iOS - iPhone & iPad
A comprehensive guide for Keeper for Apple iOS (iPhone, iPad) devices.
Your Keeper Vault
With Keeper, your passwords, logins and other personal information are saved in a private, digital vault. It is here where you can view and edit all of your website login credentials and details, as well as store important files and photos.
Account Creation & Login
Signing up for Keeper's iOS mobile app is easy. Simply visit the App Store on your device and install Keeper Password Manager. Watch the video below to learn more about account creation and login.
New Users
To create your Keeper account, first enter your email address then you will be asked to create and confirm a Master Password which will be the only password you have to remember. We recommend that you choose a strong Master Password that is only used for Keeper -- don't forget your Master Password!
To finalize your account and proceed to your vault, you will be asked to enter the security verification code that was sent to your email.
Existing Users
If you are an existing user, tap Login and enter your email address. If you are attempting to log in on an unrecognized device, a device approval must take place before you can proceed to your Keeper Vault. Users have three methods of approval to choose from:
Email Verification
Keeper Push
Two-Factor Method
Keeper Push is Keeper’s proprietary notification-based device approval system that sends a push notification to an existing, recognized device.
If you select Send Keeper Push, a notification (push) will appear in your Keeper vault at an approved device or browser.
On the device, login and tap Yes to approve the new device. You must be actively logged into a an approved device to receive the notification.
Once your device has been approved, you will be prompted for 2FA (if enabled), then enter your Master Password to proceed to your vault.
Enterprise SSO Login
If you are an Enterprise customer using SSO Login, you can enter your email address and tap Next to login through SSO. Alternatively, you can tap Use Enterprise SSO Login and enter the enterprise domain provided by your Keeper administrator and tap Connect.
Next, you will be directed to the Safari browser for web-based SSO Enterprise authentication. After you have successfully entered your SSO credentials and two-factor authentication code (if enabled), you will be returned to Keeper to complete the login. You may be required to approve your device using Keeper Push or administrator approval after the SSO login process has been completed.
Importing Passwords
Importing passwords is not available on the iOS app. Please use the Keeper Web Vault on a desktop computer to import your passwords.
When you first log in to your vault, Keeper will prompt you to import passwords from your computer and/or web browsers. If you're not near a desktop computer, you can perform the import at a later time using the Keeper Web Vault.
Tap I'm at my computer.
Keeper will ask you to navigate to keepersecurity.com/setup on your desktop computer to begin the process of importing your passwords.
For detailed instructions on importing passwords from web browsers and other password managers to your Keeper Web Vault, click here.
Creating New Records
Your passwords, logins, credit card numbers, bank accounts and other personal information are saved in your private digital vault (as "Records") and are encrypted on your device using 256-bit AES.
Tap + and Create New Record.
Choose a Record Type from the dropdown menu ("Login" is the default type)
Enter a Title for the record
Enter the Email or Username
Enter the Password or tap the dice icon to generate one (more on that here)
Enter the Website Address (if one wasn't already entered for you)
Enter Notes, add Files & Photos, a Two-Factor Code and Custom Fields
Tap Save to finish
Depending on the Record Type you selected, the default record fields will vary.
Organization
With Keeper you can organize your records into folders and subfolders. To create a folder, tap + and Create New Folder, then enter a name for the folder. To add records to the folder, Tap + and Add Existing Record or you can tap Create New Record to add a new record to the folder.
To create subfolder, within the new folder, tap + and Create New Folder.
Moving & Shortcuts
Keeper makes it easy to move records around within your vault. Individual or multiple records and folders can be moved and shortcuts can be created. Shortcuts, like alias files, can exist in two or more places and when edited, change together.
To begin, tap the pencil icon and select the folder(s) and/or record(s) and then select an option listed below.
Create a Shortcut
Move to a New Folder
Move to an Existing Folder
Change the record(s) "type"
Delete
Favorites
Adding a record to your vault Favorites is an easy way to locate your most frequently visited sites. To add a record to your Favorites, tap More > Add to Favorites.
