Installation instructions for KeeperFill for Chrome, Brave and other Chromium-based browsers.
Visit the link below to install Keeper Password Manager & Digital Vault from the Chrome Web Store.
In order for Keeper to be visible in your toolbar at all times, click on the puzzle icon and then the pin icon next to Keeper Password Manager.
Keeper needs to be enabled on all sites by default. To confirm, navigate to the extensions options screen. Site access should be enabled "On all sites".
We recommend that you disable Chrome's built-in password saving features.
Navigate to: and ensure all autofill features are disabled.
Installation instructions for KeeperFill for Firefox.
Visit the link below to download Keeper Password Manager & Digital Vault from Firefox Browser Add-ons.
Once installed, the Keeper icon will appear in the upper right corner of your web browser window.
Next we recommend you disable your browser's built-in password saving features:
In the upper right corner of your browser click on the Menu Icon (3 horizontal lines) and select Settings > Privacy & Security.
Under "Logins and Passwords", uncheck the box next to "Ask to save logins and passwords for websites".
To ensure you are using the latest version of KeeperFill and allow Keeper to run in private windows, enable both of these settings (pictured below) from the Keeper extension menu. Right-click on the Keeper extension icon in the upper-right corner of your browser window and select "Manager Extension".
Installation and usage instructions for the KeeperFill extension on Safari.
(1) Visit the link below to download Keeper for Safari from the Mac App Store.
(2) Open your Safari browser and navigate to Safari > Preferences > Extensions.
(3) If you have an existing KeeperFill extension, uninstall it.
(4) Activate the newly downloaded Keeper Password Manager extension by clicking the checkbox.
(5) At some point you will be asked for permissions. Make sure to select "Always Allow on Every Website" so that Keeper can work across websites that you visit.
(6) Now the KeeperFill extension should be displayed in your browser toolbar. However, you may need to restart Safari in order for the Keeper icon to appear.
(7) We recommend that you disable Safari's built-in autofill features. Open Safari > Preferences > AutoFill and disable "user names and passwords".
Crash after install: If a user installs Keeper for Safari on both M1 Mac and Intel Mac at the same time via the "Share Across Devices" feature of Safari, it may require taking the following action:
Open your Safari browser and go to Safari > Preferences > Extensions.
Disable and enable the Keeper for Safari extensions.
Try to launch Keeper again.
Installation instructions for KeeperFill for Opera.
User guides for the KeeperFill Browser Extension for Chrome, Firefox, Safari, Microsoft Edge, Opera and other Chromium-based browsers.
KeeperFill is Keeper’s powerful, autofilling browser extension. Once you install the Keeper Browser Extension, you can conveniently autofill your logins, passwords, passkeys and save new records that you create to your Keeper Vault. The KeeperFill browser extension is available for every web browser including Chrome, Firefox, Safari, Edge, Opera and other Chromium-based browsers.
Below you will find browser-specific installation and setup instructions. Instructions will vary across different browsers and operating systems.
Most users can log into the KeeperFill browser extension with their email address and master password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO login credentials.
When you log in or out of your Keeper Web Vault you will be simultaneously logged in or out of KeeperFill and vice-versa.
For customers who log in with SSO, typically entering the email address will route to the corresponding identity provider login screen. If your Keeper administrator requires a specific Enterprise Domain entry, click on Enterprise SSO Login.
By default, users are logged out of Keeper if their browser window closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to remain logged into Keeper for a configurable duration.
To enable Stay Logged In, click the options icon > Settings > Security, then enable "Stay Logged In".
Keeper recommends that you also set the "Inactivity Logout Timer" which automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer (minutes, hours, or days) and your session will resume even once you close your browser.
Records now conveniently appear directly on the home screen as a list, with “Suggested Record(s)” at the top to easily fill the credentials that match the website you're on.
Select a record to view all its details as well as conveniently take common actions like launching, sharing, editing, and accessing the record's options menu.
Vault records appear directly on the browser extension home screen, making it quick and easy to find exactly what you are looking for.
Easily fill credentials with suggested records that match the website you're on. Favorite records will appear on top when more than one suggested record is shown.
Sort records by most recently used, name, or date modified. Filter by favorites, record type, and more.
The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials you create to your vault.
If it's the first time you are logging into a site with KeeperFill, you will be asked if you would like Keeper to autofill your login.
