Comment on page

KeeperFill for Firefox

Installation and usage instructions for KeeperFill for Firefox.


KeeperFill is Keeper’s powerful, autofilling browser extension. Once you download KeeperFill, you can conveniently autofill your logins, passwords, passkeys and save new records that you create to your Keeper Vault.
Autofill with KeeperFill

Installation & Setup

To download the latest version of Keeper's Browser Extension for Firefox, visit the link below and click Add to Firefox. ck the box when prompted.
(1) Once installed, the Keeper icon will appear in the upper right corner of your web browser window.
KeeperFill Browser Extension
(2) Disable your browser's built-in password saving features:
  1. 1.
    In the upper right corner of your browser click on the Menu Icon (3 Horizontal Lines) and select Settings > Privacy & Security.
  2. 2.
    Under "Logins and Passwords", uncheck the box next to "Ask to save logins and passwords for websites".
(3) To ensure you are using the latest version of KeeperFill and allow Keeper to run in private windows, enable both of these settings from the Keeper extension menu. Right-click on the Keeper extension icon in the upper-right corner of your browser window and select "Manager Extension".
Allow Auto Updates & Run in Private Windows
Private mode on Firefox only currently works if you login from the Web Vault. Logging in directly from the browser extension will not login to Keeper.

Logging In

Most users can log into the KeeperFill extension with their email address and master password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO login credentials.
On the Firefox browser, when you log in or out of your Keeper Web Vault you will be automatically logged in or out of KeeperFill and vice-versa.
KeeperFill Login
For customers who log in with SSO, click on Enterprise SSO Login.
KeeperFill Login for Enterprise SSO
Select either Enterprise Domain and enter either the enterprise domain supplied by your Keeper Administrator or enter your Master Password.
For information on Device Approvals, click here.

Stay Logged In

By default, users are logged out of Keeper if their browser window closes, or if their computer restarts. Keeper's "Stay Logged In" feature allows you to remain logged into Keeper for a configurable duration.
To enable Stay Logged In, click Settings > Security, then toggle "Stay Logged In Between Session" on.
Settings > Security
Enable Stay Loggin In
Keeper recommends that you also set the "Inactivity Logout Timer" which automatically logs you out of Keeper after a period of inactivity. You can set this timer to the duration you prefer and it will continue to count down even if you close your browser.
Set Inactivity Logout Timer
The Stay Logged In feature is also compatible with the Keeper Web Vault and Desktop App and can be accessed form you account's security settings (click here to learn more).

Searching Your Vault

The KeeperFill toolbar provides easy access to all of your vault records and other useful functionality. You can quickly search for a website login or anything else stored in your vault. The search feature is case insensitive and will match any record within your vault as you type.
Search Results

Autofill Your Passwords

The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials you create to your vault.
If it's the first time you are logging into a site with KeeperFill, you will be asked if you would like Keeper to autofill your login.
Keep in mind, you must already have created a Keeper record for this site containing the website address for Keeper to recognize, match and fill your login. Upon clicking Yes, your credentials will be autofilled into the login form and you will be logged in.
Autofill Dialogue for New Site
Keeper will autofill your login credentials when possible. If you would like to initiate the filling of your credentials, you can do so from either the KeeperFill toolbar or fill window. From the KeeperFill toolbar, select the matching record and click the fill icon.
Matching Keeper Record(s)
Fill Record from Toolbar
Alternatively, from the fill window, click the Keeper icon that appears in the website's login fields and click Fill Record.
Fill Record From Fill Window

Keyboard Shortcuts

If you prefer to use keyboard shortcuts instead of mouse clicks to autofill your passwords, follow the steps below:
  1. 1.
    Navigate to the site you would like to log in to.
  2. 2.
    To activate the extension, type command+shift+k (for Mac OS) or alt+k (for Windows).
  3. 3.
    In the field provided, begin typing your search terms.
  4. 4.
    Use the up and down arrows on your keyboard to find and highlight the record you are searching for.
  5. 5.
    Use the enter key to quickly fill and log in to the site.

Understanding Record Matching

When logging into a website, KeeperFill will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.
The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list and which specific record is selected as the default choice.
1. If the page you're visiting has a subdomain (e.g., then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.
2. After checking subdomain, Keeper looks at the "path" information (e.g. and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.
3. If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.
For the best record match, make sure that the "Website Address" field in the Keeper record matches the domain and path as close as possible to the target site.

Create a Record

When logging in or creating a new account on a site that has not yet been stored in your vault, KeeperFill will assist in creating a new record.
You are first presented with a list of recognized email addresses to use for the login field or you can click Add Login to enter a new one.
Create Login with Existing Emails/Add Login
Next, in the password field, Keeper will instantly generate a strong, random password for you. Click Fill and Save to accept the password and instantly create a new Keeper record.
Or, If you already have a password, enter it and click Yes to create a new Keeper record with the information you entered.
Create a Strong Password
Review the details of the newly created record, making any necessary changes and click OK and Save when done.
Newly Created Record Details
To create a new record for a site that already has a matching login, click the menu icon in the fill window, then Create New.
Create New Reord
This workflow can be controlled from Settings > Prompt to Create in your KeeperFill Browser Extension.


A passkey is a cryptographic key that lets you log in to your accounts and apps without having to enter a password or a second factor.
Storing passkeys in your Keeper Vault allows them to be used across different browsers and operating systems. They can also be shared with other users like any other record in your vault.
Passkeys only work on websites and applications that have been specifically built to support them. The list of supported sites is pretty small right now, but it will grow over time.

