> For the complete documentation index, see [llms.txt](https://docs.keeper.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.keeper.io/release-notes/backend/backend-api/backend-api-18.1.13.md).

# Backend API 18.1.13

Released on November 5, 2026

### New Features

* **One-Time Share for Nested Shared Folders**: Owners and users with sharing rights can now create one-time share links for Nested Shared Folders records, including attached files. Editable shares let recipients update the record. Existing one-time shares keep working after a record is converted to Nested Shared Folders.
* **Content Manager / Content Share Manager permissions**: Users with these folder roles can now remove and delete records and subfolders in the folders they manage.
* **Nested Shared Folders compliance reporting**: Compliance reports now show which folder grants access, the full folder path, more detailed record permissions and a filter by shared folder.
* **Device management**: Users can now see the IP address and approximate location of each device session, and remove old, unused sessions by age or cutoff date.
* **PAM just-in-time access push notifications**: Approvers get a device push notification when someone requests access, and requesters get one when their request is approved (iOS, Android, Windows, macOS).
* **MSP approvals of endpoint privilege requests**: When an MSP admin approves or denies a request from a Managed Company, the decision is recorded as an audit event in ARAM.
* **Migration reporting**: The summary from a Commander migration import (for example, from CyberArk) is now saved so it can be reported on later.
* **Keeper Secrets Manager batch updates**: Many secrets can be updated in one request, which reduces sync load during bulk password rotation.

### Improvements

* **KA-7646:** Made our internal test environments more reliable when Nested Shared Folders are tested.
* **KA-8082:** Added documentation on removing records and folders in Nested Shared Folders. It explains each step of the removal process.
* **KA-8088:** Updated internal test tools to match recent Nested Shared Folders changes. Customers won't see any change.
* **KA-8132:** PAM just-in-time access requests now send device push notifications to approvers when a request is made, and to the requester when it's approved. Notifications arrive on iOS, Android, Windows and macOS even when Keeper isn't open.
* **KA-8911:** Keeper now acts quickly when a user signs out of all devices, has an enforcement removed or loses access to a record. Connected services update right away to reflect the reduced access.
* **KA-8935:** Updated internal test tools so they can test converting classic shared folders to Nested Shared Folders. 
* **KA-9012:** Expanded automated test coverage for complete end-to-end flows. This improves release quality.
* **KA-9087:** The device list now shows the IP address and approximate location (city and country) of each session. This makes it easier to spot sign-ins you don't recognize.
* **KA-9097:** Expanded compliance reports to show the folder that grants access, the full folder path and detailed record permissions. Admins can now also filter reports by shared folder.
* **KA-9098:** Compliance reports now include folder details, nested folder paths and full Nested Shared Folders record permissions. Filtering by folder respects each admin's management scope.
* **KA-9200:** Loading PAM service account dependencies is faster because KeeperPAM Gateway details for many configurations are now fetched at once. This also avoids hitting request limits in large environments.
* **KA-9253:** When a password is rotated, Keeper now notifies the folder where the record lives. Shared users see the rotated credentials promptly.
* **KA-9276:** Results from Commander migration imports, such as from CyberArk, are now saved for each enterprise. Each import shows how many items were migrated, skipped or failed.
* **KA-9284:** Users can now remove old, unused device sessions, either by age or by a cutoff date. The session you're using is never removed.
* **KA-9465:** Record owners and users with sharing rights can now create one-time share links for Nested Shared Folders records. Existing link-sharing, expiration and self-destruct restrictions still apply.
* **KA-9466:** Recipients of a one-time share can now open Nested Shared Folders records and their attached files. Self-destruct on first access works as before.
* **KA-9420:** Users with the Content Manager or Content Share Manager role on a folder can now remove and delete records and subfolders in it. This gives content managers full control over the folders they manage.
* **KA-9470:** Added automated test coverage for one-time sharing of Nested Shared Folders records. This improves release quality.
* **KA-9472:** Editable one-time shares now let recipients update Nested Shared Folders records and manage attached files. Folder permissions, enterprise restrictions and audit events still apply.
* **KA-9501:** Risk management reporting now counts records created in Nested Shared Folders. User record statistics are now complete and accurate.
* **KA-9521:** Added automated test coverage for trash and deleted-items handling. This improves release quality.
* **KA-9530:** Keeper Secrets Manager can now update many secrets in one request. This cuts down on sync activity and speeds up bulk rotations.
* **KA-9572:** Fixed an issue where moving a shared subfolder to the root level more than once hid it, and the folders inside it, from shared users. Shared folder trees and access now stay intact after moves.
* **KA-9610:** When an MSP admin approves or denies an endpoint privilege request from a Managed Company, an audit event is now created. MSPs get a full audit trail for compliance.

