iOS - iPhone, iPad

End-user guide for Keeper on Apple iOS (iPhone, iPad) devices

Keeper Master Password

To create a Keeper account, you need to provide your email address and select a Master Password. The Master Password is the only password you need to remember. We recommend choosing a strong Master Password that is only used for Keeper.

Do not forget your Master Password. If you are using Keeper on more than one device, you will need to login to the device with your email address and Master Password.

Enterprise customers who login with SSO do not require selection of a Master Password.

Enterprise SSO Login

If you are an Enterprise customer using SSO Login, tap on "Enterprise SSO Login" and then type your Enterprise Domain provided by your Keeper administrator.

Creating Records

To create a new record, tap on the "+" Create Button. Keeper also has an import feature to quickly add passwords to your vault from our Web Vault and Desktop App.

New User Experience

When you first login to your vault, Keeper will walk you though the process of creating your first password record and highlight several features of the app. Keeper will then give you the opportunity to import passwords from your computer and web browsers. If you're not near a computer, you can perform the import at a later time.

After tapping on "I'm at my computer", Keeper will ask you to navigate to keepersecurity.com/setup on your computer. Follow the instructions on your computer to continue the import process. Click here for instructions on Web Vault Import.

Creating Folders & SubFolders

To create a folder, tap on "+" Create Button and select Create New Folder. To create a SubFolder, navigate to the parent folder, then tap on "+" Create Button and select Create New Folder.

Moving & Shortcuts

Multiple Records and folders can be moved, or have shortcuts created. Shortcuts are like alias files that can exist in two or more places, that when edited, change together. To select a folder or record or multiples there of, tap on the pencil icon on the top right or press-and-hold one of the records. Select the folders or records and then use the bottom bar for performing actions.

  • Shortcut will ask to create shortcut to existing folders or create a new one. Navigate to another folder, tap Create Folder, or Create Shortcut to complete the task.

  • Move to new folder will ask for a new folder name. Enter a new folder name and tap Save.

  • Move to existing folder will display folders to move to, tap one to make your selection, then tap Move to complete the task.

  • Trash will move the folder or record to the Trash in Deleted Records.

A single move of a record can also be done in the Record view screen. Tap on Move To... to start the process.

Dynamic Search

Keeper's Dynamic Search feature dynamically displays relevant records as you type. Searching works across all of the fields within your Keeper records.

Filter Records

Filter records by Favorites, Shared, Files, and Two-Factor Codes. Watch Favorites and Deleted Records can be found near the bottom of the menu. Tap the filter button from the Data Vault screen to show filter options.

Password Generator

Keeper's Password Generator enables you to instantly create maximum-strength, random passwords that can be placed into any field of your Keeper record. To use Keeper's Password Generator, tap on the Dice.

Scan a Document (iOS13+)

Keeper's Scan a Document feature makes it easy to add Notes through the iOS 13+ VisionKit optical character recognition (OCR) capabilities. These allow the iOS 13+ device to scan a document, identification card or handwritten notes and easily transcribe them into the Notes field in any record. Tap on Edit in a previously made record, then tap on Scan A Document. Once the image has been scaned, tap Save in the camera function, review and modify the text, and hit Save again inside the record.

Auto-Launch

Keeper's Auto-Launch feature makes it easy to login to websites without having to leave the app.

Keeper will ask what browser to open the link with.

Select a browser and then make the following choice: Just Once or Make Default. Choosing Keeper's browser will provide you with KeeperFill login buttons at the top of the device when login fields are present, see below. When logging in, simply tap on the login or password buttons to insert the credentials.

KeeperFill using Keeper's Browser

If you would like to use the native web browsers (Safari, Firefox, Chrome) to launch the site, you can use the KeeperFill extension feature to automatically fill login forms (described in the next section).

AutoFill with KeeperFill (iOS12+)

As of iOS version 12, Keeper is fully integrated into the login experience of every website and app through the "Passwords" button that appears above the keyboard. Before you can use this capability, you need to perform a few setup steps:

  1. Open your device Settings App.

  2. Tap on Passwords & Accounts.

  3. Tap on AutoFill Passwords.

  4. Select Keeper

Once the above steps above have been completed, you will see the Passwords button above the keyboard when logging into an app or website. This button will open KeeperFill.