Sharing
Securely create, share and manage records and folders with other Keeper users such as friends, family, friends and colleagues.
Share a Record
Open the record you would like to share and tap Share > Share with User. Enter the user's email address, then use the toggle switches to select permissions (Can Edit, Can Share, Make Owner) then tap Save.
If this is the first time you are sharing with this person, you will first need to establish a "sharing relationship". The user will receive an email prompting them to login to Keeper and either accept or deny the share request. Once you establish a sharing relationship, the user will appear in the email dropdown list.
One-Time Share
Keeper "One-Time Share" provides time-limited secure sharing of a record to anyone without requiring them to create a Keeper account. One-Time Share is the most secure way to send confidential information to a friend, family member or co-worker without exposing information over email, text message or messaging.
To Create a One-Time Share:
(1) Open the record you would like to share then tap Share > One-Time Share.
(2) Tap Create a Share Link
(3) Select a record access expiration from the provided options or select a custom date and time, then tap Create.
(4) Once the share link has been created, select how you would like to share the link. (SMS, Email, Copy or the recipient can scan the provided QR code to view the record.) When the recipient of the share link opens the record, it will open in their web browser and will be bound to their device. The record access will automatically expire after the set amount of time.
Share a Folder
Shared folders allow you to share multiple records at once and new records can be added to the folder as needed.
Create a Shared Folder & Share with Others:
Tap + and Create Shared Folder.
Enter a name for the folder and tap Save.
The new folder will now appear in your records list. To share the folder with other users, select the folder, then tap the three dots to the right of the folder name to open a menu of options.
Select Manage Users & Records and enter the email addresses of the user(s) you would like to share the folder with.
Assign Permissions & Add Records:
You can assign permissions for each user by tapping on their email address under the "Users" tab.
To add records to the folder, switch to the "Records" tab.
Select the record(s) you would like to add to the shared folder. Once a record has been added, select it from the list to assign permissions (Can Edit, Can Share). Tap Save to finish.
Identity & Payments
Identity & Payments is the place for you to store your personal contact/address information and credit card numbers safely.
Payment cards can also be stored in your vault as records using the "Payment Card" record type which allows them to be shared with other users. See our Record Types Guide for more information.
Key Features
Password & Passphrase Generators
Long, random passwords that are created for each account help protect your information and reduce your exposure to data breaches. Alternatively, by combining multiple words, passphrases are an even more secure alternative to traditional passwords.
Keeper's password generator can create and securely store strong, random passwords or passphrases for all of your sites and apps.
Generate a Password
To begin, tap the dice icon within a new or existing record. You can customize your password by character length (8-99 characters) and choose to include lowercase and uppercase letters, numbers and symbols.
Check the box at the bottom of your screen if you'd like to make your selections the default setting for all passwords moving forward. Tap Use Password to update the record or Copy Password to copy it to your device's clipboard.
Generate a Passphrase
Tap the dice icon within a new or existing record and from the dropdown menu next to "Type" and select Passphrase.
You can customize your passphrase by setting the length, including capital letters and numbers in the passphrase and choosing from various symbols to separate the words.
Passphrases can be up to 20 words long, with a minimum length of 5 words and each word including at least 3 characters.
Check the box at the bottom of your screen if you'd like to make your selections the default setting for all passphrases moving forward. Tap Use Passphrase to update the record or Copy Passphrase to copy it to your device's clipboard.
This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.
To generate a password or passphrase from your vault home screen, tap the yellow create button and select Generate Password. Select either password or passphrase next to "Type". You can either use the password/passphrase to create a new record or copy it to your device’s clipboard to use elsewhere.
Generator History
To view your password/passphrase history, tap Generate Password from either your vault home screen or create one within a record and tap the clock icon. You can delete your generator history at any time by tapping Clear.
Password Zoom
To produce a zoomed-in view of a record's password or passphrase, tap the eye icon then long press on the password field. An enlarged view of your password/passphrase will appear and any numbers and symbols can be easily identified by blue and red color-coding.
