iOS - iPhone, iPad

Quick-start guide for Keeper on Apple iOS (iPhone, iPad) devices

Keeper Master Password

To create a Keeper account, you need to provide your email address and select a Master Password. The Master Password is the only password you need to remember. We recommend choosing a strong Master Password that is only used for Keeper.

Do not forget your Master Password. If you are using Keeper on more than one device, you will need to login to the device with your email address and Master Password.

Enterprise customers who log in with SSO do not require selection of a Master Password.

Enterprise SSO Login

If you are an Enterprise customer using SSO Login, tap on Enterprise SSO Login and then enter your Enterprise Domain provided by your Keeper administrator.

New User Experience

When you first login to your vault, Keeper will walk you though the process of creating your first password record and highlight several features of the app. Keeper will then give you the opportunity to import passwords from your computer and web browsers. If you're not near a computer, you can perform the import at a later time.

After tapping on I'm at my computer, Keeper will ask you to navigate to keepersecurity.com/setup on your computer. Follow the instructions on your computer to continue the import process. Click here for instructions on Web Vault Import.

Creating Records, Folders & Subfolders.

To create a new record, tap the "+" Create Button. Keeper also has an import feature to quickly add passwords to your vault from our Web Vault and Desktop App.

Create Button

Creating folders and subfolders will help you organize your passwords into different categories. To create a folder, tap the "+" Create Button and select Create New Folder. To create a subfolder, navigate to the parent folder, then tap the "+" Create Button and select Create New Folder.

Moving & Shortcuts

Multiple or individual records and folders can be moved and shortcut. Shortcuts are like alias files that can exist in two or more places, and when edited, change together. To select a record or folder or multiples thereof, tap on the pencil icon near the top right corner of your screen. Select the folder(s) or record(s) you would like to move or shortcut and then select the action you would like to perform by tapping the icons located at the bottom of your screen.

By clicking these icons you can perform the following actions:

  • Create a Shortcut

  • Move to a New Folder

  • Move to Existing Folder

  • Move to Trash (Deleted Records)

You can also move or shortcut a single record in the edit record screen.

Filter & Search Features

Keeper's dynamic search feature displays relevant records as you type. Searching works across all fields within your Keeper records, simply tap the magnifying glass to begin your search.

You also quickly filter records by Favorites, Shared, Files, and Two-Factor Codes, Identity & Payments, Watch Favorites and Deleted Records. From your vault, tap the left menu icon to view your filter options.

Filter and Search Buttons
Filter and Search Features

Password Generator

Keeper's Password Generator enables you to instantly create maximum-strength, random passwords that can be placed into any field of your Keeper record. To use Keeper's Password Generator, tap the Dice.

Scan a Document (iOS 13+)

Keeper's Scan a Document feature makes it easy to add notes through the iOS 13+ VisionKit optical character recognition (OCR) capabilities. This allows the iOS 13+ device to scan a document, identification card or handwritten notes and easily transcribe them into the notes field of any record. While viewing a record, tap Edit > Scan a Document. Once the image has been scanned, tap Save in the camera function, review and modify the text if needed, then Save the record to finish.

Auto-Launch

Keeper's Auto-Launch feature makes it easy to login to websites without having to leave the app. While viewing a record simply tap the Login URL field. Keeper will then ask what browser you would like to open the website with. Select a browser and decide Just Once or Make Default.

Choosing Keeper's built-in browser, will provide you with KeeperFill login buttons at the top of the device when login fields are present. When logging in, simply tap on the login and password buttons to insert the credentials into the form fields. If you would like to use the native web browsers (Safari, Firefox, Chrome) to launch the site, you can use the KeeperFill Browser Extension to automatically fill login forms (described in the next section).

KeeperFill Built-in Browser

AutoFill with KeeperFill (iOS 12+)

As of iOS version 12, Keeper is fully integrated into the login experience of every website and app through the Passwords button that appears above your device's keyboard.

Before you can utilize this feature, you need to first perform a few setup steps:

  1. Open your device's Settings App.

  2. Tap on Passwords & Accounts.

  3. Tap on AutoFill Passwords.

  4. Ensure AutoFill Passwords is toggled ON then select Keeper.

Once these steps are completed, you will see the Passwords button appear above the keyboard when logging into an app or website. Tapping the Passwords button will open KeeperFill.

Password AutoFill Integration on iOS
Variation of Password AutoFill Integration on iOS

The KeeperFill screen provides the ability to search for matching records in your vault or create a new record.