### Bug Fixes

* **KA-8751:** Fixed an access control issue to strengthen account security. We recommend all customers update.
* **KA-8850:** Fixed an issue where a Nested Shared Folders folder moved to the root level could still appear in its old location. Folder moves now show up correctly.
* **KA-9101:** Fixed an error when transferring two or more Nested Shared Folders records at once. Batch transfers now complete successfully.
* **KA-9119:** Users with View-only access to a shared Nested Shared Folders record can no longer add it to their own folders. Viewer permissions are now enforced correctly.
* **KA-9142:** Nested Shared Folders folders shared with teams created before Nested Shared Folders now appear for all team members. Older teams get shared folders just like new ones.
* **KA-9164:** Deleted Nested Shared Folders records are now removed from Security Audit in the Admin Console. Security scores now reflect only active records.
* **KA-9255:** Sharing a Nested Shared Folders record with a user who isn't allowed to receive shares now shows a clear restriction message. Previously it showed a misleading connection error.
* **KA-9256:** The "Cannot share or receive items" enforcement now applies when adding someone to a Nested Shared Folders shared folder. Restricted users can no longer be added.
* **KA-9301:** Emergency Access now gives the designated contact access only after the waiting period has ended. This matches Keeper's documented security model.
* **KA-9331:** Strengthened secure connection checks between Keeper services. This improves protection of data in transit.
* **KA-9427:** Moving a Nested Shared Folders folder into one of its former subfolders now works correctly. Folders can be reorganized freely within the allowed depth limits.
* **KA-9476:** Fixed a sync issue with new Nested Shared Folders subfolders when permission inheritance is turned off and the owner is on the parent folder's team. These subfolders now sync correctly for their owner.
* **KA-9505:** Time-limited access to a Nested Shared Folders shared folder is now removed when the user is deleted. Deleted users no longer leave behind leftover access.
* **KA-9527:** Converting classic shared folders to Nested Shared Folders no longer breaks existing one-time share links. Recipients can keep using their links after conversion.
* **KA-9529:** Fixed a configuration issue in internal development environments.
* **KA-9534:** Fixed an issue where the wrong users could be identified when time-limited access expired. Access removal now applies to the right users.
* **KA-9563:** Folders that have been permanently deleted no longer show up during a full vault sync. Deleted folder access is now fully removed.
* **KA-9568:** New folders are now placed correctly in Nested Shared Folders or classic folders based on where they're created, whatever client version is in use. Folder creation is now consistent across clients.
* **KA-9594:** Security notification emails, such as 2FA, security key, master password and passkey changes, now show the actual device name. Before, they showed only the app type and version.
* **KA-9602:** Transferring and deleting a user whose account has only Nested Shared Folders content now works. Before, it failed because it expected classic folders.
* **KA-9605:** API keys now display correctly in the Admin Console when an MSP admin launches into a Managed Company.
* **KA-9607:** Fixed an error that kept MSP admins from completing certain actions after launching into a Managed Company. These actions now work as expected.
* **KA-9613:** Record access details no longer list users who get access only by inheritance when inheritance is turned off for a subfolder. Access reporting now shows who actually has access.
* **KA-9636:** Team member lists are now limited to users in the same enterprise as the team. This makes team membership information more private.
* **KA-9645:** Fixed an error that could happen while upgrading encryption for accounts with older key data. The upgrade now completes successfully.
* **KA-9675:** Fixed a problem introduced by a recent update. Normal behavior is restored.
* **KA-9695:** Record access details now show the correct role for teams with the Content Manager role. Before, the role showed as unresolved.
* **KA-9726:** Compliance reports no longer mark active Nested Shared Folders records as being in the trash. Record status is now reported accurately.
* **KA-9768:** After a Nested Shared Folders record's ownership is transferred, the previous owner is no longer shown as an owner. Ownership now updates correctly on every device.
* **KA-9808:** Nested Shared Folders records restored from the trash now show up again in Security Audit. Security scores include restored records.

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.keeper.io/release-notes/backend/backend-api/backend-api-18.1.13.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.