KeeperFill for Firefox

Installation and usage instructions for KeeperFill for Firefox.


KeeperFill is Keeper’s powerful, autofilling browser extension. Once you download KeeperFill, you can conveniently autofill your logins, passwords, passkeys and save new records that you create to your Keeper Vault.

Installation & Setup

To download the latest version of Keeper's Browser Extension for Firefox, visit the link below and click Add to Firefox. ck the box when prompted.

(1) Once installed, the Keeper icon will appear in the upper right corner of your web browser window.

(2) Disable your browser's built-in password saving features:

  1. In the upper right corner of your browser click on the Menu Icon (3 Horizontal Lines) and select Settings > Privacy & Security.

  2. Under "Logins and Passwords", uncheck the box next to "Ask to save logins and passwords for websites".

(3) To ensure you are using the latest version of KeeperFill and allow Keeper to run in private windows, enable both of these settings from the Keeper extension menu. Right-click on the Keeper extension icon in the upper-right corner of your browser window and select "Manager Extension".

Private mode on Firefox only currently works if you login from the Web Vault. Logging in directly from the browser extension will not login to Keeper.

Logging In

Most users can log into the KeeperFill extension with their email address and master password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO login credentials.

On the Firefox browser, when you log in or out of your Keeper Web Vault you will be automatically logged in or out of KeeperFill and vice-versa.

For customers who log in with SSO, click on Enterprise SSO Login.

Select either Enterprise Domain and enter either the enterprise domain supplied by your Keeper Administrator or enter your Master Password.

For information on Device Approvals, click here.

Stay Logged In

By default, users are logged out of Keeper if their browser window closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to remain logged into Keeper for a configurable duration.

To enable Stay Logged In, click Settings > Security, then toggle "Stay Logged In Between Session" on.

Keeper recommends that you also set the "Inactivity Logout Timer" which automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer and it will continue to count down even if you close your browser.

The Stay Logged In feature is also compatible with the Keeper Web Vault and Desktop App and can be accessed form you account's security settings (click here to learn more).

Searching Your Vault

The KeeperFill toolbar provides easy access to all of your vault records and other useful functionality. You can quickly search for a website login or anything else stored in your vault. The search feature is case insensitive and will match any record within your vault as you type.

Autofill Your Passwords

The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials you create to your vault.

If it's the first time you are logging into a site with KeeperFill, you will be asked if you would like Keeper to autofill your login.

Keep in mind, you must already have created a Keeper record for this site containing the website address for Keeper to recognize, match and fill your login. Upon clicking Yes, your credentials will be autofilled into the login form and you will be logged in.

Keeper will autofill your login credentials when possible. If you would like to initiate the filling of your credentials, you can do so from either the KeeperFill toolbar or fill window. From the KeeperFill toolbar, select the matching record and click the fill icon.

Alternatively, from the fill window, click the Keeper icon that appears in the website's login fields and click Fill Record.

Keyboard Shortcuts

If you prefer to use keyboard shortcuts instead of mouse clicks to autofill your passwords, follow the steps below:

  1. Navigate to the site you would like to log in to.

  2. To activate the extension, type command+shift+k (for Mac OS) or alt+k (for Windows).

  3. In the field provided, begin typing your search terms.

  4. Use the up and down arrows on your keyboard to find and highlight the record you are searching for.

  5. Use the enter key to quickly fill and log in to the site.

Understanding Record Matching

When logging into a website, KeeperFill will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.

The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list and which specific record is selected as the default choice.

1. If the page you're visiting has a subdomain (e.g., then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.

2. After checking subdomain, Keeper looks at the "path" information (e.g. and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.

3. If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.

For the best record match, make sure that the "Website Address" field in the Keeper record matches the domain and path as close as possible to the target site.

Create a Record

When logging in or creating a new account on a site that has not yet been stored in your vault, KeeperFill will assist in creating a new record.

You are first presented with a list of recognized email addresses to use for the login field or you can click Add Login to enter a new one.

Next, in the password field, Keeper will instantly generate a strong, random password for you. Click Fill and Save to accept the password and instantly create a new Keeper record.

Or, If you already have a password, enter it and click Yes to create a new Keeper record with the information you entered.

Review the details of the newly created record, making any necessary changes and click OK and Save when done.

To create a new record for a site that already has a matching login, click the menu icon in the fill window, then Create New.

This workflow can be controlled from Settings > Prompt to Create in your KeeperFill Browser Extension.


A passkey is a cryptographic key that lets you log in to your accounts and apps without having to enter a password or a second factor.

Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.

Passkeys only work on websites and applications that have been specifically built to support them. The list of supported sites is pretty small right now, but it will grow over time.