If your Keeper record contains a two-factor code, enter it using the following steps:

  1. Tap the copy icon next to the two-factor code.

  2. Tap Fill to send your login credentials to the website or application.

  3. Once prompted, long press on the two-factor code field to paste it.

You may need to search for your record when filling credentials for some applications. Keeper will attempt to match records when possible.

KeeperFill (iOS 11 and Older)

Prior to the launch of iOS 12, KeeperFill can only be accessed as part of the Share action.

KeeperFill on iOS 11 and Older

Before you can use KeeperFill on iOS11 and older devices, you need to perform a few setup steps:

  1. Visit the webpage that you would like to apply KeeperFill.

  2. Select the Share icon near the bottom of your browser.

  3. Tap More > KeeperFill > KeeperFill

  4. Keeper will locate the record associated with the website's URL, tap the Fill button to automatically fill your credentials.

Secure File Storage

Available as a Secure Add-on, Secure File Storage protects your confidential files, photos, and videos. Securely upload and store files such as passport photos, medical cards, drivers licenses, tax and loan documents, videos and any other private file to your Keeper vault.

From within your vault, you can either create a new record or add a file or photo to an existing record. Within the edit record screen, tap Add Files or Photos to upload your file. Once the upload is complete, tap Save. Simply tap once on the file or photo within the record quickly view or download it.

Users also have the ability to securely share files with other Keeper users via record sharing, making Secure File Storage the best way to save and transfer the most sensitive of information. Within the record tap Share and then enter the email address(es) of the other Keeper users you would like to share the record with. To learn more about record sharing click here.

Secure File Storage is available as a Secure Add-on.

Sharing Records & Folders

You can securely share records and folders with other Keeper users. To share a single record with another user, open the Keeper record and tap Share > Share with User. Enter the user's email, then use the toggle buttons to select permissions (Can Edit, Can Share or Make Owner).

You can also create a Shared Folder. Shared Folders allow you to share any number of records across your personal folders with one or more Keeper users.

To Create a Shared Folder:

  1. Tap the "+" Create Button > More > Create Shared Folder.

  2. Give the shared folder a name, then tap Save.

  3. The new folder will now appear in your records list. To share with other users, tap on the folder name then tap the three dots in the upper right corner of your screen.

  4. Tap Manage Users & Records and enter the email addresses of the users you would like to share this folder with.

  5. You can assign permission levels for each user you add by tapping on their email address under the Users tab.

  6. To add records to the folder, switch to the Records tab.

  7. Select the individual records you would like to add to the shared folder. Each record can also be given share and edit permission. Tap Save to finish.

Manage Users & Records in a Shared Folder

Record History

Keeper provides the ability to save and restore previous versions of your records at any time. To access a record's history, while a viewing the record, tap More > Record History.

To restore a record back to a previous state, tap on the version you want to restore. Review the record information and then tap Restore and then Yes to confirm.

The Record History feature is only available as part of the paid consumer and Business plans.

Deleted Records

Deleted records can be reviewed and restored by visiting the Deleted section of the left navigation menu.

Recently Deleted Records

To restore a deleted record, tap on the record to review it, then tap Restore in the upper right corner of your screen and Yes to confirm.

If you want to permanently delete all of your recently deleted records, tap Empty Trash and Yes to confirm.

Note that records cannot be deleted individually from Recently Deleted.

The Empty Trash feature is available as part of the paid consumer and Business plans.

BreachWatch

BreachWatch is a powerful secure add-on feature that monitors the internet and dark web for breached accounts matching records stored within your Keeper vault. BreachWatch alerts you so that you can take immediate action to protect yourself against hackers. Once activated, BreachWatch continuously monitors for compromised credentials and notifies you if any of your records are at risk.

To start your BreachWatch scan, tap the BreachWatch button near the bottom of your screen. Tap Let's Begin > Scan.

BreachWatch will then scan your records and report any risks associated with them. Tap Scan Results to view your high-risk record(s). Tap each record then tap Resolve to view the steps needed to resolve the risk. If you tap Ignore, then that record will be skipped on future scans until the password is reset. You may also do nothing (deferring a response) and leave the risky password unchanged and thus still at risk.

Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in your Keeper Vault with the same password.

BreachWatch is available as a Secure Add-on.

