KeePass files, the structure is automatically mapped so you should not need to perform any manual mapping.

(9) Click on Import to complete the process.

If you run into any issues, you may need to first update your Keepass application to a newer version, or export your Keepass database to a newer format.

Overview

Time-Limited Access allows you to securely share credentials or secrets with other Keeper users on a temporary basis, automatically revoking access at a specified time. Time-Limited Access prevents long standing privileges and ensures that information is removed from the recipient’s vault, greatly reducing the risk of unauthorized access.

Share a Record

Select the record from your vault and click Share, entering their email address or selecting it from your contacts list. Set their permission level and click Add.

Select the “Permissions” dropdown and click Set Expiration. Here you can select one of the default expirations or click custom date and time to set your own. Next, check the box if you would like the record owner, such as yourself, or users with edit access to be notified via email when the recipient's record access expires. Click Done to save.

Share a Folder

Open the shared folder from your vault and click the edit icon and from the “Users” tab, add the user or team you would like to share the folder with.

Set their permissions and from the dropdown menu click Set Expiration, following the same steps you would for a single record share (described above).

Next, check the box if you would like users with "can manage records" permissions over the folder to be notified via email when the recipient's record access expires. Click Done to save.

Export

To import from RoboForm, you must export your records first.

Macintosh

(1) Before proceeding, make sure you do not have your Passcards organized in folders in RoboForm.

(2) Click File > Print List > Logins or Identities or SafeNotes

(3) Right-Click HTML page and choose Save As...

(4) Select the format as Webpage, HTML Only.

(5) Navigate to where you want to save the file and click Save.

Windows App

(1) Click on the RoboForm dropdown menu in the upper left column.

(2) Choose Options, then Account & Data.

(3) Choose Export.

(4) Under Format, select CSV file.

(5) Browse the location to save and choose Export.

Windows Extension

(1) Select the RoboForm icon on your taskbar or toolbar.

(2) Click on the Overflow Menu.

(3) Choose Options then Account & Data.

(4) Choose Export.

(5) Under Format, select CSV file.

(6) Browse the location to save and choose Export.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose RoboForm from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from ZOHO, you must export your records first.

Web Vault

(1) Click the Tools tab and choose Export Secrets on the left panel.

(2) You can either export all the secrets or export only the ones that belong to a particular secret type

(3) Choose General CSV and click on the Export Secrets button.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose ZOHO from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from EnPass, you must export your records from first.

Mac

(1) Click File > Export.

(2) Select .json as your file format.

(3) Choose the location to save the file.

(4) Name the file and click Save.

Windows

(1) Click on the menu in the upper left-hand side.

(2) Click on File > Export.

(3) Select .json as your file format.

(4) Choose the location to save the file.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose EnPass from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(7) Click on Import.

Export

To import from Sticky Password, you must export your records first.

Mac

(1) Click on File > Export > Unencrypted.

(2) Name the file and click Save.

Windows

(1) Click Menu > Export.

(2) Click Export All or Export only selected items.

(3) Select Sticky Password 6 XML.

(4) Click Next.

(5) Name the file and click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Sticky Password from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(8) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(7) Click on Import.

Export

To import from Psono, you must export your records first.

(1) From Psono, click email address on upper right then 'Other'

(2) Click 'Export' then select JSON

(3) Save the file.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Psono from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Passpack, you must export your records first.

Web Vault

(1) Click Settings > Export.

(2) Click on Download.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Passpack from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

Export

To import from Password Boss, you must export your records first.

Mac & Windows

(1) Click File > Export Data.

(2) Choose Password Boss JSON - Not Encrypted.

(3) Navigate to where you want to save the file. Click Save.

Import

(1) Log into the Keeper Web Vault or Desktop App

(2) Click on your account email in the upper right-hand corner.

(3) Click on Settings > Import.

(4) Choose Password Boss from the list.

(5) Drag the exported file into the target window "Drop a File Here".