Password AutoFill Integration on iOS
Variation of Password AutoFill on iOS

The KeeperFill screen provides the ability to search for matching records in your vault or create a new record.

If your login and record has a Two-Factor Code, follow these steps to insert that code.

  1. Use the copy button next to Two-Factor Code to copy the number into the clipboard.

  2. Press Fill to send your login credentials to the website or application.

  3. Long press on the Two-Factor Code field and paste in the code.

KeeperFill offers several features:

  • Search your vault for matching or existing records

  • Create new strong passwords using the Dice feature

  • Switch between Keeper Vaults

Note: You may need to search for your record when filling in credentials for some applications. Keeper will attempt to match records when possible.

KeeperFill (iOS 11 and Older)

Prior to the launch of iOS 12, KeeperFill can only be accessed as part of the "Share" action.

KeeperFill on older iOS versions

Before you can use KeeperFill on iOS11 and older devices, you need to perform a few setup steps:

  1. Visit the webpage that you would like to apply KeeperFill.

  2. Select Share action icon near the bottom of your browser.

  3. Tap on More.

  4. Tap on KeeperFill to add it to your share items.

  5. Tap on KeeperFill again to start the login process.

  6. KeeperFill will find the record associated with the website's URL, tap on the Fill button.

  7. KeeperFill will automatically fill in your login credentials.

Secure File Storage

Securely upload files such as your passport photo, secret photos, drivers license, loan docs, videos or any private file to your Keeper vault. You can also securely share your private files and documents with other Keeper users - from vault to vault.

Note: Secure File Storage is available as a Secure Add On.

Two-Factor codes for logging into websites

  1. On another device, visit the two-factor authentication screen which is usually located within security settings. It is sometimes referred to as "login verification" or "two-step verification".

  2. On your phone, from a Keeper record, select Edit and then "Add two-Factor Code."

  3. Scan the Two-Factor QR pattern associated with the website.

  4. After scanning the QR pattern, a Two-Factor Code field will be generated inside the record.

  5. The Two-Factor code will be regenerated frequently and can then be filled into the website that will prompt for it after logging in with a username and password. Use the share symbol to KeeperFill in your 2FA code.

Storing Two-Factor codes in the vault has several advantages:

  • Keeper two-factor codes are more secure than using SMS text messages.

  • Two-factor codes stored in Keeper are protected with strong Zero-Knowledge encryption.

  • They can be auto-filled quickly while logging in to a site, saving time and reducing friction.

  • Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.

  • Keeper records are shareable, so if you have multiple needing to logging with the same credentials, they won’t need to hunt down the person who has the only device with the code.

Sharing Records & Folders

You can securely share individual records or entire folders with other Keeper users. To share a single record with another user, open the Keeper record and tap on the Share button, enter the emails, then choose Edit, Share or Owner permissions.

You can also create a Shared Folder. Shared Folders allow you to share any number of records across your personal folders with one or more Keeper users. To create a shared folder, tap on the "+" Create Button at the bottom of the screen, then select More. Tap on Create Shared Folder.

  1. Give the Shared Folder a name.

  2. Enter the emails and permission levels for users in the folder. You can assign user management and record management permission.

  3. Select which records to add to the shared folder. Each record can also be given share and edit permission.

  4. Tap the Save button.

Note: Permissions under Records tab, Can Edit means the record can be edited by users of this folder. Can Share means the record can be shared to others by users of this folder.

Permissions under Users tab, Manage Users means this user can add or remove other users from this folder. Manage Records means this user can add or remove records from this folder.

Record History

Keeper provides the ability to save and restore previous versions of your records at anytime.

To access a record's history, tap on the More button in the record. Then tap on Record History.

To restore a record back to a previous state, tap on the version you want to restore. Review the record information and then tap Restore. Confirm that you want to replace the current record with previous version by tapping Yes at the prompt.