Create a Passkey

To create and save a passkey for a site, typically you'll need to visit the "Security" or "Account Settings" screen of the website. In the below example, we'll be showing Best Buy.
Upon selecting "Create a Passkey", Keeper will intercept the request. Click Add Passkey to create and save the new passkey to your vault.
Create a Passkey

Log in with a Passkey

The next time you visit a website that supports passkey login, locate the "Sign in with a Passkey" or similar action button on the site, then click Use Passkey in the KeeperFill window to login.
Log In with a Passkey
To learn more about Keeper and Passkeys, click here.

Generate a Password

Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. Within the KeeperFill toolbar click Generate Password.
Generate Password
Using the slider and checkboxes, you can adjust the character length and character types. Click Save Password to either update the site's matching record (if provided) or you can create a new record for the site using the newly generated password. Alternatively, click Copy Password to copy the password to your device's clipboard.
Save or Copy Password
This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.

Generator History

Keeper provides users with “generator history” as a way of retrieving a previously generated password and its associated details. Generated passwords are only encrypted and decrypted upon logging in to the extension.
Generate Password > Generator History
Hover your cursor over a password to reveal or copy it. Your password history can be cleared at any time by clicking Clear History.
View/Copy & Clear Password History
Clear Generator History

Change a Password

KeeperFill makes it easy to change your passwords. When a user visits a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will run a wizard that walks you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
  • Autofill your old/current password
  • Automatically generate and autofill a new secure password
  • Confirm the changes and save them to your vault
Password Change Prompt
Change Your Passwords with KeeperFill

Autofill Custom Fields

Keeper can automatically fill custom fields into login forms. From the Keeper Web Vault, create a custom field in your record, ensuring the label matches that of the field you want to fill. (e.g. "Last 4 digits of SSN").
Create Custom Field
Autofilled Custom Field
You can also fill the the custom field value via the fill window.
Fill Custom Field

Accessibility Setting

With the accessibility setting, users have the ability to control tabbing behavior and focus on the Keeper icon within form fields.
Select Settings > Accessibility to disable this setting, preventing focus on the Keeper icons when tabbing through form fields with keyboard controls.
Settings > Accessibility

Add Multiple Website Domains

Some sites have more than one domain (website address/URL) that require the same exact login/password. If this is the case for any of your records, rather than creating an entirely separate record, KeeperFill allows you to store multiple website domains within one record. So no matter what domain you are logging in from, KeeperFill will recognize that domain as an alias and allow you to log in with the same stored credentials.
  1. 1.
    From your Keeper Web or Desktop Vault, click the pencil icon to edit the record.
  2. 2.
    Click Custom Field and select URL.
  3. 3.
    In the field provided, enter the website address of the alternate domain. You can add as many additional URL fields as you'd like.
URL Custom Field Type
Enter Website Address

Match Only Subdomains

The "Match Only Subdomains" setting enables KeeperFill to differentiate a record's subdomain (if present) from its domain. In doing so, only records that match the subdomain of the login page will be populated in KeeperFill's "Matching Records"
Example: If a user has a record with a website address containing a subdomain and domain such as "" and another record with the website address containing only the domain "" and attempts to log in to ", the only record match that will appear is "".
To enable this feature, click Settings > Match Only Subdomains and toggle the setting on.
Enable "Match Only Subdomains"

Two-Factor Codes (TOTP)

Records that have a stored two-factor code can be filled into login forms containing a TOTP field. Simply click the fill button in the fill window.
Fill Two-Factor Code
Two-Factor Codes Integration
Storing two-factor codes in your Keeper Vault has several advantages:
  • Keeper two-factor codes are more secure than using SMS text messages.
  • Two-factor codes stored in Keeper are protected with strong zero-knowledge encryption.
  • They can be auto-filled quickly while logging in to a site, saving time and reducing friction.
  • Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.
  • Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code.
To learn more about filling two-factor codes via the right-click context menu, click here.

Payment Cards & Addresses

From the fill window you can view and fill the payment cards and addresses that are stored in your vault.
Payment Cards & Addresses in KeeperFill

Right-Click Context Menu

KeeperFill is fully integrated with your browser's right-click context menu and offers an alternative filling method. Simply right-click on a login field to produce a context menu. Select Keeper to fill logins, two-factor codes, payment cards, addresses and create and edit records.
Fill Login via Right-Click Context Menu
Fill Payment Card via Right-Click Context Menu
For security reasons, only records with a matching domain name for the site you visit will display in the menu of filling options.

Firefox and U2F Security Keys

While FIDO U2F support was added with the release of Firefox Quantum, the feature is turned off by default. In order to enable U2F support in Firefox Quantum, follow the steps below:
  1. 1.
    Type "about:config" (without quotes) into the Firefox address bar and press Enter.
  2. 2.
    Search for u2f.
  3. 3.
    Double-click on security.webauth.u2f to enable U2F.
Supported Keys:
It’s important to understand that every FIDO U2F implementation can vary from the official specifications. Some sites supporting FIDO U2F have made accommodations for the incompleteness of Firefox’s implementation, but some have not. In other situations, some services may not work with Firefox Quantum because of a service-specific implementation.


Uninstalling Keeper Password Manager will delete the data from Keeper on the local device. Data stored in Keeper's Cloud Security Vault is NOT erased.
  1. 1.
    Right click on the Keeper icon in the top right corner of your browser.
  2. 2.
    Select Remove Extension.
  3. 3.
    Click Remove.
Uninstall KeeperFill
If you need assistance, please contact the Keeper support team at