Using KeeperFill
User guides for the KeeperFill Browser Extension for Chrome, Firefox, Safari, Microsoft Edge, Opera and other Chromium-based browsers.
Logging In
Most users can log into the KeeperFill browser extension with their email address and master password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO login credentials.
When you log in or out of your Keeper Web Vault you will be simultaneously logged in or out of KeeperFill and vice-versa.
For customers who log in with SSO, typically entering the email address will route to the corresponding identity provider login screen. If your Keeper administrator requires a specific Enterprise Domain entry, click on Enterprise SSO Login.
If Keeper does not automatically route you to the proper data center location or identity provider, please contact your Keeper administrator.
For GovCloud customers, ensure that the "US (GOV)" region is selected.
Stay Logged In
By default, users are logged out of Keeper if their browser window closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to remain logged into Keeper for a configurable duration.
To enable Stay Logged In, click the options icon > Settings > Security, then enable "Stay Logged In Between Session".
Keeper recommends that you also set the "Inactivity Logout Timer" which automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer and the timer will resume even once you close your browser.
Record Overview
Records now conveniently appear directly on the home screen as a list, with “suggested records” at the top to easily fill the credentials that match the website you're on. Select a record to view all the record's details and from the top of the record, you can conveniently take common actions like filling, launching, sharing, editing, or favoriting a record.
Select a record to view all its details and from the top of the record, you can conveniently take common actions like filling, launching, sharing, editing, or favoriting a record.
Suggested Records, Sort & Filter
Vault records appear directly on the browser extension home screen, making it quick and easy to find exactly what you are looking for.
Easily fill credentials with suggested records that match the website you're on. Favorite records will appear on top when more than one suggested record is shown.
Sort records by most recently used, name, or date modified. Filter by favorites, record type, and more.
Autofill Your Passwords
The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials you create to your vault.
If it's the first time you are logging into a site with KeeperFill, you will be asked if you would like Keeper to autofill your login.
Keep in mind, you must already have created a Keeper record for this site containing the website address for Keeper to recognize, match and fill your login. Upon clicking Yes, your credentials will be autofilled into the login form and you will be logged in.
Records appear directly on the home screen as a list, with “Suggested Records” at the top to easily fill the credentials that match the website you're on. Select the record, then click Autofill to fill the credentials into the site's log in form.
Searching Your Vault
The KeeperFill toolbar provides easy access to all of your vault records You can quickly search for a website login or anything else stored in your vault. The search feature is case insensitive and will match any record within your vault as you type.
Understanding Record Matching
When logging into a website, KeeperFill will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.
The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list and which specific record is selected as the default choice.
(1) If the page you're visiting has a subdomain (e.g. xyz.google.com), then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.
(2) After checking subdomain, Keeper looks at the "path" information (e.g. xzy.google.com/some/path) and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.
(3) If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.
Create a New Record
With KeeperFill there are multiple paths to create a new record. From the KeeperFill toolbar, quickly create a new record with our prominent Add Record button. This “quick add” functionality will auto-generate a record “Title” and “URL” based on the website you are visiting. Alternatively, you can create a record from scratch by clicking the yellow plus icon.
Alternatively you can create a new record at a site's "create account page" within the KeeperFill window. KeeperFill will assist you in creating a new record as documented in the screens below.
Enter your email address/username in the field provided. In the password field, Keeper will instantly generate a strong, random password for you. Click Fill and Save to accept the password and instantly create a new Keeper record. Or, If you already have a password, enter it and click Yes to create a new Keeper record with the information you entered.
Review the details of the newly created record, making any necessary changes and click OK > Save when done.
Passkeys
A passkey is a cryptographic key that allows you to log into your accounts and apps without having to enter a password or second factor.
Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.
Passkeys can be used as a replacement for any FIDO2 security key for either first factor or second factor login to supported websites.
Passkeys as a primary login factor only work on websites and applications that have been specifically built to support them. The list of supported sites is growing every day.
Create a Passkey
To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" page of the website.