Note: Record History is only available to paid users

Deleted Records

Deleted records can be reviewed and restored by visiting the Deleted section in the filter menu.

To restore a deleted record, tap on the record to review it, then tap on Restore. Confirm the restore by tapping Yes.

If you want to delete all of records in Recently Deleted, tap on the Empty Trash button at the top of the records. Confirm the Delete Forever action by tapping Yes.

Note: Deleted Record is only available to paid users. Individual recently deleted records can not be permanently deleted one by one.

BreachWatch

BreachWatch monitors the dark web for breached accounts then alerts you so you can take action to protect yourself against hackers.

To start your BreachWatch scan, tap on the BreachWatch Tab. Tap on Let's Begin and then Scan.

BreachWatch will scan your records and report risks associated with them. Tapping on a risk under Scan Results will show the record and and then tapping on Resolve will show steps needed to resolve that risk.

Resolving the risk requires you to change the password at the affected website. Then update the record in Keeper with the same password.

Note: BreachWatch is available as a Secure Add On.

Security Audit

The Security Audit feature allows you to audit the overall password strength of the records in your vault. Side over the filter menu or tap the button on the upper left and then tap Security Audit. You can edit that record's password by tapping on the name of the record in the list.

Identity & Payments

Identity & Payments is the place for you to store your personal address information and your credit card numbers safely. KeeperFill will fill credit card information into the correct fields for you when you are at any checkout screen during a purchase.

The "Personal Info" screen allows you to securely store multiple phone numbers and addresses. Payment Cards stores credit card numbers, expiration dates and card verification values (CVV).

To have KeeperFill insert credit card information stored in Keeper, launch the website by tapping the Website Address in the record. Navigate to the credit card payment page and tap a field. Tap on the Payment Card button at the top to list your cards. Tap on the card saved in your record then tap on the fill button to add your information to the website.

Settings

The Settings screen allows you to customize the personalization and security features of the application. Note that some security settings may be enforced by your Keeper administrator if you are part of a business account.

  • Change Themes

  • Two-Factor Authentication

  • Biometric Login

  • Clipboard Expiration

  • Auto-Logout Duration

  • KeeperFill Setup

  • Enable Self-Destruct

  • Fast Login Mode

  • Show/Hide Passwords on Record View

  • Change your Email Address

  • Reset your Security Question

  • Reset your Master Password

  • Adjust File Image Quality

Two-Factor Authentication

Two-Factor Authentication (2FA) provides an extra layer of security for logging in by adding an extra passcode after the username & password are entered. Using 2FA is advised for highly valuable or sensitive accounts.

Keeper provides 2 ways to take advantage of 2FA:

  1. To log into the Keeper vault with your Master Password.

  2. To login into any website from the Keeper vault by embedding a Two-Factor code into a record.

  • Text Message (via SMS on a mobile phone)

  • Authenticator Apps (e.g. Google, Microsoft, or Authy) which use Time-based One Time Passwords (TOTP).

  • DUO Security (Business or Enterprise licensees only)

  • RSA SecurID (Business or Enterprise licensees only)

  • Apple Watch (KeeperDNA). This will send the Two Factor code directly to your watch.

To set up Two-Factor codes for logging into the Keeper Vault:

Under Settings > Two-Factor Authentication, you can choose a 2FA method. The methods are:

SMS Text Message

1.Tap on Method and then Text Message in the Notification Method screen.

2. Select a Country/Region and enter your full phone number (for US residents include area code).

3. Tap on SAVE

4. Select how long do you want the Two-Factor code to be valid. By default, the code will be saved on the device forever.

5. Keeper then will ask to Enter your code. Enter in the Keeper code that was sent to the phone number you added. This verifies that you trust this number and device. Codes only last for a minute so if you need another code sent, tap on Send a new code.

6. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter a backup code instead. To finish, tap on Back.

Depending on how you answered the question "How long you want the code to be valid" will determine how often you are asked for a new code when logging into Keeper.

If you are a Keeper business customer, Two-Factor Authentication methods and settings may be enforced by your Keeper administrator.