Password Enforcement Policies (Business/Enterprise Users)
The password generator on end-user vaults will adhere to the minimum character length, minimum number of lowercase/uppercase/numbers/symbols and allowed list of symbols as defined by your Keeper Administrator.
The passphrase generator on end-user vaults is enabled by default, but can be disabled by your admin. Passphrases will adhere to the minimum number of words and can be configured to include capital letters and numbers. The separators between words will be selected from the list of allowed symbols.
For more information on record password enforcement policies, please see our Enterprise Guide.
Send a File to Keeper
When you open a file from your email for example, you seamlessly launch into the Keeper App to create a new record or add the file to an existing record.
Upon opening the file, tap the share icon. From the share dialogue, select Keeper in the list of apps.
Once Keeper opens, select either Add to New Record or Add to Existing Record. If you are creating a new record, the record type will automatically default to a "File Attachment" (Tap the dropdown icon to change the record type). Enter the record details and tap Save.
Scan a Document (iOS 13+)
Keeper's Scan a Document feature uses optical recognitiion (OCR) to scan a picture, document, card or credentials written on paper then transcribes them in plain text with your record's "Notes" field. This makes it easier to use the text, remember notes and save time.
While viewing a record in edit mode, tap Scan a Document to open the camera function of your device. Once the document has been scanned, tap Save. You will have the option to either add the scanned document to the record as a file attachment or save it in plain text to the "Notes" field.
Security Audit
Security Audit gives your passwords an overall security score and lets you clearly see what passwords are weak from a password strength visual indicator (red being the weakest, green being the strongest).
If a record is indicated as having a high risk password, Keeper recommends changing the password at the affected site immediately and updating the corresponding record in your Keeper Vault.
Record History
Users also have the ability to conveniently restore previous versions of a record. While viewing a record, tap More > Record History.
To restore a record back to a previous state, tap on the version you would like to restore. Review the record information by tapping the "Record Information" dropdown then tap Restore.
A few notes on Record History:
Restoring a record does not place it back into the original folder structure.
Record History is only available as part of the paid consumer and business plans.
Deleted records can be reviewed and restored by visiting "Deleted Items" in the left navigation menu.
KeeperFill
Keeper is fully integrated into the login experience of every website and app. Once enabled through your device's Settings app, KeeperFill will help you sign into apps and website with just a few taps.
Autofill Setup
Before you can utilize KeeperFill's autofill features, you will first need to perform a few simple setup steps:
Open your device's Settings app.
Scroll down and select Passwords.
Tap Password Options and ensure "AutoFill Passwords" is toggled on.
Select Keeper below both "Allow filling from" and "Set up Verification Codes using"
Follow the prompt and uncheck all other password managers (including keychain).
iOS 17 and Below
Autofill & Two-Factor Codes
Once the above setup steps complete, you will see a Passwords button appear above the keyboard when logging into an app or website. By default, tapping Passwords, will prompt you to log in to Keeper and automatically launch KeeperFill. Please note, for security purposes, you must authenticate to Keeper each time you autofill a record on your mobile device.
KeeperFill will present a matching record from your vault. Alternatively, you can search for a record or create a new record. If there is a record match, tap Fill to autofill your login credentials.
As of iOS version 16.2, Keeper is also able to store your two-factor authentication (2FA) codes automatically by serving as your time-based one-time password (TOTP) generator.
Two-factor codes will be automatically copied to your clipboard when possible. To copy it manually, tap the copy icon next to the code and when prompted paste the code into the field provided.
iOS 18
With the release of iOS 18, you can autofill your login credentials faster than ever! Simply long-tap on any field in an app or website and Keeper will seamlessly fill any record information, such as usernames, passwords and even TOTP codes.
Autofill & Two-Factor Codes
Once the above setup steps are complete, you can autofill your credentials at the login page in an app or site, long-tap on any field to generate a menu and select Autofill > Passwords and authenticate to Keeper.
Once Keeper opens, select a matching record or search for one in your vault. Next, tap on the field you'd like to autofill (e.g. username, password, two-factor code, payment card). Whatever information you select will also be conveniently copied to your device's clipboard.