(6) Use the drop-down menu in each column to map to a Keeper field.

(7) If you intend to share all first level folders, check the box Import Root Level Folders as Shared. By selecting this option, all first level folders will become shared.

(8) Click on Import.

The Keeper Web Vault and Desktop application provide export and reporting capabilities. For consumer accounts, this is available for all users. On Enterprise accounts, this may be restricted by the Keeper Administrator.

Export Options

CSV

Keeper's CSV format supports Folders, Subfolders and Shared Folders. CSV files can be imported and exported with Keeper.

File Format:

Folder,Title,Login,Password,Website Address,Notes,Shared Folder,Custom Fields

JSON

The JSON format is structured as an array of Shared Folder objects, and an array of Record objects. The JSON format is compatible with Keeper's import tools and the Keeper Commander CLI.

PDF

For a printer-friendly version of records, the PDF version is also available.

To print the PDF, click on the printer icon at the bottom:

Encrypted Keepass (.kdbx)

Web Vault and Desktop App

Keeper supports encrypted KeePass export through the Web Vault, Keeper Desktop application and Keeper Commander CLI which is available to all customers.

From the Web Vault and Desktop App, select KDBX export format and you'll be asked to provide the desired KeePass Master Password. You can also provide a Key File to encrypt the KeePass file. The Master Password you provide here is used to encrypt the KeePass file - this is NOT your Keeper Master Password.

Commander

Keeper Commander, our Command-line CLI and SDK platform also provides a flexible KeePass export option.

To install Keeper Commander, visit this link:

The command to run is the export command, documented at this link below:

Microsoft 2FA Configuration

Keeper can protect Azure AD / Office 365 logins with our TOTP (time-based one-time password) feature. By default, Microsoft provides a different type of code which supports their push method. Below are the step by step instructions to setting up Office 365 TOTP code support properly.

(1) From your Microsoft Azure / Office 365 Profile Screen, visit your security settings screen. The Microsoft site seems to change often, so we won't add a hyperlink here. Click on "Add Method" to set up two factor authentication on your Microsoft account.

Safari

(1) Visit the link below to download Keeper for Safari from the Mac App Store.

(2) Open your Safari browser and navigate to Safari > Preferences > Extensions.

(3) If you have an existing KeeperFill extension, uninstall it.

(4) Activate the newly downloaded Keeper Password Manager extension by clicking the checkbox.

Autofill Issues

See the page to request a fix for a website that isn't filling properly. Our team can process fixes on the same day.

Check for Extension Updates (Chrome)

Overview

Starting with version 17.1 of the Keeper Browser Extension, we have drastically increased the speed at which we can resolve autofill issues while also training Keeper's Machine Learning models to safeguard autofill accuracy across the web.

We've introduced a new "Snapshot Tool" in the Keeper Browser Extension that greatly simplifies the process of fixing autofill issues on customer-owned websites or internal tools that were previously difficult for our engineers to access. By submitting a snapshot to our team, we can turn around site-specific autofill improvements in a matter of minutes.

Export

To import from SplashID, you must export your records first.

Mac

(1) Click File > Export > CSV.

(2) Name the file and click Save.

Instructions

To import from 1Password, you must export your records from the 1Password application on MacOS or Windows.

Export

To import from Proton Pass, you must export your passwords first.

(1) Open the Proton Pass browser extension for Chrome or Firefox and click Settings.

(2) Click on the Export tab. Ensure "Encrypt your Proton Pass data export file" is unchecked.

Export

To import from mSecure, you must export your records first.

Mac

(1) Click File > Export CSV.

(2) Accept the warning by clicking OK.

Export

To import from KeePass, you must export

Overview

Keeper is fully integrated into the login experience of every website and app using the Passwords button that appears above your device's keyboard.