Security Audit

The Security Audit feature allows you to audit the overall password strength of the records in your vault. Security Audit can be found in the left navigation menu. Your overall password security score and number of required password updates will appear toward the top of your screen. To resolve these security risks, change the password at the affected site immediately and update the corresponding record in your vault.

Only the records displaying a red or orange colored bar to the left of the record name pose a significant security risk and will require a password update.

Identity & Payments

Identity & Payments, found in the left navigation menu, is the place for you to store your personal address information and your credit card numbers safely. KeeperFill will automatically fill credit card information into the correct fields when you are at any checkout screen during a purchase.

Personal Info is where you can securely store multiple addresses phone numbers. Payment Cards is where you can securely store credit card numbers, expiration dates, card verification values (CVV) and billing addresses.

To have KeeperFill insert credit card information stored in your vault, launch the website by tapping the Login URL within the record. Navigate to the credit card payment page and tap on the credit card field. Tap on the Payment Card button at the top of your screen to view your saved credit cards. Tap on the payment card saved in your record then tap on the Fill Button to add your credit card information to the website's payment fields.

KeeperFill for Payment Cards

Watch & Record Favorites

There are two types of Favorites: Watch Favorites and Record Favorites. Both types can be highlighted and displayed on your Apple Watch.

Watch Favorites

Watch favorites are easily accessible records that are displayed on your Apple Watch. To add a record to your watch favorites, follow the steps below:

  1. Within the Keeper app, navigate to the record you want displayed on your watch. Tap ... More and then tap Add to Watch Favorites.

  2. On your watch, tap the record under Watch Favorites to view the details of that record.

  3. Tapping Back will allow you to view all of your Watch Favorites.

Record Favorites

A Record Favorite is an easy way to quickly access a record within the Keeper app or Apple Watch. Record Favorites can be found in the Favorites section of the left filter menu. To add a record to your Favorites, follow the steps below:

  1. Within the Keeper app, navigate to the record you want displayed in your Favorites.

  2. Tap ... More and then tap Add to Favorites.

  3. To view all of your Favorites, tap on the upper left filter menu and select Favorites.

Settings

The Settings screen allows you to customize the personalization and security features of the application. Note that some security settings may be enforced by your Keeper administrator if you are part of a Keeper Business account.

  • Change Appearance Mode and Theme

  • Two-Factor Authentication

  • Biometric Login

  • Clipboard Expiration

  • Auto-Logout Duration

  • KeeperFill Setup

  • Enable Self-Destruct

  • Fast Login Mode

  • Show/Hide Passwords on Record View

  • Change your Email Address

  • Reset your Security Question

  • Reset your Master Password

  • Adjust File Image Quality

Light/Dark Mode Configuration

Users have the option to choose between two appearance modes which are available in Keeper's application Settings menu. The app can adapt to the Light or Dark appearance mode that is selected on your device by choosing Use Device Settings. Alternatively, users have the option to keep the familiar style and theme of the app by choosing Classic mode.

Use Device Settings - reverts to the mode that is currently configured in your device's "Display and Brightness Settings" (Light or Dark) and will automatically apply that theme to the Keeper application. If you retain this setting within the app, any future setting change made on your device will also apply to the Keeper app.

Use Device Settings Mode (Light & Dark)

Classic - retains the existing Keeper user experience, regardless of what setting is configured in your device's "Display and Brightness Settings" (Light or Dark).

Classic Mode

Configuration Instructions:

You can easily make your preferred selection using the steps below:

  1. Tap the Settings icon from the lower menu bar.

  2. Under Appearance, select the mode you prefer: either Classic or Use Device Settings.

To change your device's display mode, navigate to Settings>Display and Brightness then select "Light" or "Dark" (iOS 13 and above).

Two-Factor Authentication

Two-Factor Authentication (2FA) provides an extra layer of security when logging in by requiring a second code verification after the username & password are entered. Using 2FA is advised for highly valuable or sensitive accounts. Keeper provides two ways to take advantage of 2FA:

  1. To log into the Keeper vault with your Master Password.

  2. To log into any website from the Keeper vault by embedding a two-factor code into a record.

Set-up Two-Factor Codes to Log into Your Vault:

Under Settings > Two-Factor Authentication, you can choose one of the following 2FA method:

  • Text Message (via SMS on a mobile phone)

  • Authenticator Apps (e.g. Google, Microsoft, or Authy) which use Time-based One Time Passwords (TOTP).