After logging in with your username and/or password, if a two-factor code is required, Keeper will automatically fill the code within the same workflow, reducing friction during the login process.
Alternatively, when Keeper detects a TOTP field at a login page, select Keeper from the verification code menu that appears and authenticate to Keeper.
Next, select a code to fill from the list of matching records to autofill it.
Passkeys on iOS
Passkeys on iOS devices, a highly anticipated feature for enhanced security and convenience, is now available on Apple devices running iOS 17+. This update marks a significant enhancement in our mobile applications capabilities, offering users an even more secure and streamlined experience. To learn more about Passkeys with Keeper, click HERE.
Creating a passkey for a website or app is a simple process on your iOS device.
Tapping Create Passkey on a site or app will trigger Keeper to intercept the request. Keeper then prompts you to create a passkey for your associated login and saves it to your vault.
Returning to sites or apps where you have a stored passkey you will either be prompted to sign in with passkey or will be able to select Sign in with Passkey. Keeper does the rest!
Passkey functionality is not enabled by default on iOS devices. To enable Passkeys with Keeper follow the steps below.
Activating Passkeys on iOS
Launch the Settings app on your iOS device and select General.
Next, choose AutoFill & Passwords.
Toggle ON AutoFill Passwords and Passkeys.
Then tap Keeper so a blue tick appears. If you have used Autofill before, iCloud Passwords & Keychain may have a blue tick as well. For optimal accuracy when using Keeper for Passkeys, make sure to tap iCloud Passwords & Keychain to remove it as an option.
Secure Add-Ons
Secure File Storage
Secure File Storage protects your confidential files, photos, and videos. Securely upload and store files such as legal, tax and loan documents, videos and any other private file to your Keeper Vault.
You can either add an attachment to an existing record or create a new record. The example below utilizes the "File Attachment" record type. Tap Attach Files, Photos & Videos to upload an attachment. You will then be prompted to either Take a Photo or Choose Existing File.
Opening Record Attachments
Tap on the file name within a record to View, Save, or Delete Local Copy. Save files to your device, open them in other apps, or share them via Messages, WhatsApp, Airdrop, and more.
BreachWatch
BreachWatch is a powerful, secure add-on feature that monitors the internet and dark web for breached accounts matching records stored within your Keeper Vault. BreachWatch alerts you so that you can take immediate action to protect yourself against hackers. Once activated, BreachWatch continuously monitors for compromised credentials and notifies you if any of your records are at risk.
To start your BreachWatch scan, tap BreachWatch in the lower menu of your screen tap then Let's Begin > Scan.
BreachWatch will then scan your records and report any risks associated with them. Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in your Keeper vault with the same password.
If you tap Ignore, then that record will be skipped on future scans until the password is reset. You may also do nothing (deferring a response) and leave the risky password unchanged and thus still at risk.
To learn more about BreachWatch, click here.
Settings
The Settings screen allows you to customize the personalization and security features of the application.
Appearance (Dark Mode, Theme)
Login Options (Two-Factor Authentication, Biometric Login, Stay Logged In)
Keyboard Widget
Clipboard Expiration
KeeperFill
Auto-Logout
Default Browser
Security (Enable Self-Destruct, Hide Passwords)
Sort Record Types (Edit Order,
Change Email
Account Recovery
Reset Master Password
Fast Login Mode
Image Quality
Account Recovery
If you forget your Master Password, this feature will help you quickly regain access.
Set up Account Recovery:
Tap Account Recovery from the Settings menu.
Confirm your Master Password and tap Generate New Phrase.
Once your recovery phrase has been generated, be sure to store it in a safe place. For added convenience, you will be given the option to copy or download it.
Check the confirmation box to confirm that you've stored your Recovery Phrase.
Tap Set Recovery Phrase.
Reset Master Password
To change your Master Password:
Tap Reset Master Password.
Enter your current master password.
Create and confirm a new master password.
If you are unable to login with your current master password, and you've set a recovery phrase, go to Forgotten Master Password & Account Recovery to recover your account.
