iOS - iPhone, iPad

End-user guide for Keeper on Apple iOS (iPhone, iPad) devices

Keeper Master Password

To create a Keeper account, you need to provide your email address and select a Master Password. The Master Password is the only password you need to remember. We recommend choosing a strong Master Password that is only used for Keeper.

Do not forget your Master Password. If you are using Keeper on more than one device, you will need to login to the device with your email address and Master Password.

Enterprise customers who login with SSO do not require selection of a Master Password.

Enterprise SSO Login

If you are an Enterprise customer using SSO Login, tap on Enterprise SSO Login and then enter your Enterprise Domain provided by your Keeper administrator.

Creating Records

To create a new record, tap on the "+" Create Button. Keeper also has an import feature to quickly add passwords to your vault from our Web Vault and Desktop App.

New User Experience

When you first login to your vault, Keeper will walk you though the process of creating your first password record and highlight several features of the app. Keeper will then give you the opportunity to import passwords from your computer and web browsers. If you're not near a computer, you can perform the import at a later time.

After tapping on I'm at my computer, Keeper will ask you to navigate to keepersecurity.com/setup on your computer. Follow the instructions on your computer to continue the import process. Click here for instructions on Web Vault Import.

Creating Folders & SubFolders

To create a folder, tap on the "+" Create Button and select Create New Folder. To create a SubFolder, navigate to the parent folder, then tap on "+" Create Button and select Create New Folder.

Moving & Shortcuts

Multiple records and folders can be moved or have shortcuts created. Shortcuts are like alias files that can exist in two or more places, and when edited, change together. To select a folder or record or multiples thereof, tap on the pencil icon near the top right of your screen. Select the folders or records you would like to move or shortcut and then select the action you would like to perform using the icons located at the bottom of your screen.

  • Shortcut will ask to create a shortcut to an existing folder or you have the option to create a new folder by tapping Create Folder. Tap Create Shortcut to complete the task.

  • Move to new folder will ask for a new folder name. Enter a new folder name and tap Save.

  • Move to existing folder will display folders to move to, tap one to make your selection. Tap Move to complete the task.

  • Trash will move the folder or record to the Trash found in Deleted Records.

  • A single move of a record can also be done in the All Records view screen. Tap on Move To... to start this process.

Dynamic Search

Keeper's Dynamic Search feature displays relevant records as you type. Searching works across all of the fields within your Keeper records.

Filter Records

Filter records by Favorites, Shared, Files, and Two-Factor Codes. Watch Favorites and Deleted Records can be found near the bottom of the menu. From the vault screen, tap the filter button to show filter options.

Password Generator

Keeper's Password Generator enables you to instantly create maximum-strength, random passwords that can be placed into any field of your Keeper record. To use Keeper's Password Generator, tap on the Dice icon.

Scan a Document (iOS13+)

Keeper's Scan a Document feature makes it easy to add Notes through the iOS 13+ VisionKit optical character recognition (OCR) capabilities. This allows the iOS 13+ device to scan a document, identification card or handwritten notes and easily transcribe them into the Notes field in any record. Tap on Edit in a previously created record, then tap on Scan a Document. Once the image has been scanned, tap Save in the camera function, review and modify the text if needed, then hit Save again within the record.

Auto-Launch

Keeper's Auto-Launch feature makes it easy to login to websites without having to leave the app.

Keeper will ask what browser you would like to open the link with.

Select a browser and then make the following choice: Just Once or Make Default. Choosing Keeper's browser will provide you with KeeperFill login buttons at the top of the device when login fields are present (see below). When logging in, simply tap on the login or password buttons to insert the credentials.

KeeperFill using Keeper's Browser

If you would like to use the native web browsers (Safari, Firefox, Chrome) to launch the site, you can use the KeeperFill extension feature to automatically fill login forms (described in the next section).

AutoFill with KeeperFill (iOS12+)

As of iOS version 12, Keeper is fully integrated into the login experience of every website and app through the "Passwords" button that appears above the keyboard. Before you can use this capability, you need to perform a few setup steps:

  1. Open your device Settings App.

  2. Tap on Passwords & Accounts.

  3. Tap on AutoFill Passwords.

  4. Ensure AutoFill Passwords is toggled on then select Keeper.

Once the above steps above have been completed, you will see the Passwords button above the keyboard when logging into an app or website. This button will open KeeperFill.

Password AutoFill Integration on iOS
Variation of Password AutoFill on iOS

The KeeperFill screen provides the ability to search for matching records in your vault or create a new record.

