About Our Security

Keeper is a Zero-Knowledge platform. The data stored in a Keeper vault is encrypted and decrypted locally on the user’s device using keys that are derived by the user's master password. Note: business customers may not use a Master Password if Keeper is integrated into the enterprise Single Sign-On (SSO) solution. Keeper Security employees have no ability to decrypt customer data, because the keys are managed by the customer. In addition to zero knowledge architecture, Keeper provides a number of two-factor authentication methods including Google Authenticator, Microsoft Authenticator, SMS and FIDO U2F security keys. Keeper Security is SOC2 and ISO27001 certified and we actively maintain a public vulnerability disclosure program and bug bounty program.

For more information about our security please visit our public security disclosure page at: https://keepersecurity.com/security​

Detailed encryption architecture can be found at: https://docs.keeper.io/enterprise-guide/keeper-encryption-model​

User Guides

• ​iOS​

• ​Android​

• ​Web Vault & Desktop App​

• ​Microsoft Store App​

• ​Browser Extensions​

• ​Enterprise End-User Setup (Master Password Login)​

• ​Enterprise End-User Setup (SSO Login)​