Autofill supports the following features:

• Passwords

• Two-Factor (TOTP) codes

• Passkeys

Setup

iOS 18 and Above

With the update of iOS 18, you can enable KeeperFill directly from the Keeper app in one quick step. From the Settings menu, tap Enable KeeperFill > Turn On.

iOS 17 and Below

Before you can utilize KeeperFill's autofill features, you will first need to perform a few simple setup steps:

1. Open your device's Settings app.

2. Scroll down and select Passwords.

3. Tap Password Options and ensure "AutoFill Passwords" is toggled on.

4. Select

Autofill

Once the setup steps are complete, you will see a Passwords button appear above the keyboard when logging into an app or website. Tapping Passwords will launch KeeperFill.

KeeperFill will present a matching record from your vault. Alternatively, you can search for a record or create a new record. If there is a record match, tap Fill to autofill your login credentials.

Two-factor codes will be automatically copied to your clipboard when possible. To copy a code manually, tap the copy icon next to the code and when prompted paste the code into the field provided.

Passkey Setup

• Launch the Settings app on your iOS device and select Passwords.

• Next, choose Password Options.

• Toggle ON AutoFill Passwords and Passkeys.

• Then tap Keeper so a blue tick appears. If you have used Autofill before, iCloud Passwords & Keychain

Passkeys

Once the setup steps are complete, websites or applications that support passkeys will either prompt you to create a passkey or will provide a setting in your account section to setup a passkey login.

• Creating a passkey for a website or app is a simple process on your iOS device.

• Tapping Create Passkey on a site or app will trigger Keeper to intercept the request. Keeper then prompts you to create a passkey for your associated login and saves it to your vault.

• Returning to sites or apps where you have a stored passkey you will either be prompted to sign in with passkey or will be able to select Sign in with Passkey. Keeper does the rest!

Overview

Keeper's secure messaging solution, KeeperChat, allows you to chat with friends, family member and colleagues with peace of mind knowing you are in control of the content you share and who you share it with. KeeperChat has best-in-class security with end-to-end encryption for messages at rest and in transit. KeeperChat runs on a variety of devices and platforms including Android, iOS, Windows, and Mac OS. Download KeeperChat from the Google Play or App Store.

Benefits & Features

• Like your passwords, your private messages are stored in a secure, digital vault which can be accessed using the same credentials or biometric login method (Fingerprint or Face ID) you use to login to Keeper Password Manager.

• For increased security, two-factor authentication is available, providing an extra layer of protection against unauthorized access.

• Just like our password encryption technology, Keeper protects your messages with zero knowledge, 256-bit AES encryption security architecture.

User Experience & Preview of Features

KeeperChat is free to use with all features. To access additional storage, unlimited self-destructs, and unlimited message retraction, upgrade to .

Biometric Login & 2FA

Access Two-Factor Authentication and Biometric Login Settings by navigating to KeeperDNA.

Self-Destruct & Retract

Before sending your message, tap the timer icon and use the slider to set the self-destruct timer.

To retract, edit or set the self-destruct timer for a message that has already been sent, long press (or click) on the message and make a selection from the generated menu.

Private Media Gallery

Navigate to the Gallery to upload and securely share sensitive photos and videos.

Group Chats

Select the create chat icon and then select Start a Group Chat to add contacts.

Privately communicate and collaborate with groups of friends, family members and coworkers.

Import Methods

Keeper provides several methods of importing data into the vault. Each method is fully documented with screenshots and example data in the subsequent pages of this user guide.

Records created in any platform will instantly sync to the your other devices. Records that are shared among users will receive updates in real time.

Importing from other password managers

Export

To import from Dashlane, you must export your records first.

Dashlane Web Client

DASH: Dashlane Secure Archive

1. Login into https://www.dashlane.com.

2. Under My Account, select Settings, Export Data.

3. Under DASH: Dashlane Secure Archive click on Export to Dash.

4. Create a password and confirm it in the second field.

5. Click on Export data.

6. A file called Dashlane Export.dash will be made where you have assigned downloads to go.

CSV: Non Secure Export

1. Login into https://www.dashlane.com.

2. Under My Account, select Settings, Export Data.

3. Under CSV, click on Export to CSV.

4. A file called "dashlane-credential-export.zip" will be made where you have assigned downloads to go. Warning: This can be read by anyone.