If your login and record has a Two-Factor Code, follow these steps to insert that code.

  1. Use the copy button next to Two-Factor Code to copy the number into the clipboard.

  2. Tap Fill to send your login credentials to the website or application.

  3. Long press on the Two-Factor Code field and paste in the code.

Other KeeperFill Features:

  • Search your vault for matching or existing records

  • Create new strong passwords using the Dice feature

  • Switch between Keeper Vaults

Note: You may need to search for your record when filling in credentials for some applications. Keeper will attempt to match records when possible.

KeeperFill (iOS 11 and Older)

Prior to the launch of iOS 12, KeeperFill can only be accessed as part of the "Share" action.

KeeperFill on older iOS versions

Before you can use KeeperFill on iOS11 and older devices, you need to perform a few setup steps:

  1. Visit the webpage that you would like to apply KeeperFill.

  2. Select the Share icon near the bottom of your browser.

  3. Tap on More.

  4. Tap on KeeperFill to add it to your shared items.

  5. Tap on KeeperFill again to start the login process.

  6. KeeperFill will find the record associated with the website's URL, tap on the Fill button.

  7. KeeperFill will automatically fill in your login credentials.

Secure File Storage

Securely upload files such as your passport photo, secret photos, drivers license, loan documents, videos or any private file to your Keeper vault. You can also securely share your private files and documents with other Keeper users - from vault to vault.

Note: Secure File Storage is available as a Secure Add On.

Two-Factor codes for logging into websites

  1. On another device, visit the two-factor authentication screen which is usually located within security settings. It is sometimes referred to as "login verification" or "two-step verification".

  2. On your phone, from a Keeper record, select Edit and then "Add two-Factor Code."

  3. Scan the Two-Factor QR pattern associated with the website.

  4. After scanning the QR pattern, a Two-Factor Code field will be generated inside the record.

  5. The Two-Factor code will be regenerated frequently and can then be filled into the website that will prompt for it after logging in with a username and password. Use the share symbol to KeeperFill in your 2FA code.

Storing Two-Factor codes in the vault has several advantages:

  • Keeper two-factor codes are more secure than using SMS text messages.

  • Two-factor codes stored in Keeper are protected with strong Zero-Knowledge encryption.

  • They can be auto-filled quickly while logging in to a site, saving time and reducing friction.

  • Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.

  • Keeper records are shareable, so if you have multiple needing to logging with the same credentials, they won’t need to hunt down the person who has the only device with the code.

Sharing Records & Folders

You can securely share individual records or entire folders with other Keeper users. To share a single record with another user, open the Keeper record and tap on the Share button. Then tap Share with User, enter the user's email, then use the toggle buttons to select each permission (Can Edit, Can Share or Make Owner).

You can also create a Shared Folder. Shared Folders allow you to share any number of records across your personal folders with one or more Keeper users.

How to create a shared folder:

  1. Tap on the "+" Create Button at the bottom of your screen, then select More.

  2. Tap on Create Shared Folder.

  3. Give the Shared Folder a name. Then tap Save.

  4. The new folder will now appear in your records list. To share with other users, tap on the folder name then tap the three dots in the upper right corner of your screen.

  5. Tap on Manage Users.

  6. Add the email addresses of the users you would like to share this folder with.

  7. You can assign permission levels for each user you add by tapping on their email address under the Users tab.

  8. You can assign both user management and record management permissions with the toggle buttons, otherwise the user will only be able to view the record.

  9. To add records to the folder, tap on the Records tab.

  10. Select the individual records you would like to add to the shared folder. Each record can also be given share and edit permission.

  11. Tap the Save button when finished.

User Permissions: Can Manage Users means this user can add or remove other users from this folder. Can Manage Records means this user can add or remove records from this folder.

Record Permissions: Can Edit means the record can be edited by users of this folder. Can Share means the record can be shared with others by users of this folder.

Record History

Keeper provides the ability to save and restore previous versions of your records at any time.

To access a record's history, tap on the More button within a record. Then tap on Record History.

To restore a record back to a previous state, tap on the version you want to restore. Review the record information and then tap Restore. Confirm that you want to replace the current record with previous version by tapping Yes when prompted.

Note: The Record History feature is only available as part of the paid consumer and Business plans.

Deleted Records

Deleted records can be reviewed and restored by visiting the Deleted section in the filter menu.

To restore a deleted record, tap on the record to review it, then tap on Restore. Confirm you want to restore the record by tapping Yes when prompted.

If you want to permanently delete all of the records in Recently Deleted, tap on the Empty Trash button toward the top of your screen. Confirm the Delete Forever action by tapping Yes when prompted.