Upon clicking "Create Passkey" at the desired site, Keeper will intercept the request. Click Create Passkey to create and save the passkey to your vault.
Log In With a Passkey
The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to log in.
To learn more about Keeper and Passkeys, including Passkeys for mobile, click here.
Generate a Password
Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. To use Keeper's password generator, click the Options Menu > Generate Password.
Using the slider and checkboxes, you can adjust the character length and types. Click Save Password to either update the site's matching record (if provided) or you can create a new record for the site using the newly generated password. Alternatively, click Copy Password to copy the password to your device's clipboard.
This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.
Generator History
Keeper provides users with “generator history” as a way of retrieving a previously generated password and its associated details. Generated passwords are only encrypted and decrypted upon logging in to the extension. Click View Generator History and hover your cursor over a password to either show or copy it to your clipboard
Your password history can be cleared at any time by clicking Clear History.
Change a Password
KeeperFill makes it easy to change your passwords. When a user visits a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
Autofill your old/current password
Automatically generate and autofill a new secure password
Confirm the changes and save them to your vault
Autofill Custom Fields
Keeper can automatically fill custom fields into login forms. From the Keeper Web Vault, create a custom field in your record, ensuring the label matches that of the field you want to fill. (e.g. "Last 4 digits of SSN").
You can also fill the the custom field value via the fill window.
Keyboard Shortcuts
If you prefer to use keyboard shortcuts instead of mouse clicks to autofill your passwords, follow the steps below:
Navigate to the site you would like to log in to.
To open the KeeperFill extension, enter shift+command+K (Mac) or Alt+K (Windows).
In the field provided, enter your search terms.
Use the up and down arrows on your keyboard to find and select the record you are searching for.
Use the enter/return key to open the record details and shift+enter/return keys to launch and fill a record.
You can modify the shortcut command to your preference in your browser's extension settings.
Two-Factor Codes for TOTP
Upon autofilling your username and password via KeeperFill, when prompted, a stored two-factor code will also be autofilled into the field provided.
Alternatively, you can click the copy icon next to the code and paste it into the field provided.
Storing two-factor codes in your Keeper Vault has several advantages:
Keeper two-factor codes are more secure than using SMS text messages.
Two-factor codes stored in Keeper are protected with strong zero-knowledge encryption.
They can be auto-filled quickly while logging in to a site, saving time and reducing friction.
Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.
Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code.
Payment Cards & Addresses
From the fill window you can view and fill the payment cards and addresses that are stored in your vault.
Right-Click Context Menu
KeeperFill is fully integrated with your browser's right-click context menu and offers an alternative filling method. Simply right-click on a login field to produce a context menu. Select Keeper to fill logins, two-factor codes, payment cards, addresses and create and edit records.
For security reasons, only records with a matching domain name for the site you visit will display in the menu of autofill options.
Tools & Settings
All your KeeperFill tools and settings are consolidated in an easy to use Options Menu found in the upper right corner of the KeeperFill toolbar.
The Settings Menu covers everything from security settings, appearance, autofill and autosubmit functionality, the various KeeperFill prompts, and much more.
Form Field Icons
We’ve also given you the ability to entirely disable form field icons – these are the Keeper icons that appear within website login fields. This will allow you to disable the icons without disabling KeeperFill’s autofill and auto submit functionality.
Accessibility
With the accessibility setting, users have the ability to control tabbing behavior and focus on the Keeper icon within form fields.
Select the Options Menu > Settings > Accessibility to disable this setting, preventing focus on the Keeper icons when tabbing through form fields with keyboard controls.
Match Only Subdomains
The "Match Only Subdomains" setting enables KeeperFill to differentiate a record's subdomain (if present) from its domain. In doing so, Keeper will only display records matches based on strict subdomain matching to the website you are currently visiting.
Example: If a user has a record with a website address containing a subdomain and domain such as "subdomain1.company.com" and another record with the website address containing only the domain "company.com" and attempts to log in to "subdomain1.company.com, the only record match that will appear is "subdomain1.company.com".
To enable this feature, select the Options Menu > Settings > Match Only Subdomains.
Last updated