Import Into Keeper

Once your files have been exported from Dashlane using one of the two methods above, continue to Keeper's Web Client or Desktop App to import.

DASH: Dashlane Secure Archive

1. Log into the Keeper Web Vault or Desktop App.

2. Click on your account email in the upper right-hand corner.

3. Click on Settings > Import.

4. Choose Dashlane from the list.

5. Drag your Dashlane Export.dash file to the Drop a File Here. window.

6. Enter the Dashlane password you assigned it during the export.

7. Use the drop-down menus in blue to map each column to a Keeper field. Click Next.

8. If you intend to share all first level folders, check the box Import Root Level Folders as Shared.

9. Review and approve the import by pressing the “Import” button.

CSV: Non Secure Export

1. Log into the Keeper Web Vault or Desktop App.

2. Click on your account email in the upper right-hand corner.

3. Click on Settings > Import.

4. Choose Text File (.csv) from the list.

5. Your file from Dashlane may be zipped, un-zip it and select the right .csv you want imported. Dashlane separates files by credentials, ids, payments, personal info, secure notes.

6. Select the .csv you want imported and drag it to Drop a File Here.

7. Use the drop-down menus in blue to map each column to a Keeper field.

8. If you intend to share all first level folders, check the box Import Root Level Folders as Shared.

9. Review and approve the import by pressing the Import button.

Keeper Forcefield: Windows Endpoint Protection

Overview

Keeper Forcefield is an advanced endpoint security feature for Microsoft Windows that protects sensitive applications and processes from unauthorized access. It is specifically designed to defend against threats such as infostealers and password-stealing malware installed from phishing or other attacks.

Forcefield is bundled with the Keeper Desktop application for Windows and operates silently in the background to ensure data protection without impacting performance or usability.

Getting Started

Installing Keeper Forcefield via Keeper Desktop

To activate Forcefield from the Keeper Desktop application, install the latest .

After installation:

• Navigate to Settings > Security in Keeper Desktop

• Visit the Forcefield screen and activate the service.

Once enabled, Forcefield will immediately begin protecting your computer.

Standalone Installation

The installation of the standalone version of Keeper Forcefield is available through an MSI installer based on the architecture.

x86/64-bit

ARM/64-bit

Status and Updates

The system tray provides a Forcefield status icon and the ability to check for a new version. Keeper will check on a daily basis for a new version, but the update must be explicitly installed by the user.

Applications Protected by ForceField

Forcefield is built to protect designated applications by verifying their process name, file name, and code signature. The following applications are secured using this validation approach:

Keeper Applications:

• Keeper Desktop

• Keeper Secrets Manager

• Keeper Commander

• Keeper Gateway

Web Browsers:

• Chrome

• Microsoft Edge

• Firefox

• Brave

If you would like Keeper Forcefield to protect additional applications, please email us at [email protected] and we'll review your request.

Quick Testing

To verify that Keeper Forcefield is protecting your machine:

1. Open Task Manager.

2. Right-click on a protected process.

3. Choose Create memory dump file.

4. The .dmp file should be 0 bytes if blocked.

Advanced Documentation

For more in-depth information regarding Keeper Forcefield including technical specs and IT Admin rollout, see the Enterprise Guide:

In today’s digital world, securing your online accounts is crucial. Multi-factor authentication (MFA) adds an extra layer of protection by requiring something you know (your password) and something you have (a time-based one-time password or TOTP) to access your accounts. Keeper helps you store and autofill these TOTP codes, making the authentication process faster and more secure.

