KeeperFill for Safari

Installation and usage instructions for the KeeperFill extension on Safari. KeeperFill for Safari is available on the Mac App Store.

Prior to May 25, 2023 the KeeperFill for Safari extension was bundled with the Keeper Desktop application. It is now available on the App Store and must be downloaded directly from the Apple App Store.

Installation & Setup

Step 1. Install Keeper for Safari from the App Store from the link below:

Step 2. Open your Safari browser and go to Safari > Settings > Extensions.

Step 3. If you have an old or existing KeeperFill extension installed, please disable it

Step 4. Activate the new Keeper Password Manager extension by clicking the checkbox.

Step 5. Now the KeeperFill extension should appear on your browser toolbar. However, you may need to restart Safari in order for the Keeper icon to display on the browser toolbar.

Step 6. We recommend that you disable the Safari built-in password manager. Open Safari > Settings > AutoFill and disable user names and passwords.

Step 7. At some point you will be asked for permissions. Make sure to select "Always Allow on Every Website" so that Keeper can work on all websites that you use.

It is important to allow Keeper to operate on all websites. This permission allows Keeper to autofill passwords and save passwords on the sites you login to. Keeper is a zero-knowledge product and does not monitor, store or track any site you visit, or your browsing history. See our Privacy Policy with any questions or concerns.

Video Overview

Logging In

Consumer customers can log in to the Keeper browser extension with their Keeper email address and Master Password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO Login credentials.

On the Safari browser, the extension will automatically log in when you log in to the Web Vault. Other web browsers may require you to log in separately to the Vault and Browser Extension.

For customers who log in with SSO, you can usually just enter your Email Address and click "Next". If directed by your admin, click on the Enterprise SSO Login dropdown. Select either Enterprise Domain and enter either the enterprise domain supplied by your Keeper Administrator or enter your Master Password.

Device Approval

If you are an SSO user, when logging into a new device you may be required to approve the device. For additional information on Device Approvals, click here.

Stay Logged In

When the Stay Logged In setting is enabled, you stay logged into Keeper when you close your browser or restart your computer. In order to use this feature you must first enable it in your extension's settings menu.

Click Settings > Security then toggle Stay Logged In "on".

Before you proceed, Keeper recommends that you first enable Auto-Logout in order to protect your vault in the case that you step away from your device while logged into Keeper. This automatically logs you out after a period of inactivity.

The Stay Logged In feature is also compatible with the Keeper Desktop App and can be accessed through the Account > Settings > Security screen on the desktop version.

AutoFill Passwords

Clicking the Keeper lock icon allows you to quickly fill and log in to a site. You can fill your login and password by clicking the Fill button or by clicking on Show More to fill individual fields.

Keyboard Shortcuts

If you prefer to use keyboard shortcuts instead of mouse clicks to make the process of auto filling your passwords even more seamless, follow the steps below:

  1. Navigate to the site you would like to log in to.

  2. Type command+shift+k

  3. In the field provided, begin typing your search terms.

  4. Use the up and down arrows on your keyboard to find and highlight the record you are searching for.

  5. Use the enter key to quickly fill and log in to the site.

Multiple Account Selector

If you have multiple logins for the same website, click on the dropdown menu to expand the selection and display all of the matching records.

Matching Records

When logging in to a website, the Keeper Browser extension will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.

The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list, and which specific record is selected as the default choice.

1. If the page you're visiting has a subdomain (e.g., then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.

2. After checking subdomain, Keeper looks at the "path" information (e.g. and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.

3. If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.

For the best record match, make sure that the "Website Address" field in the Keeper record matches the domain and path as close as possible to the target site.

Creating New Records

When logging in or registering for an account on a site with no stored credentials, Keeper will present you with a list of recognized email addresses to use for the login/email field on the site's application page (or you can click Add Login to enter a new one).

Next, in the password field, Keeper will instantly generate a strong, random password for you. Click Fill and Save to accept the password and instantly create a new Keeper record.

If you already have a password, enter it and click Yes to create a new Keeper record with the information you entered.

This workflow can be controlled from Settings > Prompt to Create in your KeeperFill Browser Extension.

To create a new record for a site that already has a matching login, click the menu icon, then Create New.

Importing Passwords

Click here to see instructions on how to import your browser stored passwords and export passwords from other password managers.

Creating Secure Passwords

Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. Keeper generates and securely stores strong, random passwords for all of your sites and apps with the click of the dice.

This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.

Changing Passwords

KeeperFill makes it easy to change your login passwords. When visiting a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will walk you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:

  • Autofill your old/current password

  • Automatically generate and autofill a new secure password

  • Confirm the changes and save them to your vault

The video below demonstrates how KeeperFill can help you change your passwords.

Change Your Passwords with KeeperFill

Add Multiple Website Domains

Some sites have more than one domain (website address/URL) that require the same exact login/password. If this is the case for any of your records, rather than creating an entirely separate record, KeeperFill allows you to store multiple website domains within one record. So no matter what domain you are logging in from, KeeperFill will recognize that domain as an alias and allow you to log in with the same stored credentials.

  1. From your Keeper Web or Desktop Vault, click the pencil icon to edit the record.

  2. Click the Custom Field button and select URL.

  3. In the field provided, enter the website address of the alternate domain. You can add as many additional URL fields as you'd like.

Match on Subdomain Setting

The "Match on Subdomain" setting enables the Keeper browser extension to recognize and differentiate a record's subdomain (if present) from its domain. In doing so, only records that match the subdomain of the login page will be populated into the extension window.

Example: If a user has a record with a website address containing a subdomain and domain such as "" and another record with the website address containing the same domain "" and attempts to log in at ", the only record match that will appear is "".

To enable this setting follow the steps below, click Settings > Match on Subdomain then toggle it "on".

If records with similar subdomains exist in your vault you are able to view those alternative matches by clicking on the dropdown menu.

Alternatively, if no records exist in your Vault for the subdomain of the page you are visiting, but they do for the domain, the Keeper extension will populate all of the existing recordings containing that domain.

Payment Cards & Identity

KeeperFill can also fill payment cards and identity information that are stored in your Vault. Payment cards are only available to fill at websites in which you currently have a Keeper record for.

KeeperFill Right-Click Context Menu

If a website form field does not display the Keeper lock icon, users can right-click on the field to open the KeeperFill window.


Crash after install: If a customer installs Keeper for Safari on both M1 Mac and Intel Mac at the same time via the "Share Across Devices" feature of Safari, it may require taking the following action:

  • Open your Safari browser and go to Safari > Settings > Extensions

  • Disable and Enable the Keeper extension

  • Try to launch it again


To uninstall Keeper for Safari, go to Safari > Settings > Extensions and click "Uninstall" next to Keeper Password Manager.

You may also need to uninstall the “Keeper Password Manager” desktop application. To do this, open your Finder > Applications and search for Keeper Password Manager. Drag this into the Trash.

Uninstalling Keeper's Browser Extension from Safari does not affect the data stored in Keeper's Cloud Security Vault.

Last updated