If you are not receiving SMS messages from Keeper, please use the TOTP method or contact support@keepersecurity.com to troubleshoot the issue.

TOTP Authenticator Applications

1.Tap on Google and Microsoft Authenticator (TOTP) in the Two-Factor Authentication Method Settings, then tap SAVE.

2. Select how long do you want the Two-Factor code to be valid. By default, the code will be saved on the device forever.

3. Depending on your installed TOTP application, the app may automatically open and store the code. If that does not happen then you should scan the QR code with another device or copy the text code below it to your TOTP application.

4. Once your TOTP app has a Keeper token, type the numbers into Keeper's Two-Factor Authentication code window. Tap OK.

5. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter in one of the backup codes instead. To finish, tap on Back.

Depending on how you answered the question "How long you want the code to be valid" will determine how often you are asked for a new code when logging into Keeper.

If you are a Keeper business customer, Two-Factor Authentication methods and settings may be enforced by your Keeper administrator.

Apple Watch (KeeperDNA)

Apple Watch devices can be used for Two-Factor Authentication. Make sure your device is paired with your phone and that the Apple Watch device has downloaded the corresponding Keeper app.

Once you've met the conditions above, you can visit Settings > Two-Factor Authentication to use your Apple Watch to verify your identity. Tap on Method and then Smartwatch (KeeperDNA). Tap Save and then how long you want this Two-Factor code to be valid. The device will tell you to then tap on your Keeper icon on your Apple Watch.

If you don't get a notification, you may not have notifications enabled for Keeper. To turn on notifications for Keeper, go to Settings on your phone > Notifications > Keeper and allow notifications.

On the watch, tap Verify.

Backup Codes will be shown next. If you are unable to receive Two-Factor codes via your Apple Watch, you can a backup code instead. To finish, tap on Back.

The Keeper DNA app on your Apple Watch can also generate Two-Factor Authentication codes and can be used for logging in.

Depending on how you answered the question "How long you want the code to be valid" will determine how often you are asked for a new code when logging into Keeper.

If you are a Keeper business customer, the use of Apple Watch and other Two-Factor Authentication settings may be enforced by your Keeper administrator.

Touch ID & Face ID

Both Touch ID and Face ID need to be set up in the phone's settings before they can be used to login into Keeper. Once that is done, under Settings, tap on Biometric Login and toggle the switch. Note that Biometric Login such as Touch ID and Face ID on iOS are a time saving & convenience feature and are not a replacement for Two-Factor Authentication.

Once turned on, you can now login into Keeper with your fingerprint with Touch ID or your face with Face ID. Tap on the Touch ID or Face ID symbol in the Master Password field to start the bio-metric login.

Face ID Users: Upon your first login, Keeper will ask you if you want to use Face ID to login. If you reject that feature, you can re-enable this under the phone's Settings > Keeper > Allow Keeper to Access > Face ID.

Keeper Settings

Security Keys

Keeper enables two-factor authentication (2FA) with YubiKey 5Ci. The Lightning connector enables secure login across most iPhone and iPad models.

  1. Before you add a Security Key, a Two-Factor Authentication method must be in place as a backup.

  2. Under Settings > Two-Factor Authentication, select a method: Text Message, TOTP, DUO Security, RSA Security. (DUO & RSA are Business or Enterprise licensees only)

NOTE: The security key will follow the same interval use as the backup two-factor method. If you want the security key to be inserted every time you log in, choose “Require code every login” when the Two-Factor Code Duration screen comes up. “Require code every 30 days” will require you to insert the security key every 30 days. “Save code on this device forever” will register the security key upon turning on but will only be needed on other iOS devices the first time you login to Keeper.

3. Choose Security Keys > Add New. Register your security key by giving it a name.

4. Insert your YubiKey into your device.

5. Touch the sensor on your YubiKey

6. Your security key has been registered, tap ok to continue.

A user can register up to 5 security keys. Any one of those keys will unlock the account.

NOTE: To delete a security key, swipe left on the registered key in the Security Key page. A delete button will show up.