Storing TOTP Codes in Keeper

Keeper supports time-based one-time passwords (TOTP) to enhance your security for two-factor authentication (2FA). By integrating TOTP codes into Keeper, you can safely store them within your records, alongside your login credentials. This integration allows you to easily retrieve these codes for websites or services that require them, streamlining the login process.

For example, when you enable MFA on a service like Office 365 or Google Workspace, you’ll typically be asked to scan a QR code or enter a secret key into an authenticator app. With Keeper, you can save these TOTP keys directly in your vault. Simply scan the QR code or enter the secret key into Keeper, and you’ll have your TOTP code securely stored and ready for use whenever you need it.

Overview & Benefits

Families share nearly everything – documents, photos, videos, website accounts, bank info, social media, security system codes and personal identification numbers. Keeper Family Plan allows you to securely store and share this information between family members with ease.

The major features and benefits that are included with the Keeper Family Plan:

Create a Free Family Plan from a Business or Enterprise Account

All Keeper Enterprise users can create a free, Keeper Family Plan for up to 5 family members with unlimited devices. To create your personal vault, follow the steps below:

Overview

Keeper Importer can automatically import unprotected passwords from web browsers such as Chrome, Firefox, Edge, Safari, Internet Explorer and Opera automatically from the Keeper Web Vault and Keeper Desktop Application.

This guide provides important compatibility information and troubleshooting tips for using hardware security keys with Keeper on iOS devices. If you're encountering issues with PINs, autofill, or NFC key support, this page will help you understand which iOS versions are compatible and how to resolve common problems.

Which hardware keys are supported with Keeper on iOS?

• Keeper works with any FIDO® Certified security keys. Ensure you have the latest version of Keeper installed for full compatibility with hardware keys.

  • For a complete list of certified keys from the FIDO Alliance, visit the .

• Unsupported Keys: Currently, software keys such as Passkeys or iCloud Keys are not supported for login or autofill with Keeper.

What are the iOS version requirements for hardware key compatibility?

To help you understand the compatibility of your iOS version with hardware keys and Keeper, refer to the table below:

Do I need a PIN for my hardware security key on iOS?

• Setting a PIN for your hardware security key is optional. You can choose whether or not to set up a PIN when configuring your key. The PIN setup process is done through the hardware key manufacturer’s software (e.g., Yubico Authenticator).

• Once a PIN is set for your security key, iOS will ask you to enter the PIN every time you use the key, whether for login or filling passwords.

• No PIN Bypass: Unlike the Keeper Web Vault, iOS does not support bypassing the PIN. You must enter the PIN each time the key is used.

What happens if I enter the wrong PIN for my hardware key too many times?

• If you enter the wrong PIN 6 times in a row, your hardware key will be locked. To unlock it, you will need to reset the key before you can use it again.

  • To reset your hardware security key please use the hardware key manufacturer’s software (e.g., Yubico Authenticator).

Can I use NFC hardware keys on iOS devices?

• Yes, NFC hardware keys are supported on most iOS devices.

• iPads do not support NFC hardware keys at all. This is a restriction at the OS level, and only physical hardware keys that plug into the device (via Lightning or USB-C) will work.

• NFC hardware keys are not supported in Keeper extensions (Autofill | KeeperFill) on iOS.

Can I use my hardware keys on my iPad?

• Yes, you can use hardware security keys with your iPad, but please note that only hardware keys that plug into the device (via Lightning or USB-C) are supported. NFC hardware keys are not compatible with iPads due to limitations at the OS level. This means that if you're using a hardware key with only NFC functionality, it will not work on iPad devices.

  • Combination hardware keys, that support both plug-in and NFC, will work via the plug-in method only.

  • USB-C keys require Keeper Version 16.12.0 or greater.

For iPad users, ensure your key is compatible with the appropriate connector (Lightning or USB-C) and that you have the latest version of Keeper installed to ensure full functionality.