Note: This feature is only available to as part of the paid consumer and Business plans.

Note: You cannot permanently delete records individually.

BreachWatch

BreachWatch monitors the dark web for breached accounts then alerts you so you can take action to protect yourself against hackers.

To start your BreachWatch scan, tap on the BreachWatch Tab near the bottom of your screen. Tap on Let's Begin and then Scan.

BreachWatch will scan your records and report the risks associated with them. Tapping on a risk under Scan Results will show the record and and then tapping on Resolve will show steps needed to resolve that risk.

Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in the Keeper Vault.

Note: The BreachWatch feature is available as a Secure Add On.

Security Audit

The Security Audit feature allows you to audit the overall password strength of the records in your vault. Tap on Security Audit found in the filter menu. Your overall password security score and number of required password updates will appear toward the top of your screen. To resolve these security risks, change the password at the affected site immediately and update the corresponding record in your vault.

Only the records displaying a red or orange colored bar to the left of the record name pose a significant security risk and will require a password update.

Identity & Payments

Identity & Payments is the place for you to store your personal address information and your credit card numbers safely. KeeperFill will automatically fill credit card information into the correct fields when you are at any checkout screen during a purchase. The Identity & Payments feature can be found in the filter menu.

Personal Info is where you can securely store multiple phone numbers and addresses. Payment Cards is where you can securely store credit card numbers, expiration dates and card verification values (CVV).

To have KeeperFill insert credit card information stored in Keeper, launch the website by tapping the Login URL within the record. Navigate to the credit card payment page and tap on the credit card field. Tap on the Payment Card button at the top of your screen to view your saved credit cards. Tap on the card saved in your record then tap on the Fill Button to add your credit card information to the website's payment fields.

Settings

The Settings screen allows you to customize the personalization and security features of the application. Note that some security settings may be enforced by your Keeper administrator if you are part of a Keeper Business account.

  • Change Themes

  • Two-Factor Authentication

  • Biometric Login

  • Clipboard Expiration

  • Auto-Logout Duration

  • KeeperFill Setup

  • Enable Self-Destruct

  • Fast Login Mode

  • Show/Hide Passwords on Record View

  • Change your Email Address

  • Reset your Security Question

  • Reset your Master Password

  • Adjust File Image Quality

Two-Factor Authentication Overview

Two-Factor Authentication (2FA) provides an extra layer of security when logging in by requiring a second code verification after the username & password are entered. Using 2FA is advised for highly valuable or sensitive accounts.

Keeper provides two ways to take advantage of 2FA:

  1. To login to the Keeper vault with your Master Password.

  2. To login to any website from the Keeper vault by embedding a Two-Factor code into a record.

Set Up Two-Factor Codes for Logging into your Keeper Vault:

Under Settings > Two-Factor Authentication, you can choose one of the following 2FA method:

  • Text Message (via SMS on a mobile phone)

  • Authenticator Apps (e.g. Google, Microsoft, or Authy) which use Time-based One Time Passwords (TOTP).

  • DUO Security (Business or Enterprise licensees only)

  • RSA SecurID (Business or Enterprise licensees only)

  • Apple Watch (KeeperDNA). This will send the two-factor code directly to your watch.

SMS Text Message

  1. Within the Two-Factor Authentication Settings, tap on Method and then select Text Message in the Notification Method menu.

  2. Select a Region and then enter your full phone number (for US residents include area code).

  3. Tap Save.

  4. Select how long you want the Two-Factor code to be valid. By default, the code will be saved on the device forever. Your answer will determine how often you are asked for a new code when logging into Keeper.

5. You will then be notified that your code has been sent. When prompted to enter your code, enter the Keeper code that was sent to the phone number you provided via SMS text message. This verifies that you trust this number and device. Codes only last for a minute so if you need another code sent, tap on Send a new code.

6. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter one of the backup codes instead. To finish, tap on Back.

If you are a Keeper Business customer, Two-Factor Authentication methods and settings may be enforced by your Keeper administrator.

If you are not receiving SMS messages from Keeper, please use the TOTP method or contact support@keepersecurity.com to troubleshoot the issue.

TOTP Authenticator Applications

1. Within the Two-Factor Authentication Settings, select Google and Microsoft Authenticator (TOTP) for Notification Method,then tap Save.

2. Select how long you want the Two-Factor code to be valid. By default, the code will be saved on the device forever. Your answer will determine how often you are asked for a new code when logging into Keeper.