Two-Factor Authentication
Two-Factor authentication (2FA) provides an extra layer of security when logging into your Keeper Vault or another site or application by requiring a secondary passcode upon logging in.
Enabling two-factor authentication is especially advised for highly valuable or sensitive accounts (e.g. banking, medical and social media accounts).
Keeper offers two ways to take advantage of 2FA:
To log into your Keeper Vault.
To log into any site or application from your Keeper Vault by embedding a TOTP (time-based one-time password) into your records.
2FA for Keeper Vault
To enable 2FA for your Keeper Vault, tap Settings > Two-Factor Authentication then select your method from the list of options.
Text Message Setup:
(1) Select a Region (US+1 by default), enter your 10 digit phone number including your area code and tap Save.
(2) Select how long you want the two-factor method to be valid for.
(3) Enter the code that was sent to the phone number you provided. Codes will only last for a minute; if you need another code sent, tap Send a new code.
(4) Backup codes will be shown next. If you are unable to receive two-factor codes via the phone number you entered, you can enter one of the backup codes listed instead. Save these codes somewhere safe, and then tap OK to finish.
If you are not receiving SMS messages from Keeper, please use the TOTP method.
Authenticator App (TOTP) Setup:
(1) Once you select "Authenticator App" tap Save.
(2) Select how long you want the code to be valid and tap Back.
(3) You will be asked to scan the QR Code or enter your secret key in your authenticator or TOTP app. Copy the code displayed in Keeper. Open Google or Microsoft Authenticator (or whichever app you use for 2FA) and add a TOTP record, pasting in the copied Secret Key.
(4) Return to Keeper and copy or enter the TOTP code provided.
(5) Backup codes will be shown next. If you are ever unable to receive Two-Factor codes, you can enter one of the codes listed instead. Tap OK to finish.
2FA Frequency:
You can manage how often you are prompted to sign in on your device with your selected two-factor method at any time. Once you have set up two-factor authentication for your vault (following the steps above), the 2FA Frequency setting will be available within the "Settings" menu. Tap 2FA Frequency and select from: every login, every 12 hours, every 24 hours, every 30 days, or don't ask again on this device.
KeeperDNA Setup:
Apple Watch devices can be used for Two-Factor Authentication. Make sure your device is paired with your phone and that the Apple Watch device has downloaded the corresponding KeeperDNA app.
In Keeper, navigate to Settings > Two-Factor Authentication > Smartwatch (KeeperDNA) then follow the prompts to verify your identity.
If you don't get a notification, you may not have notifications enabled for Keeper. To turn on notifications, on your phone navigate to Settings > Notifications > Keeper and toggle "Allow Notifications" on.
The Keeper DNA app on your Apple Watch can also generate Two-Factor Authentication codes that can be used for logging in.
2FA for Websites & Apps
Keeper can fill 2FA codes on any website or application that supports TOTP. Some apps will allow an automatic import of the setup code into Keeper or you can simply copy and paste a secret key to generate the code, while some will provide a QR code to scan (requires a second device). Continue reading to review these three setup methods in more detail.
Automatically Import a Setup Code
For apps that allow an automatic import of the setup code into Keeper, follow the app or website setup steps prompting you to link a compatible authentication app to the account.
Be sure to first set Keeper as your default password manager in your device's Settings. Learn how here.
(1) Keeper will automatically open and you can login as normal.
(2) Select whether to add the two-factor code to a new or existing record (if you choose existing record, select if from your records list or locate it using the search bar).
(3) You will see the code has been added to the record. Tap Save and return to the record to copy the code to your clipboard.
(4) Return to the app or site to paste the code to complete the setup.
Copy a Setup Key
(1) For apps that provide a setup key to paste into Keeper, begin by copying the key to your device’s clipboard.
(2) Switch to the Keeper app and login as normal. Open the corresponding record and tap Edit > Add Two-Factor Code.
(3) Select Enter Setup Key and paste the key into the field provided and tap OK.
(4) You will see the code has been added to the record. Tap Save and then tap the code to copy it to your clipboard.
(5) Return to the app or site to paste the code to complete the setup.