  • DUO Security (Business or Enterprise licensees only)

  • RSA SecurID (Business or Enterprise licensees only)

  • Apple Watch (KeeperDNA) which will send the two-factor code directly to your watch.

SMS text message method:

  1. Within the Two-Factor Authentication Settings, tap on Method and then select Text Message from the Notification Method menu.

  2. Select a region and then enter your full phone number (for US residents include area code).

  3. Tap Save.

  4. Select how long you want the Two-Factor code to be valid. By default, the code will be saved on the device forever. Your answer will determine how often you are asked for a new code when logging into Keeper.

5. You will then be notified that your code has been sent. When prompted to enter your code, enter the Keeper code that was sent to the phone number you provided via SMS text message. This verifies that you trust this number and device. Codes only last for a minute so if you need another code sent, tap on Send a new code.

6. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter one of the backup codes instead. To finish, tap on Back.

If you are a Keeper Business customer, Two-Factor Authentication methods and settings may be enforced by your Keeper administrator.

If you are not receiving SMS messages from Keeper, please use the TOTP method or contact support@keepersecurity.com to troubleshoot the issue.

TOTP authenticator applications method:

  1. Within the Two-Factor Authentication Settings, tap on Method and then select Google and Microsoft Authenticator (TOTP) from the Notification Method menu.

  2. Select how long you want the Two-Factor code to be valid. By default, the code will be saved on the device forever. Your answer will determine how often you are asked for a new code when logging into Keeper.

3. Depending on your installed TOTP application, the app may automatically open and store the code. If hat does not happen, then scan the QR code with another device or copy the text code into your TOTP application.

4. Once your TOTP app has a Keeper token, type the numbers into Keeper's Two-Factor Authentication code window then tap OK.

5. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter one of the backup codes instead. To finish, tap Back.

Set-up Two-Factor Codes to Login to Websites:

  1. On your phone, within the Keeper record, tap Edit > Add two-Factor Code.

  2. On a secondary device (tablet, computer), navigate to the record's website's 2FA set-up screen which is usually located in the security settings. It is sometimes referred to as "login verification" or "two-step verification". A QR code should be provided.

  3. Scan the Two-Factor QR code with our phone.

  4. After scanning the QR code, the Two-Factor Code field will be generated inside the Keeper record.

  5. The Two-Factor code will be regenerated frequently in this field and can then be filled into the website when prompted after your login credentials have filled.

Two-Factor Authentication Set-up Example

Apple Watch (KeeperDNA)

Apple Watch devices can be used for Two-Factor Authentication. Make sure your device is paired with your phone and that the Apple Watch device has downloaded the corresponding KeeperDNA app.

  1. Once you've met the conditions above, in Keeper, navigate to Settings > Two-Factor Authentication.

  2. Tap on Method and then Smartwatch (KeeperDNA), then tap Save.

  3. Select how long you want the Two-Factor code to be valid (by default, the code will be saved on the device forever).

  4. You will then be asked to tap on the Keeper icon on your Apple Watch.

  5. On your watch, tap Verify.

  6. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via your Apple Watch, you can enter one of the backup codes instead. To finish, tap Back.

If you don't get a notification, you may not have notifications enabled for Keeper. To turn on notifications, on your phone navigate to Settings > Notifications > Keeper and toggle allow notifications "ON".

The Keeper DNA app on your Apple Watch can also generate Two-Factor Authentication codes that can be used for logging in.

Touch ID & Face ID

Both Touch ID and Face ID need to be set up in your phone's settings before they can be used to login into Keeper. Once that is complete, in the Keeper app under Settings, toggle the Biometric Login "ON". Once turned on, you can now log in to Keeper with your fingerprint using Touch ID or your face using Face ID. Tap on the Touch ID or Face ID symbol in the Master Password field to start the bio-metric login.

Biometric Login such as Touch ID and Face ID on iOS are a time saving & convenience feature and are not a replacement for Two-Factor Authentication.

Touch ID & Face ID Implemented in Keeper

Face ID Users: Upon your first login, Keeper will ask you if you want to use Face ID to login. If you reject this feature, you can re-enable it under your phone's Settings > Keeper > Allow Keeper to Access > Face ID.

Security Keys

Keeper enables two-factor authentication (2FA) with YubiKey 5Ci. The lightning connector enables secure log in across most iPhone and iPad models.