Create a Passkey

To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" screen of the website. In the below example, we'll be showing Best Buy.

Upon selecting "Create a Passkey", Keeper will intercept the request. Click Add Passkey to create and save the new passkey to your vault.

Log in with a Passkey

The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to login.

To learn more about Keeper and Passkeys, click here.

Generate a Password

Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. Within the KeeperFill toolbar click Generate Password.

Using the slider and checkboxes, you can adjust the character length and character types. Click Save Password to either update the site's matching record (if provided) or you can create a new record for the site using the newly generated password. Alternatively, click Copy Password to copy the password to your device's clipboard.

This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.

Generator History

Keeper provides users with “generator history” as a way of retrieving a previously generated password and its associated details. Generated passwords are only encrypted and decrypted upon logging in to the extension.

Hover your cursor over a password to reveal or copy it. Your password history can be cleared at any time by clicking Clear History.

Change a Password

KeeperFill makes it easy to change your passwords. When a user visits a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:

  • Autofill your old/current password

  • Automatically generate and autofill a new secure password

  • Confirm the changes and save them to your vault

Autofill Custom Fields

Keeper can automatically fill custom fields into login forms. From the Keeper Web Vault, create a custom field in your record, ensuring the label matches that of the field you want to fill. (e.g. "Last 4 digits of SSN").

You can also fill the the custom field value via the fill window.

Accessibility Setting

With the accessibility setting, users have the ability to control tabbing behavior and focus on the Keeper icon within form fields.

Select Settings > Accessibility to disable this setting, preventing focus on the Keeper icons when tabbing through form fields with keyboard controls.

Add Multiple Website Domains

Some sites have more than one domain (website address/URL) that require the same exact login/password. If this is the case for any of your records, rather than creating an entirely separate record, KeeperFill allows you to store multiple website domains within one record. So no matter what domain you are logging in from, KeeperFill will recognize that domain as an alias and allow you to log in with the same stored credentials.

  1. From your Keeper Web or Desktop Vault, click the pencil icon to edit the record.

  2. Click Custom Field and select URL.

  3. In the field provided, enter the website address of the alternate domain. You can add as many additional URL fields as you'd like.

Match Only Subdomains

The "Match Only Subdomains" setting enables KeeperFill to differentiate a record's subdomain (if present) from its domain. In doing so, only records that match the subdomain of the login page will be populated in KeeperFill's "Matching Records"

Example: If a user has a record with a website address containing a subdomain and domain such as "" and another record with the website address containing only the domain "" and attempts to log in to ", the only record match that will appear is "".

To enable this feature, click Settings > Match Only Subdomains and toggle the setting on.

Two-Factor Codes (TOTP)

Records that have a stored two-factor code can be filled into login forms containing a TOTP field. Simply click the fill button in the fill window.

Storing two-factor codes in your Keeper Vault has several advantages:

  • Keeper two-factor codes are more secure than using SMS text messages.

  • Two-factor codes stored in Keeper are protected with strong zero-knowledge encryption.

  • They can be auto-filled quickly while logging in to a site, saving time and reducing friction.

  • Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.

  • Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code.

To learn more about filling two-factor codes via the right-click context menu, click here.

Payment Cards & Addresses

From the fill window you can view and fill the payment cards and addresses that are stored in your vault.

Right-Click Context Menu

KeeperFill is fully integrated with your browser's right-click context menu and offers an alternative filling method. Simply right-click on a login field to produce a context menu. Select Keeper to fill logins, two-factor codes, payment cards, addresses and create and edit records.

For security reasons, only records with a matching domain name for the site you visit will display in the menu of filling options.

Firefox and U2F Security Keys

While FIDO U2F support was added with the release of Firefox Quantum, the feature is turned off by default. In order to enable U2F support in Firefox Quantum, follow the steps below:

  1. Type "about:config" (without quotes) into the Firefox address bar and press Enter.

  2. Search for u2f.

  3. Double-click on security.webauth.u2f to enable U2F.

Supported Keys:

It’s important to understand that every FIDO U2F implementation can vary from the official specifications. Some sites supporting FIDO U2F have made accommodations for the incompleteness of Firefox’s implementation, but some have not. In other situations, some services may not work with Firefox Quantum because of a service-specific implementation.


Uninstalling Keeper Password Manager will delete the data from Keeper on the local device. Data stored in Keeper's Cloud Security Vault is NOT erased.

  1. Right click on the Keeper icon in the top right corner of your browser.

  2. Select Remove Extension.

  3. Click Remove.

If you need assistance, please contact the Keeper support team at

Last updated