Watch the video below to learn more about two-factor authentication setup using automatic import of a code or a secret key.
QR Code
(1) Open the Keeper record on your mobile device and tap Edit > Add Two-Factor Code > Scan QR Code (this will open your device's camera).
(2) On a secondary device (e.g. tablet, computer), navigate to the corresponding record's 2FA set up screen to retrieve the site's QR code.
(3) Scan the QR code with your mobile device. You will see the code has been added to the record.
(4) Tap Save and then tap the code to copy it to your clipboard.
(5) Return to the site to paste the code to complete the setup.
Siri Shortcuts
Keeper is integrated with Siri Shortcuts and supports the following voice command variations:
Begin each phrase with "Hey Siri..."
Make a Keeper Record
Make a Keeper record
Make a Keeper password
Keeper record
New Keeper record
Make a record in Keeper
Create a Keeper record
Create a Keeper password
Create a record in Keeper
Add Keeper record
Add a Keeper password
Add a record in Keeper
Display Keeper Verification Codes
Display Keeper verification codes
Show me Keeper verification codes
Show me my Keeper verification codes
Display Keeper authentication codes
Launch Keeper verification codes
Launch Keeper authentication codes
Open Keeper verification codes
Open Keeper TOTP codes
Open Keeper TOTP
Launch Keeper TOTP codes
Launch Keeper TOTP
Display Keeper TOTP codes
Display Keeper TOTP
Show me my Keeper TOTP codes
Show me my Keeper TOTP
Display Keeper Shared Records
Display Keeper shared records
Display my Keeper shared records
Launch Keeper shared records
Launch my Keeper shared records
Show me my Keeper shared records
Open Keeper shared records
Open my Keeper shared records
To view the shortcuts currently available for Keeper, from the Account screen tap shortcuts.
Biometric Login
Both Touch and Face ID must be set up in your device's settings before they can be used to login into Keeper. Once that is complete, from Keeper's Settings screen, toggle "Biometric Login" on.
You can now log into Keeper with your fingerprint using Touch ID or with face recognition using Face ID. Tap on the Touch ID or Face ID symbol to initiate biometric login.
Keeper Widget
The Keeper widget provides an account security overview that is displayed on your device's home screen. To add Keeper's iOS widget to your home screen, follow the steps below:
(1) In Keeper, tap Settings then toggle "Enable Keeper Widget" on.
(2) From your device's home screen, press and hold on any empty area until the apps icons move.
(3) Tap the "+" add icon from the upper left corner of your screen.
(4) Select or search for the Keeper widget.
(5) Choose a size by swiping through the three options and tap Add Widget.
(6) Tap Done.
FIDO2 WebAuthn Security Keys
Keeper now supports a wider range of hardware security keys on iOS through Apple’s security key framework. This allows for seamless two-factor authentication (2FA) with various compatible devices.
Supported Keys:
Keeper is compatible with any hardware security key that is supported by Apple's security key framework, including a wide range of FIDO2-compliant devices. This includes:
NFC-compatible keys
USB-C keys
Lightning-compatible keys
For a complete list of certified keys from the FIDO Alliance, visit the FIDO Certified Showcase.
Setup and Configuration
(1) Before you add a security key, a two-factor authentication method must be in place as a backup.
(2) Navigate to Settings > Two-Factor Authentication, tap the field under "Security Keys".
(3) Tap Add New and enter a name for the key.
(4) Select a duration and tap Register.
(5) Choose your security key activation method: NFC or Insert and Touch, depending on the type of key.
(5) Tap the key on the back of your device or touch the sensor on your hardware key.
(6) Your security key has been registered, tap OK to finish.
A user can register up to 5 security keys. Any one of those keys will unlock the account. To delete a security key, swipe left on the registered key in the "Security Key" page and tap Delete.
Prompt Frequency & Offline Access
The FIDO2 WebAuthn device will be required for login based on the configuration of the first 2FA method. For example:
If the first 2FA method is set to "Prompt Every Login", then your hardware key will be required on every login, and offline login will be disabled.