2FA Prompting Behavior and Offline Access

When 2FA is activated on an account, it protects the user on all devices and all platforms because 2FA is protecting access to the backend cloud system.

By definition, two-factor authentication protects access to the cloud and it protects access to online accounts. It therefore requires an online connection to be prompted for 2FA. 2FA is triggered when a request is made from the client device to the server. For example when logging into a new device, syncing new information on an existing device or performing any other cloud-based features.

By default, the native Keeper app for iOS, Android, Mac and Windows allow users to login quickly with their master password (offline mode) to access their vault. After typing in the master password or using biometric login, the user decrypts the data locally, then the app sends a sync request to the server at which time the user may be prompted for their 2FA code. Depending on the speed of the Internet connection, the 2FA prompt may be received a couple seconds after logging into the native application because the local decryption of data occurs much faster.

Offline authentication and vault access is permitted by all consumer customers. Enterprise customers may restrict the use of offline access for their employees.

2FA Token Retention and Timing

When activating 2FA on your iOS device for the first time, the user selects how often they want to be prompted. Users can be prompted for 2FA every login, once every 30 days, or only one time per device. It's important to understand that 2FA is always enabled on the Keeper servers. After a successful login on a device, a "token" is generated from the 2FA code and stored locally on the device as long as it's deemed valid by the server. This is why you are still able to login to the same device over and over without being re-prompted. By default, consumer customers will be prompted only one time per device. Enterprise customers may enforce users to be prompted every time for a new code.

Currently, the 2FA token retention timing on iOS will default to "only one time" on a device if the 2FA was initially set up on the Web Vault or Desktop App. To change this behavior, please turn 2FA off and then re-activate 2FA on the iOS device.

Watch & Record Favorites

There are two types of favorites, Watch Favorites and Record Favorites. Both types can be highlighted and displayed on your Apple Watch.

Watch Favorites

Watch favorites are records that are displayed on the Apple Watch. To display a record on your watch follow the instructions below.

  1. In the Keeper app, navigate to the record you want displayed on your watch. Tap on ... More and then tap on Add to Watch Favorites.

  2. Tap on the record under Watch Favorites on your watch to see the details of that record. Tapping Back will take you to your Watch Favorites.

Record Favorite

A Record Favorite is marked to be quickly displayed under Favorites in the filter settings. To mark a record as a favorite, tap on ... More and then tap on Add to Favorites. To see all your record favorites, tap on the upper left filter menu and choose Favorites.

Account Switching and Vault Selection

Keeper supports the use of multiple vaults on the same device. For example you can switch between a personal account and business account.

To add another Vault account to your device, visit the Account tab then tap on the email address at the top of the screen. Tap on the email address then select "Add Account" to register another account.

When logging into Keeper, simply select the account to login and then either type the Master Password or tap the Face ID / Touch ID button to login.

Multi-account switching is only available as part of the paid consumer and business plans.

Import & Export

To import and export data from your Keeper vault, visit the Keeper Web Vault or download Keeper Desktop for your computer.

Keeper Web Vault: https://keepersecurity.com/vault

All Downloads: https://keepersecurity.com/download

Uninstall - Reset

To Uninstall Keeper

1. Long press on the Keeper App icon. In iOS 13, a shortcut menu will appear. Older operating systems app icons may just start to shake.

2. Continue holding your finger on the Keeper App if you have iOS 13 until all the apps start to shake, about 3 seconds.

3. Tap the X on the Keeper App icon.

4. Confirm the deleting of the app by tapping “Delete.” This will also delete the data from Keeper.

5. Tap on done or home out to complete the deletion process.

To Reset Keeper

To delete Keeper data without deleting the app, the user can reset Keeper under the device Settings > Keeper > Reset Keeper.

Note: Only local Keeper data on the device will be deleted. Data stored in Keeper’s Cloud Security Vault is NOT erased.

Helpful Links

Customer Support Form: https://keepersecurity.com/support.html

Email Support: support@keepersecurity.com

Business Customers: business.support@keepersecurity.com

System Status: https://statuspage.keeper.io