3. Depending on your installed TOTP application, the app may automatically open and store the code. If that does not happen, then scan the QR code with another device or copy the text code below into your TOTP application.

4. Once your TOTP app has a Keeper token, type the numbers into Keeper's Two-Factor Authentication code window then tap OK.

5. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter one of the backup codes instead. To finish, tap on Back.

If you are a Keeper Business customer, Two-Factor Authentication methods and settings may be enforced by your Keeper administrator.

Apple Watch (KeeperDNA)

Apple Watch devices can be used for Two-Factor Authentication. Make sure your device is paired with your phone and that the Apple Watch device has downloaded the corresponding Keeper app.

Once you've met the conditions above, you can visit Settings > Two-Factor Authentication to use your Apple Watch to verify your identity.

1. Tap on Method and then Smartwatch (KeeperDNA). Tap Save.

2. Select how long you want the Two-Factor code to be valid. By default, the code will be saved on the device forever.

3. You will then be asked to tap on the Keeper icon on your Apple Watch.

If you don't get a notification, you may not have notifications enabled for Keeper. To turn on notifications for Keeper, on your phone navigate to Settings > Notifications > Keeper and toggle "on" allow notifications.

On your watch, tap Verify.

4. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via your Apple Watch, you can enter one of the backup codes instead. To finish, tap on Back.

The Keeper DNA app on your Apple Watch can also generate Two-Factor Authentication codes and can be used for logging in.

If you are a Keeper Business customer, the use of Apple Watch and other Two-Factor Authentication settings may be enforced by your Keeper administrator.

Set Up Two-Factor Codes for Logging into Websites:

  1. On another device, visit the two-factor authentication screen which is usually located within security settings. It is sometimes referred to as "login verification" or "two-step verification".

  2. On your phone, from a Keeper record, select Edit and then Add two-Factor Code.

  3. Scan the Two-Factor QR pattern associated with the website.

  4. After scanning the QR pattern, a Two-Factor Code field will be generated inside the record.

  5. The Two-Factor code will be regenerated frequently and can then be filled into the website when prompted after logging in with a username and password. Tap the share symbol to auto fill your 2FA code.

  • Keeper two-factor codes are more secure than using SMS text messages.

  • Two-factor codes stored in Keeper are protected with strong Zero-Knowledge encryption.

  • They can be auto-filled quickly while logging in to a site, saving time and reducing friction.

  • Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.

  • Keeper records are shareable, so if you have multiple needing to logging with the same credentials, they won’t need to hunt down the person who has the only device with the code.

Touch ID & Face ID

Both Touch ID and Face ID need to be set up in your phone's settings before they can be used to login into Keeper. Once that is complete, in the Keeper app under Settings, toggle the Biometric Login "on".

Biometric Login such as Touch ID and Face ID on iOS are a time saving & convenience feature and are not a replacement for Two-Factor Authentication.

Once turned on, you can now login to Keeper with your fingerprint using Touch ID or your face using Face ID. Tap on the Touch ID or Face ID symbol in the Master Password field to start the bio-metric login.

Face ID Users: Upon your first login, Keeper will ask you if you want to use Face ID to login. If you reject that feature, you can re-enable this under the phone's Settings > Keeper > Allow Keeper to Access > Face ID.

Keeper Settings

Security Keys

Keeper enables two-factor authentication (2FA) with YubiKey 5Ci. The Lightning connector enables secure login across most iPhone and iPad models.

  1. Before you add a Security Key, a Two-Factor Authentication method must be in place as a backup.

  2. Under Settings > Two-Factor Authentication, select a method: Text Message, TOTP, DUO Security, RSA Security. (DUO & RSA are Business or Enterprise licensees only)

Note: The security key will follow the same interval use as the backup two-factor method. If you want the security key to be inserted every time you log in, choose “Require code every login” when the Two-Factor Code Duration screen comes up. “Require code every 30 days” will require you to insert the security key every 30 days. “Save code on this device forever” will register the security key upon turning on but will only be needed on other iOS devices the first time you login to Keeper.

3. Choose Security Keys > Add New. Register your security key by giving it a name.

4. Insert your YubiKey into your device.

5. Touch the sensor on your YubiKey

6. Your security key has been registered, tap OK to continue.

Note: A user can register up to 5 security keys. Any one of those keys will unlock the account.

To delete a security key, swipe left on the registered key in the Security Key page and a delete button will appear.

2FA Prompting Behavior and Offline Access

When 2FA is activated on an account, it protects the user on all devices and all platforms because 2FA is protecting access to the backend cloud system.