Keep in mind, you must already have created a Keeper record for this site containing the website address for Keeper to recognize, match and fill your login. Upon clicking Yes, your credentials will be autofilled into the login form and you will be logged in.
Records appear directly on the home screen as a list, with “Suggested Records” at the top to easily fill the credentials that match the website you're on. Select the record, then click Autofill to fill the credentials into the site's log in form.
The KeeperFill toolbar provides easy access to all of your vault records You can quickly search for a website login or anything else stored in your vault. The search feature is case insensitive and will match any record within your vault as you type.
When logging into a website, KeeperFill will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.
The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list and which specific record is selected as the default choice.
(1) If the page you're visiting has a subdomain (e.g. xyz.google.com), then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.
(2) After checking subdomain, Keeper looks at the "path" information (e.g. xzy.google.com/some/path) and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.
(3) If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.
With KeeperFill, there are multiple paths to create a new record and save it to your vault.
You can quickly create a record from the KeeperFill toolbar at any time by clicking the yellow plus button. If you have no suggested records for the website you are on, Keeper will display an Add Record button instead. Click this button to "quick add" a record by auto-generating its "Title" and "URL" based on the website you are visiting.
You can also choose which folders any given record is stored in. Record location can be selected on existing records as well as new records you are in the process of creating. Simply click the "Location" dropdown menu to select the folder or subfolder you would like the record to reside in.
Alternatively, you can create a new record from a website's "account creation" or "sign in" page by selecting the Keeper icon in the form field. On "account creation" pages, click the Create a Record or Add to Keeper button that appears to be routed to a secure Extension Tab, where you can create a new vault record. On "sign in" pages, the same Create a Record and Add to Keeper buttons will appear if you have no matching records for that website.
If you do have matching record(s) and you'd like to create a new record, use the options menu in the prompt that appears to begin creating a new record in the secure Extension Tab.
When you begin creating a record in Keeper's Extension Tab, the record "URL" and "Title" will be auto-generated. If you entered any data into the site's username or password fields before opening the Extension Tab, those values will be automatically populated into the new record form as well.
Upon reviewing and saving the record details, the Extension Tab will close and you will be automatically routed back to the website you came from. For additional convenience, Keeper will auto-fill the username and password fields on this website, if they are not already populated.
Keeper will offer to save a password to the vault, if you login manually on a site by typing or pasting in the login and password. The "Save Password Prompt" feature is enabled by default, and can be disabled in the browser extension settings menu. For Enterprise customers, this feature can also be enforced on or off.
Note: For enterprise environments, the "Save Password Prompt" will only appear if the password entered by the user meets the complexity requirements enforced by the Keeper Administrator. See for more information on password complexity enforcements.
When creating a new record or editing an existing record, users can add additional website addresses to the record by clicking the Add Website Address button. This functionality allows users to efficiently store and organize all related website domains for a record directly from the browser extension.
Add as many website addresses as you'd like and easily reorder them with drag-and-drop.
Click the option icon to the right of a website address to:
Set it as the primary address (this will swap the selected address with the record's primary address)
Edit the field label
Remove the website address
A passkey is a cryptographic key that allows you to log into your accounts and apps without having to enter a password or second factor.
Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.
Passkeys can be used as a replacement for any FIDO2 security key for either first factor or second factor login to supported websites.
To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" page of the website.
Upon clicking "Create Passkey" at the desired site, Keeper will intercept the request. Click Create Passkey to create and save the passkey to your vault.
The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to log in.
Long, random passwords that are created for each account help protect your information and reduce your exposure to data breaches. Alternatively, by combining multiple words, passphrases are an even more secure alternative to traditional passwords.
Keeper's password generator can create and securely store strong, random passwords or passphrases for all of your sites and apps.
To begin, click the dice icon within a new or existing record. You can customize your password by character length (8-99 characters) and choose to include lowercase and uppercase letters, numbers and symbols.
Check the box at the bottom of the toolbar if you'd like to make your selections the default setting for all passwords moving forward. Select Use Password to update the record or Copy Password to copy it to your clipboard.
Click the dice icon within a new or existing record and from the dropdown menu next to "Type", select Passphrase.
You can customize your passphrase by setting the length, including capitals and numbers in the passphrase and choosing from various symbols to separate the words.
