Login Commands

This page describes all ways to login to keeper from sdk and cli perspective

Commands:

1. Login

2. Logout

3. Whoami

Keeper supports multiple login methodologies, these include

Authentication Workflow (High-Level)

• Primary Authentication

  • Regular account (username + master password)

  • Cloud SSO (SAML, OIDC)

  • On-Premises SSO

  • Managed Company (MSP) login

• Secondary Authentication (2FA)

  • TOTP (Google/Microsoft Authenticator)

  • SMS one-time code

  • DUO (push, SMS, voice)

  • RSA SecurID

  • WebAuthn/U2F (security keys, biometrics)

• Device Approval

  • Email link

  • 2FA challenge

  • Keeper Push notification

SDK Authentication Flow

1. Initialize SDK client/session context

2. Select login method (master password, SSO, MSP)

3. Handle challenges issued by Keeper

   • 2FA challenge

   • Device approval

   • Security key prompt

4. Establish secure session

   • Receive encrypted session token

   • Unlock vault and enterprise APIs

Login Command

Authenticate to start a session.

DotNet CLI

Command: login

Flag:

• --password master password

• --resume resume last login

• --sso login using sso provider

• --alt login using sso master password

• --help Display this help screen.

• --version Display version information.

• email (pos. 0) Required. account email

Example:

Not logged in> login [email protected] --password 1234567890qwertyuiop

DotNet SDK

Function: IAuth.Login

 public async Task Login(string username, params string[] passwords)

Example:

 await auth.Login(email, passwds.ToArray());

PowerCommander

Command: Connect-Keeper Alias : kc

Flag:

• -Username

• -Password

• -NewLogin

• -Server

• -Config

• -SsoPassword

• -SsoProvider

Example:

PS > Connect-Keeper -Username "[email protected]" -Password (Read-Host -AsSecureString -Prompt "yourpassword")

A more detailed approach and how to use this command is updated here.

Python CLI

Command: login

Flag:

• -h, --help : show this help message and exit

• --sso-password : force master password for SSO accounts

• --resume-session : resumes current login session

• -p, --pass : PASSWORD master password

Example :

My Vault > login [email protected] --pass qwertyuiop1234567890

Python SDK

Function: refer here

Logout Command

Securely log out from the CLI.

DotNet CLI

Command: logout

Flag:

• --resume : resume last login

• --help : Display this help screen.

• --version : Display version information.

Example:

My Vault > logout

DotNet SDK

Function: IAuthentication.Logout

public virtual async Task Logout()

Example:

await DoLogout();

PowerCommander

Command: Disconnect-Keeper

Aliases: kq

Flag:

• -Resume

Example:

PS > Disconnect-Keeper 

PS > kq

Python CLI

Command: logout

Example:

My Vault > logout 

Python SDK

Function: close

Example:

vault.close()
keeper_auth.close()

Whoami Command

Displays information about the current authenticated user, including username and email.

DotNet CLI

Command: whoami

Example:

My Vault > whoami
            User:  [email protected]
          Server:  keepersecurity.com      
     Data Center:  US                      
           Admin:  Yes                     
    Account Type:  2                       
    Renewal Date:  May 28, 2027            
Storage Capacity:  1024GB                  
   Storage Usage:  0GB                     
 Storage Expires:  May 28, 2027            
    License Type:  Keeper for Business     
 License Expires:  May 28, 2027            
       Base Plan:  Enterprise              
     BreachWatch:  Yes     

DotNet SDK

Function: Authentication.IAuthContext

Example:

private Task WhoamiCommand(string _)

Power Commander

Command: Get-KeeperInformation

Alias: kwhoami

Example:

PS > Get-KeeperInformation
User            : [email protected]
Server          : keepersecurity.com
Admin           : True
AccountType     : Enterprise
RenewalDate     : May 28, 2027
StorageCapacity : 1024
StorageUsage    : 0
StorageExpires  : May 28, 2027

LicenseType     : Enterprise
EnterpriseName  : Example
BasePlan        : Unknown
Expires         : 5/28/2027
StorageCapacity : 1TB
TotalUsers      : 20
ActiveUsers     : 6
InvitedUsers    : 0

Python CLI

Command: whoami

Flag :

• -h, --help : show this help message and exit

• -v, --verbose : verbose output

Example:

My Vault> whoami -v
              User  [email protected]
            Server  keepersecurity.com
       Data Center  US
             Admin  True
      Account Type  Enterprise
      Renewal Date  May 28, 2027
       BreachWatch  True
Reporting & Alerts  True
           Records  11
    Shared Folders  11
             Teams  11

Python SDK

Function: Not Supported

Get and Set Keeper Password Visible command

Displays information about the current authenticated user, including username and email.

DotNet CLI

Not Implemented

DotNet SDK

Not Implemented

Power Commander

Command: Get-KeeperPasswordVisible

Returns current password visibility setting (True or False).

Example:

PS > Get-KeeperPasswordVisible
True

PS > Get-KeeperPasswordVisible
False

Command: Set-KeeperPasswordVisible

Toggles whether passwords are shown in plaintext or masked when displaying records.

Flags: -Visible — When present, passwords are shown in plaintext. When omitted, passwords are masked.

Example:

PS > Set-KeeperPasswordVisible -Visible
PS > Get-KeeperRecord "MyRecord"   # password fields shown in plaintext

PS > Set-KeeperPasswordVisible
PS > Get-KeeperRecord "MyRecord"   # password fields shown as ••••••

Python CLI

Not Implemented

Python SDK

Not Implemented

Show-Two Factor Code command

Displays information about the current authenticated user, including username and email.

DotNet CLI

Not Implemented

DotNet SDK

Not Implemented

Power Commander

Command: Show-TwoFactorCode

Description: Generates and displays TOTP codes for records with a oneTimeCode field. Shows code, elapsed, and remaining seconds.

Flags: -Records — Record UID(s) or objects (Required, pipeline)

Example:

PS > Show-TwoFactorCode -Records "recordUid123"

PS > Get-KeeperRecord -Uid "abcDEF123" | 2fa

Command: Set-KeeperPasswordVisible

Toggles whether passwords are shown in plaintext or masked when displaying records.

Flags: -Visible — When present, passwords are shown in plaintext. When omitted, passwords are masked.

Example:

PS > Set-KeeperPasswordVisible -Visible
PS > Get-KeeperRecord "MyRecord"   # password fields shown in plaintext

PS > Set-KeeperPasswordVisible
PS > Get-KeeperRecord "MyRecord"   # password fields shown as ••••••

Python CLI

Not Implemented

Python SDK

Not Implemented