Known Issues

YubiKey

Issue Overview: Some users with FIDO CTAP 2.1 compliant security keys (specifically YubiKeys with firmware version 5.7) may experience an issue after upgrading to Safari 18.1 or iOS/iPadOS 18.1. When attempting to authenticate, they are repeatedly prompted to enter their FIDO PIN in a loop, even after entering it correctly. This prevents the authentication process from completing.

Affected Devices and Scenarios

• Operating Systems: iOS 18.1, iPadOS 18.1, and macOS 15.1 (with Safari 18.1).

• Specific Behaviors on iOS/iPadOS:

  • Physical Key (USB-C/Lightning): When the key is plugged in, users often receive an error message immediately after entering the FIDO PIN.

  • NFC Authentication: The system may fail to prompt the user to tap their security key.

Status & Recommendation

Apple has resolved this FIDO PIN loop issue. The fix is included in the public releases of iOS 18.2, iPadOS 18.2, and macOS 15.2. Please update your device to the latest available software version through Settings > General > Software Update.

Troubleshooting & Workaround Options If you're unable to update your device immediately or are still encountering issues, consider the following options;

1. Re-register Your Key: If you have updated to iOS/iPadOS 18.2 and the issue persists, removing the security key from your account settings and then re-registering it can sometimes resolve lingering problems.

2. As a temporary workaround, you can log into your Keeper account on another device or browser and remove the hardware key from your authentication settings. This will allow you to use other two-factor authentication methods until you can update your iOS device.

For more details and updates, please refer to the .

Long-Tap Autofill and Hardware Security Keys

With the addition of iOS 18, Apple introduced a new long-tap autofill feature that allows users to quickly fill in login credentials from their password manager directly into apps or websites. However, when using a hardware security key for authentication, long-tap autofill will not work as expected. This limitation occurs because the system requires interaction with the hardware key to complete authentication, which isn’t compatible with the autofill feature’s workflow.

Affected Devices and Scenarios

• iOS/iPadOS 18+ Devices: The long-tap autofill feature does not work with accounts secured by hardware security keys.

Recommendation To work around this limitation, we recommend using the following steps:

1. Enable "Stay Logged In":

   1. Open the Keeper app and enable the "Stay Logged In" option. This will ensure you remain authenticated for a longer period, allowing long-tap autofill to function without needing to re-authenticate with your hardware key.

2. Log into the Keeper Main app on your iOS device and then you can proceed to use the long-tap autofill feature as intended.

Overview

Keeper is a zero-knowledge platform. Please note that if you forget your master password and lose your recovery phrase, you will not be able to login to your vault and Keeper Support will be unable to help you regain access.

Consumer and Family Plan customers: If you have forgotten your master password and have lost your recovery phrase, please create a new account. To create a new account with the same email address, please reach out to [email protected] for assistance. If you still need assistance, open a support ticket with our consumer support team.

Enterprise and MSP end-users: Business accounts may login to Keeper using a Single Sign-On product, and there is no master password involved. If you are an end-user in a business account, please contact your Keeper administrator for assistance. If you still need help, open a ticket.

Enterprise Admins: Please with Keeper support.

What to do if you forget your Master Password

• From the Web Vault or Desktop App, click on Need Help > Forgot Master Password to begin the account recovery process. If you forgot your master password and you lost your recovery phrase, Keeper support cannot help you.

• If you are able to login with biometrics (Face ID, Touch ID) on a mobile or desktop device, simply login and then visit the Settings > Reset Master Password screen.

• If you exceeded the number of failed attempts, please contact support and we'll reset the throttling system for you to try again.

Account Recovery

Keeper provides account recovery using a randomly generated 24-word recovery phrase. The recovery phrase can be used to regain access to your Keeper Vault in case you forget your Master Password.

Keeper implements recovery phrases using the industry-standard BIP39 word list, which is a set of 2,048 words used to generate an encryption key with 256 bits of entropy. Each word in the BIP39 list is carefully chosen to improve legibility and make the recovery process less error-prone.