By definition, two-factor authentication protects access to the cloud and access to online accounts. Therefore, it requires an online connection to be prompted for 2FA. 2FA is triggered when a request is made from the client device to the server. (Logging into a new device, syncing new information on an existing device or performing any other cloud-based features).

By default, the native Keeper app for iOS, Android, Mac and Windows allow users to login quickly with their Master Password (offline mode) to access their vault. After entering their Master Password or using biometric login, the user decrypts the data locally, then the app sends a sync request to the server at which time the user may be prompted for their 2FA code. Depending on the speed of the Internet connection, the 2FA prompt may be received a couple seconds after logging into the native application because the local decryption of data occurs much faster.

Offline authentication and vault access is permitted by all consumer customers. Enterprise customers may restrict the use of offline access for their employees.

2FA Token Retention and Timing

When activating 2FA on your iOS device for the first time, the user selects how often they want to be prompted. Users can be prompted for 2FA every login, once every 30 days or only one time per device. It's important to understand that 2FA is always enabled on the Keeper servers. After a successful login on a device, a "token" is generated from the 2FA code and stored locally on the device as long as it's deemed valid by the server. This is why you are still able to login to the same device over and over without being re-prompted. By default, consumer customers will be prompted only one time per device. Enterprise customers may enforce users to be prompted every time for a new code.

Currently, the 2FA token retention timing on iOS will default to "only one time" on a device if the 2FA was initially set up on the Web Vault or Desktop App. To change this behavior, turn 2FA off and then re-activate 2FA on the iOS device.

Watch Favorites & Record Favorites

There are two types of Favorites, Watch Favorites and Record Favorites. Both types can be highlighted and displayed on your Apple Watch.

Watch Favorites

Watch favorites are easily accessible records that are displayed on your Apple Watch. To add a record to your watch favorites, follow the steps below:

  1. Within the Keeper app, navigate to the record you want displayed on your watch. Tap on ... More and then tap on Add to Watch Favorites.

  2. Tap on the record under Watch Favorites on your watch to view the details of that record.

  3. Tapping Back will allow you to view all of your Watch Favorites.

Record Favorites

A Record Favorite is an easy way to quickly access a record within the Keeper app or Apple Watch. Record Favorites can be found in the Favorites section of the filter menu. To add a record to your Favorites, follow the steps below:

  1. Within the Keeper app, navigate to the record you want displayed in your Favorites.

  2. Tap on ... More and then tap on Add to Favorites.

  3. To view all of your Favorites, tap on the upper left filter menu and select Favorites.

Account Switching and Vault Selection

Keeper supports the use of multiple vaults on the same device allowing you to switch between a personal account and business account, for example.

To add another account to your device, visit the Account tab within your vault then tap on the email address displayed toward the top of your screen. Select Add Account to register another account.

You also have the ability to add another account to your device at the login screen. While logged out, tap the ">" symbol then tap Add. Next, you will be prompted to enter the email address and Master Password of the account you would like to add.

You can switch between accounts on your device by tapping the ">" symbol at the login screen and selecting the email address of the account you would like to login to. Alternatively, if you are already logged into an account you can switch to another account by visiting the Account tab and tapping on the email address displayed toward the top of your screen. Choose from the displayed email addresses and then either enter your Master Password or tap the Face ID / Touch ID button to login.

The Multi-account Switching feature is only available as part of the paid consumer and Business plans.

Import & Export

To import and export data from your Keeper vault, visit the Keeper Web Vault or download Keeper Desktop for your computer.

Keeper Web Vault: https://keepersecurity.com/vault

All Downloads: https://keepersecurity.com/download

Uninstall - Reset

To Uninstall Keeper

1. Long press on the Keeper App icon. In iOS 13, a shortcut menu will appear (older operating systems app icons may just start to shake).

2. Continue holding your finger on the Keeper App if you have iOS 13 until all the apps start to shake, about 3 seconds.

3. Tap on the X that will appear in the upper left corner of the Keeper App icon.

4. To confirm the deletion, tap Delete when prompted. This will also delete the data from Keeper.

5. Tap on Done or home button to finish.

To Reset Keeper

To delete Keeper data without deleting the app, the user can reset Keeper under the device Settings > Keeper > Reset Keeper.

Note: Only local Keeper data on the device will be deleted. Data stored in Keeper’s Cloud Security Vault is NOT erased.

Helpful Links

Customer Support Form: https://keepersecurity.com/support.html

Email Support: support@keepersecurity.com

Business Customers: business.support@keepersecurity.com

System Status: https://statuspage.keeper.io