Passphrases can be up to 20 words long, with a minimum length of 5 words and each word including at least 3 characters.
Check the box at the bottom of the toolbar if you'd like to make your selections the default setting for all passphrases moving forward. Select Use Passphrase to update the record or Copy Passphrase to copy it to your clipboard.
Alternatively, you can generate a standalone password or passphrase by clicking the Options Menu > Password Generator.
To view your password/passphrase history, click the clock icon within the generator screen. Hover your cursor over a password to either view it or copy it to your clipboard.
Your password generator history can be cleared at any time by clicking Clear History.
For Enterprise customers, the password generator on end-user vaults will adhere to the minimum character length, minimum number of lowercase/uppercase/numbers/symbols and allowed list of symbols as defined by your Keeper Administrator.
The passphrase generator on end-user vaults is enabled by default, but can be disabled by your admin. Passphrases will adhere to the minimum number of words and can be configured to include capital letters and numbers. The separators between words will be selected from the list of allowed symbols.
For more information on record password enforcement policies, please see our .
KeeperFill makes it easy to change your passwords. When a user visits a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
Autofill your old/current password
Automatically generate and autofill a new secure password
Confirm the changes and save them to your vault
Keeper can automatically fill custom fields into login forms. From the Keeper Web Vault, create a custom field in your record, ensuring the label matches that of the field you want to fill. (e.g. "Last 4 digits of SSN").
You can also fill the the custom field value via the fill window.
If you prefer to use keyboard shortcuts instead of mouse clicks to autofill your passwords, follow the steps below:
Navigate to the site you would like to log in to.
To open the KeeperFill extension, enter shift+command+K (Mac) or Alt+K (Windows).
In the field provided, enter your search terms.
Use the up and down arrows on your keyboard to find and select the record you are searching for.
Upon autofilling your username and password via KeeperFill, when prompted, a stored two-factor code will also be autofilled into the field provided.
Alternatively, you can click the copy icon next to the code and paste it into the field provided.
Storing two-factor codes in your Keeper Vault has several advantages:
Keeper two-factor codes are more secure than using SMS text messages.
Two-factor codes stored in Keeper are protected with strong zero-knowledge encryption.
They can be auto-filled quickly while logging in to a site, saving time and reducing friction.
Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.
When configuring multi-factor authentication for any account, you can capture TOTP codes directly through the Browser Extension without switching between apps.
Simply navigate to the relevant record in your Browser Extension and click "Settings," then select "Scan 2FA Code." The extension will automatically detect and save the authentication code to your Keeper record, making it instantly available for future logins.
TOTP codes can also be quickly added from the record "Create" and "Edit" screens. If a secret key is provided instead of a QR code, you can manually enter it to generate your two-factor code.
From the fill window you can view and fill the payment cards and addresses that are stored in your vault.
KeeperFill is fully integrated with your browser's right-click context menu and offers an alternative filling method. Simply right-click on a login field to produce a context menu. Select Keeper to fill logins, two-factor codes, payment cards, addresses and create and edit records.
All your KeeperFill tools and settings are consolidated in an easy to use Options Menu found in the upper right corner of the KeeperFill toolbar.
The Settings Menu covers everything from security settings, appearance, autofill and autosubmit functionality, the various KeeperFill prompts, and much more.
Users can customize their viewing experience with the ability to expand the extension window via “Landscape Mode”. The dual-pane window allows you to view your record details and records list at the same time – providing seamless access to what you need most.
You can easily switch between “Landscape” and “Portrait” mode with a single click of a button on your extension toolbar.
From time to time, users inform us that autofill is not functioning as expected on certain websites. The Snapshot Tool greatly simplifies the process of reporting and fixing autofill issues by seamlessly providing Keeper's Engineering Team with key website information.
To report an Autofill Issue, there are 2 locations to access this feature: From the on-page form fill and the browser extension toolbar.
From the on-page form filling screen, click on the overflow menu > Report an Autofill Issue
This works on:
Login pages (Username, Password)
TOTP code pages
Payment and identity pages
If you are having trouble with a website's login page, simply select Report an Autofill Issue from the extension Options menu or from the fill tool.
From the browser extension toolbar window, click on the overflow menu > Report an Autofill Issue.
Click Take Snapshot to take a screen capture of your current browser window. Click Next: Preview to review exactly what data will be sent to Keeper, ensuring there is no confidential information included before you proceed.