If the first 2FA method is set to "Every 30 days", then your hardware key will be required every 30 days, and offline login will be disabled.
If the first 2FA method is set to "Remember Forever", then your hardware key will only be required one time on each new device. Offline vault login will be enabled.
Known Issues with Hardware Keys on iOS:
If you're encountering issues with hardware security keys on your iOS device, such as problems with PINs, autofill, or NFC key support, you may be experiencing one of the following known issues:
YubiKey FIDO PIN Loop: Users with certain YubiKeys may experience repeated PIN prompts, even after entering the correct PIN.
Long-Tap Autofill Compatibility: The new long-tap autofill feature in iOS 18+ does not work with accounts secured by hardware security keys.
NFC Key Support: NFC hardware keys are supported on iOS devices, but NFC functionality does not work on iPads.
For more detailed information & troubleshooting, please refer to our Hardware Key Troubleshooting Guide.
Account Switching
Keeper supports the use of multiple vaults on the same device allowing you to switch between a personal account and business account, for example.
Users can switch between accounts or add an account from the login screen. While logged out, tap the email field then select an account email address or tap Add Account to register a new account. Any accounts added will be stored in the drop down menu at the Vault Login screen for future use.
2FA Prompting Behavior & Offline Access
When 2FA is activated on an account, it protects the user on all devices and all platforms because 2FA is protecting access to the backend cloud system.
By definition, two-factor authentication protects access to the cloud and access to online accounts. Therefore, it requires an online connection to be prompted for 2FA. 2FA is triggered when a request is made from the client device to the server. Logging into a new device, syncing new information on an existing device or performing any other cloud-based features.
By default, the native Keeper app for iOS, Android, Mac and Windows allow users to login quickly with their master password (offline mode) to access their vault. After entering their master password or using Biometric Login, the user decrypts the data locally, then the app sends a sync request to the server at which time the user may be prompted for their 2FA code. Depending on the speed of the Internet connection, the 2FA prompt may be received a couple seconds after logging into the native application because the local decryption of data occurs much faster.
Offline authentication and vault access is permitted by all consumer customers. Enterprise customers may restrict the use of offline access for their employees.
2FA Token Retention & Timing
When activating 2FA on your iOS device for the first time, the user selects how often they want to be prompted. Users can be prompted for 2FA every login, once every 30 days or only one time per device. It's important to understand that 2FA is always enabled on the Keeper servers. After a successful login on a device, a "token" is generated from the 2FA code and stored locally on the device as long as it's deemed valid by the server. This is why you are still able to login to the same device over and over without being re-prompted. By default, consumer customers will be prompted only one time per device. Enterprise customers may enforce users to be prompted every time for a new code.
Currently, the 2FA token retention timing on iOS will default to "only one time" on a device if the 2FA was initially set up on the Web Vault or Desktop App. To change this behavior, turn 2FA off and then re-activate 2FA on the iOS device.
Import & Export
To import and export data from your Keeper Vault, visit the Keeper Web Vault or download Keeper Desktop for your computer.
Keeper Web Vault: https://keepersecurity.com/vault
Keeper's Downloads Page: https://keepersecurity.com/download
Uninstall & Account Reset
Uninstall Keeper:
Uninstalling Keeper will delete the data from Keeper on the local device. Data stored in Keeper's Cloud Security Vault is NOT erased.
On your device, long press on the Keeper App icon.
Tap Remove App > Delete App > Delete. (For older iOS systems, long press on the Keeper App icon until all the apps start to shake. Tap the "X" that appears in the upper left corner of the Keeper App icon. To confirm, tap Delete).
Account Reset:
Resetting Keeper will erase all records from all Keeper accounts stored locally on your device. Data stored on Keeper's Cloud Security Vault is NOT erased.
Open your device's Settings app and select Keeper.
Toggle "Reset Keeper" on.
Helpful Links
Customer Support Form: https://keepersecurity.com/support.html
Business Customers: business.support@keepersecurity.com
System Status: https://statuspage.keeper.io
Last updated
Was this helpful?