The recovery phrase is generated locally on the user's device using the BIP39 word list. Keeper's backend systems do not have access to this recovery phrase, nor do any employees of Keeper. Keeper is a zero-knowledge platform and we cannot assist in the recovery process.

Resetting Your Master Password

Web Vault & Desktop App

If you would like to change your master password from the Web Vault & Desktop App, click the account dropdown menu (your email), select Settings and next to "Master Password" click Reset Now. You will then be prompted to enter your current master password and create and confirm a new master password.

If you are able to log into Keeper's mobile app using Biometrics, you can reset your master password without having to enter your current master password. Navigate to Settings > Reset Master Password and authenticate with Biometrics.

iOS and Android Mobile App

To change your master password on iOS and Android devices, from Settings, scroll down and tap Reset Master Password. You will then be prompted to enter your current master password (unless Biometrics is enabled and you are authenticated), then create and confirm a new master password.

Account Recovery Setup

Upon initial vault login, new users will be prompted to set up Account Recovery. Click Generate Recovery Phrase to begin.

Once your recovery phrase has been generated, be sure to store it in a safe place. For added convenience, you will be given the option to copy or download it. Check the box to acknowledge you have stored it in a safe place and click Set Recovery Phrase to complete the setup.

Reset Recovery Phrase

If you know your master password and would simply like to setup Account Recovery, from the account dropdown menu (your email) select Settings > Recovery Phrase.

What's a Passkey?

A passkey is a cryptographic key that lets you log in to your accounts and apps without having to enter a password or a second factor. Passkeys are phishing-resistant.

Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.

Supported Websites

Passkeys only work on websites and applications that have been specifically built to support them. is pretty small right now, but it will grow over time.

Creating a Passkey

To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" screen of the website. In the below example, we'll be showing Best Buy.

When clicking the "Create a Passkey" button, Keeper will intercept the request and ask you to save the passkey to your vault.

Logging In With a Passkey

The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to login. Sometimes you'll first need to enter your email address and the site will prompt you for a passkey login selection.

In the case of Best Buy, clicking on "Sign in with a Passkey" initiates the passkey login process with Keeper. Click on "Use Passkey" and you'll be logged in.

That's it! Using a passkey with Keeper and supported websites is very straightforward for sites that support it.

Vault Storage

In the Keeper Vault, you will see a Passkey field attached to the record. The Passkey field contains several pieces of information:

• Date the passkey was created

• Username

• Relying party (website or app)

Passkey records can be managed in your vault, placed in folders or shared with other users.

Using Passkeys on Mobile Devices

Passkeys on mobile devices, a highly anticipated feature for enhanced security and convenience, is now available on Android devices running Android 14 and Apple devices running iOS 17. This update marks a significant enhancement in our mobile applications capabilities, offering users an even more secure and streamlined experience.

Passkey Setup for Android

1. Launch the Settings app on your Android device and select Passwords, passkeys & accounts.

2. Set Keeper as your Preferred Autofill Service

   1. If Keeper hasn’t already been enabled through the Keeper app, tap on "Change" and select Keeper from the list of available services.

Passkey Setup for iOS

1. Launch the Settings app on your iOS device and select Passwords.

2. Next, choose Password Options.

3. Toggle ON AutoFill Passwords and Passkeys.

4. Then tap Keeper so a blue tick appears. If you have used Autofill before, iCloud Passwords & Keychain

The Future of Passkeys

We're excited about the future of passkeys. Here's our plan for passkeys this year:

• Support on desktop web browsers is now live

• Launch of Web Vault and Desktop App support for passkey management is now live

Have Questions?

We would love to hear your feedback on passkeys. Please email our team at [email protected].

Create Your Keeper Account

Your Keeper vault is easy to create, simple to use and you’ll be up and running in just minutes. You can create and access your Keeper vault by either logging in directly from Keeper via an email invitation from your Keeper Administrator or from your SSO provider dashboard.