Next, select from the provided list of autofill issues or describe your own.
Keeper will NOT send credentials or confidential information. We only send the screenshot and HTML page structure exactly as displayed in the preview window.
Click Report Issue to send the information to the Keeper Team.
The Keeper Team will promptly receive the necessary information to diagnose and resolve the filling issue. Once a solution is implemented, an update will be released to all customers. You will receive an email notification confirming the update. In many cases, site-specific fixes can be turned around within the same day.
Keeper supports biometric login with a passkey, allowing users to authenticate using a device-bound passkey that replaces all traditional login methods – including master password, SSO, and 2FA.
To activate biometric login, navigate to the extension "Settings" menu and Select Biometric Login. When you toggle biometric login “on”, Keeper will prompt you to create a Passkey and the platform will request a biometric or PIN authentication, depending upon the capabilities of your device.
Once created, the passkey login acts as a complete replacement for both your first factor – master password or SSO and the second factor such as TOTP, SMS, or DUO (if configured).
You can now unlock the Keeper Browser Extension using your device’s built-in biometric authentication. Click Biometric Login at Keeper's login screen and use your fingerprint or facial recognition to access your vault instantly.
Multiple Passkeys can be stored in your Keeper account to account for the various platforms you may use. In this example, a passkey is available in iCloud Keychain, Windows Hello and Google Chrome. On each platform where you use Keeper, click Manage Passkeys to create a new one.
Keeper offers two advanced settings for individual records tailored to certain autofill use cases.
This setting allows users to control whether a record’s Custom Fields can autofill into fields on a webpage that are already populated. Previously, Custom Field content wouldn't autofill into an already-populated field.
This setting will prevent Keeper from attempting to autofill any given record on multiple pages in a row. Disabling this setting can help prevent accidental “false positive” autofill scenarios, where Keeper autofills on a page you don’t want it to.
To access the Advanced Settings menu, select the record overflow menu/options icon.
Users have the option to entirely disable form field icons – these are the Keeper icons that appear within website login fields. This will allow you to disable the icons without disabling KeeperFill’s autofill and auto submit functionality.
If "Clipboard Expiration" is enabled, Keeper will automatically clear your computer’s clipboard after a short delay whenever you copy information from your browser extension. Durations range from 30 to 120 seconds. This security feature mitigates the risk of confidential data remaining on your clipboard for extended periods, thereby reducing potential exposure to other applications.
If "Autofill on page load" is enabled, Keeper will automatically fill a matching record into the login fields of the website. Users can enable this feature on an individual record basis.
If "Autosubmit After Autofill" is enabled, Keeper will automatically submit the form and log in to the website after autofilling your username and password. Users can enable this feature on an individual record basis, or universally enable it for all of your records within KeeperFill's Settings Menu.
With the accessibility setting, users have the ability to control tabbing behavior and focus on the Keeper icon within form fields.
Select the Options Menu > Settings > Accessibility to disable this setting, preventing focus on the Keeper icons when tabbing through form fields with keyboard controls.
The "Match on Subdomain" setting enables KeeperFill to differentiate a record's subdomain (if present) from its domain. In doing so, Keeper will only display records matches based on strict subdomain matching to the website you are currently visiting.
Example: If a user has a record with a website address containing a subdomain and domain such as "subdomain1.company.com" and another record with the website address containing only the domain "company.com" and attempts to log in to "subdomain1.company.com, the only record match that will appear is "subdomain1.company.com".
To enable this feature, select the Options Menu > Settings > Match on Subdomain.
Installation instructions for KeeperFill for Edge.
Visit the link below to download Keeper Password Manager & Digital Vault from Microsoft Edge Addons.
In order for Keeper to be visible in your toolbar at all times, click on the extensions puzzle icon then click on the eye icon next to Keeper Password Manager to "Show in Toolbar".
Next, we recommend that you disable Edge's built-in autofill features.
Click on the Edge menu icon and select Settings and under "Microsoft Wallet".
Click Passwords > Settings.
Disable "Offer to save passwords" and "Autofill passwords and passkeys".
Deploying the Browser Extension through group policy
For business customers, see Keeper's Enterprise end-user deployment guide:
Other Chromium-based browsers such as Brave
Use the enter/return key to open the record details and shift+enter/return keys to launch and fill a record.
Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code.