  1. Before you add a security key, a Two-Factor Authentication method must be in place as a backup.

  2. Under Settings > Two-Factor Authentication, select a method: Text Message, TOTP, DUO Security, RSA Security. (DUO & RSA are Business or Enterprise licensees only)

The security key will follow the same interval use as the backup two-factor method.

3. Choose Security Keys > Add New. Register your security key by giving it a name.

4. Insert your YubiKey into your device.

5. Touch the sensor on your YubiKey

6. Your security key has been registered, tap OK to continue.

A user can register up to 5 security keys. Any one of those keys will unlock the account.

To delete a security key, swipe left on the registered key in the Security Key page and a delete button will appear.

2FA Prompting Behavior & Offline Access

When 2FA is activated on an account, it protects the user on all devices and all platforms because 2FA is protecting access to the backend cloud system.

By definition, two-factor authentication protects access to the cloud and access to online accounts. Therefore, it requires an online connection to be prompted for 2FA. 2FA is triggered when a request is made from the client device to the server. (Logging into a new device, syncing new information on an existing device or performing any other cloud-based features).

By default, the native Keeper app for iOS, Android, Mac and Windows allow users to login quickly with their Master Password (offline mode) to access their vault. After entering their Master Password or using biometric login, the user decrypts the data locally, then the app sends a sync request to the server at which time the user may be prompted for their 2FA code. Depending on the speed of the Internet connection, the 2FA prompt may be received a couple seconds after logging into the native application because the local decryption of data occurs much faster.

Offline authentication and vault access is permitted by all consumer customers. Enterprise customers may restrict the use of offline access for their employees.

2FA Token Retention & Timing

When activating 2FA on your iOS device for the first time, the user selects how often they want to be prompted. Users can be prompted for 2FA every login, once every 30 days or only one time per device. It's important to understand that 2FA is always enabled on the Keeper servers. After a successful login on a device, a "token" is generated from the 2FA code and stored locally on the device as long as it's deemed valid by the server. This is why you are still able to login to the same device over and over without being re-prompted. By default, consumer customers will be prompted only one time per device. Enterprise customers may enforce users to be prompted every time for a new code.

Currently, the 2FA token retention timing on iOS will default to "only one time" on a device if the 2FA was initially set up on the Web Vault or Desktop App. To change this behavior, turn 2FA off and then re-activate 2FA on the iOS device.

Account Switching & Vault Selection

Keeper supports the use of multiple vaults on the same device allowing you to switch between a personal account and business account, for example.

Add Account:

To add another account to your device, within your vault, visit the Account tab then tap on the email address displayed toward the top of your screen. Select Add Account to register another account.

You also have the ability to add another account to your device at the login screen. While logged out, tap the ">" symbol then tap Add. Next, you will be prompted to enter the email address and Master Password of the account you would like to add.

Switch Account:

You can switch between accounts on your device by tapping the ">" symbol at the login screen and selecting the email address of the account you would like to log in to. Alternatively, if you are already logged into an account you can switch to another account by visiting the Account tab and tapping on the email address displayed toward the top of your screen. Choose from the displayed email addresses and then either enter your Master Password or tap the Face ID / Touch ID button to login.

The multi-account switching feature is only available as part of the paid consumer and Business plans.

Import & Export

To import and export data from your Keeper vault, visit the Keeper Web Vault or download Keeper Desktop for your computer.

Keeper Web Vault: https://keepersecurity.com/vault

All Downloads: https://keepersecurity.com/download

Uninstall & Reset

Uninstall

Uninstall Keeper on iOS
  1. On your device, long press on the Keeper App icon. On iOS 13, a shortcut menu will appear (older operating systems app icons may just start to shake).

  2. In the shortcut menu, tap Delete App. Confirm by tapping Delete again. For older iOS systems, hold your finger on the Keeper App until all the apps start to shake. Tap on the X that will appear in the upper left corner of the Keeper App icon. To confirm, tap Delete when prompted.

  3. Tap Done or press the home button to finish.

Uninstall will delete the data from Keeper on the local device. Data stored in Keeper's Cloud Security Vault is NOT erased.

Reset

To delete Keeper data without deleting the app, the user can reset Keeper under the device Settings > Keeper > Reset Keeper.

Only local Keeper data on the device will be deleted. Data stored in Keeper’s Cloud Security Vault is NOT erased.

Helpful Links

Customer Support Form: https://keepersecurity.com/support.html

Email Support: support@keepersecurity.com

Business Customers: business.support@keepersecurity.com

System Status: https://statuspage.keeper.io