Create Your Account - Email Invitation

You may have received an email from your organization's Keeper Administrator inviting you to create a Keeper account with a subject line that reads: "Action Required >> Instructions for Your Keeper Security Account"

To create your Keeper account, click the yellow action button that by default says "Set Up Your Account Now", however, your organization may have chosen to customize the exact wording.

Since your Keeper account is deployed through your Single Sign-On Identity Provider (IdP) integration, you will automatically be routed to authenticate against your IdP if a current SSO session is not active.

Once you have successfully authenticated to the IdP, you will be routed to your Keeper vault. Upon accessing your vault, you may receive a "Vault Transfer" acceptance dialog.

Next, you will be guided through a "Quick Start" walkthrough, that will help you either import passwords from your browser or other password manager (if enabled by your Keeper Admin) or manually create new records.

Create Your Account - SSO Dashboard

Alternatively, you can create your Keeper account by visiting your SSO provider dashboard. This is called "Identity Provider-initiated login". First, log in to your existing Single Sign-On identity provider as you normally do.

You will observe your Keeper administrator has integrated Keeper into your identity provider dashboard. Simply click the Keeper icon to launch the Keeper application.IdP-Initiated Login

You will be guided through a "Quick Start" walk through, that will help you either import passwords from your browser or other password manager (if enabled by your Keeper Admin) or manually create new records.

Login Flows

Once your Keeper account has been created, logging into your Keeper Vault is both easy and secure. Users can do so from either Keeper's vault login page or from their SSO provider dashboard.

Keeper Initiated Login

You can login to Keeper by entering either your email address or Enterprise Domain at Keeper's login page.

Login to your Keeper vault by region:

Email Address Login

From the Keeper vault login page, enter your email address and click Next

You will automatically be routed to your Identity Provider to sign in. Once you have successfully authenticated to the IdP, you will be routed to your Keeper vault.

Enterprise Domain Login

From the Keeper vault login page, select Enterprise SSO Login > Enterprise Domain

Enter your Enterprise Domain and click Connect

You will automatically be routed to your Identity Provider to sign in. Once you have successfully authenticated to the IdP, you will be routed to your Keeper vault.

SSO Initiated Login

Log in to your existing Single Sign-On identity provider as you normally do.

Simply click the Keeper icon to launch the Keeper application and you will be routed to your Keeper vault.

Device Approvals

If you sign into Keeper on a new platform, you may encounter a "device approval" notification (SSO Cloud Users Only). If you are attempting to log in on an unrecognized device or browser, a device approval must take place before you can proceed to your Keeper vault. Users have two methods of approval to choose from, Keeper Push or Admin Approval.

If you select Keeper Push, a notification (push) will be appear in your vault at an approved device or browser. Select Yes to approve the new device.

Alternatively, if you select Admin Approval, your Keeper Admin will receive notification for approval. Once the device has been approved, you will be able to proceed to your Keeper Vault.

For the examples below, the site "X" (Twitter) will be used, however, Keeper works across all social media platforms.

Create a Record

Web & Desktop App

To create a new record from Keeper's Web Vault or Desktop App, click the Create New > Record. Select a record type from the dropdown menu and enter a record "Title".

Enter the record details including your username, password and URL (if it wasn't auto-generated for you). Use Keeper's password generator by clicking on the dice to create a strong, random password or enter your existing password. Click Save when done.

KeeperFill

You can also create new records using the KeeperFill Browser Extension, which allows you to autofill your passwords and save new login credentials to your vault. KeeperFill is available for every web browser. Download KeeperFill for your browser by visiting our .

To create a record while at the site's login page, click the Add Record button in the KeeperFill toolbar. This “quick add” functionality will auto-generate a record “Title” and “URL” based on the website you are visiting.

Use Keeper's password generator by clicking on the dice to create a strong, random password or enter your existing password.