KeeperFill for Safari

Installation and usage instructions for the KeeperFill extension on Safari. KeeperFill for Safari is bundled with the Keeper for Mac on the Apple App Store and Keeper Desktop software.

Installation & Setup

1. Install Keeper Desktop from the Download page. You can install from the Mac Store or from the Keeper website directly. The Safari extension is bundled into the Keeper Desktop application and will automatically install.
2. Open your Safari browser and go to Safari > Preferences > Extensions.
3. If you have an existing Keeper Safari extension installed, please uninstall it.
4. Activate the new KeeperFill extension by clicking the blue checkbox.
5. Now the KeeperFill extension should appear on your browser toolbar.
You may need to restart Safari in order for the Keeper icon to display on the browser toolbar.
6. We recommend that you disable the Safari built-in password manager. Open Safari > Preferences > AutoFill and disable user names and passwords.

Video Overview

Video Overview

Extension Update

To get the most out of the Keeper Browser Extension, it is important that you are running the latest version. All extensions installed from the App Store, including Keeper Password Manager & Digital Vault, are automatically kept up to date.
If you cannot turn on extensions in Safari, this is a known bug due to a recent Apple update.
First, uninstall any duplicate versions of Keeper. If you are still unable to enable the extension, Apple provides instructions to further troubleshoot the issue in its knowledge base:

Logging In

Consumer customers can log in to the Keeper browser extension with their Keeper email address and Master Password. If you are part of an Enterprise rollout, you may be directed to log in with your Enterprise SSO Login credentials.
On the Safari browser, the extension will automatically log in when you log in to the Web Vault. Other web browsers may require you to log in separately to the Vault and Browser Extension.
For customers who log in with SSO, click on the Enterprise SSO Login dropdown
Select either Enterprise Domain and enter either the enterprise domain supplied by your Keeper Administrator or enter your Master Password.
For information on Device Approvals, click here.

Stay Logged In

When the Stay Logged In setting is enabled, you stay logged into Keeper when you close your browser or restart your computer. In order to use this feature you must first enable it in your extension's settings menu.
Click Settings, then toggle Stay Logged In "on".
Before you proceed, Keeper recommends that you first enable Auto-Logout in order to protect your vault in the case that you step away from your device while logged into Keeper. This automatically logs you out after a period of inactivity.
The Stay Logged In feature is also compatible with the Keeper Desktop App and can be accessed through the Account Dropdown Menu > Settings > Security.

AutoFill Passwords

Clicking the Keeper lock allows you to quickly fill and log in to a site. You can fill your login and password by clicking the Fill button or by clicking on Show More to fill individual fields.

Keyboard Shortcuts

If you prefer to use keyboard shortcuts instead of mouse clicks to make the process of auto filling your passwords even more seamless, follow the steps below:
  1. 1.
    Navigate to the site you would like to log in to.
  2. 2.
    Type command+shift+k (for Mac OS) or alt+k (for Windows).
  3. 3.
    In the field provided, begin typing your search terms.
  4. 4.
    Use the up and down arrows on your keyboard to find and highlight the record you are searching for.
  5. 5.
    Use the enter key to quickly fill and log in to the site.

Multiple Account Selector

If you have multiple logins for the same website, click on the dropdown menu to expand the selection and display all of the matching records.

Matching Records

When logging in to a website, the Keeper Browser extension will provide a list of matching records. The matching is performed by looking at the "Website Address" field of the record as well as the custom fields.
The list of matching records is determined by looking at the URLs stored within your Keeper record. Once the list is generated, a series of logical steps determines the sort order of the selection list, and which specific record is selected as the default choice.
1. If the page you're visiting has a subdomain (e.g., then Keeper first looks at the subdomain for the closest match in your vault records. The best matches are sorted by the last time they were used.
2. After checking subdomain, Keeper looks at the "path" information (e.g. and compares it to the path stored within your Keeper record. The best matches are again sorted by the last time they were used.
3. If the page contains an email address on the screen (such as a pre-filled email field) then Keeper will pre-select the record from the subdomain and path criteria which contains the email field.
For the best record match, make sure that the "Website Address" field in the Keeper record matches the domain and path as close as possible to the target site.

Creating New Records

When logging in or registering for an account on a site with no stored credentials, Keeper will present you with a list of recognized email addresses to use for the login/email field on the site's application page (or you can click Add Login to enter a new one).
Next, in the password field, Keeper will instantly generate a strong, random password for you. Click Fill and Save to accept the password and instantly create a new Keeper record.
If you already have a password, enter it and click Yes to create a new Keeper record with the information you entered.
This workflow can be controlled from Settings > Autofill Suggestions in your KeeperFill Browser Extension.
To create a new record for a site that already has a matching login, click the menu icon, then Create New.

Importing Passwords

Click here to see instructions on how to import your browser stored passwords and export passwords from other password managers.

Creating Secure Passwords

Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. Keeper generates and securely stores strong, random passwords for all of your sites and apps with the click of the dice.
This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.

Changing Passwords

KeeperFill makes it easy to change your login passwords. When visiting a site's "Change Password" page, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will walk you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
  • Autofill your old/current password
  • Automatically generate and autofill a new secure password
  • Confirm the changes and save them to your vault
The video below demonstrates how KeeperFill can help you change your passwords.
Change Your Passwords with KeeperFill

One Record, Multiple Domains

Some sites have more than one domain (website address) that require the same exact login/password. If this is the case for any of your records, rather than creating an entirely separate record, KeeperFill allows you to store multiple website domains within one record. So no matter what domain you are logging in from, KeeperFill will recognize that domain as an alias and allow you to log in with the same stored credentials.
To store multiple website domains within a single record:
  1. 1.
    While viewing the record, click Edit.
  2. 2.
    Click the + Custom Field button.
  3. 3.
    In Custom Field Name, enter a field name (e.g. Website Alias).
  4. 4.
    In Custom Field Value, enter the site's alternate domain name.
  5. 5.
    To finish, click Save.
  6. 6.
    You can continue to repeat this process for additional domain names by clicking the + Custom Field button again.

Match on Subdomain Setting

The "Match on Subdomain" setting enables the Keeper browser extension to recognize and differentiate a record's subdomain (if present) from its domain. In doing so, only records that match the subdomain of the login page will be populated into the extension window.
Example: If a user has a record with a website address containing a subdomain and domain such as "" and another record with the website address containing the same domain "" and attempts to log in at ", the only record match that will appear is "".
To enable this setting follow the steps below, click Settings > Match on Subdomain then toggle it "on".
If records with similar subdomains exist in your vault you are able to view those alternative matches by clicking on the dropdown menu.
Alternatively, if no records exist in your Vault for the subdomain of the page you are visiting, but they do for the domain, the Keeper extension will populate all of the existing recordings containing that domain.

Payment Cards & Identity

KeeperFill can also fill payment cards and identity information that are stored in your Vault. Payment cards are only available to fill at websites in which you currently have a Keeper record for.

KeeperFill Right-Click Context Menu

If a website form field does not display the Keeper lock icon, users can right-click on the field to open the KeeperFill window.


To uninstall “KeeperFill”, you must remove the “Keeper Password Manager” desktop application.
Uninstalling Keeper's Browser Extension from Safari does not effect the data stored in Keeper's Cloud Security Vault.
  1. 1.
    Navigate to the Safari Menu Bar > Preferences…
  2. 2.
    Click Extensions.
  3. 3.
    Click KeeperFill.
  4. 4.
    Click Uninstall.
  5. 5.
    Click Show in Finder to locate the application.
  6. 6.
    Drag Keeper Password to the Trash.
  7. 7.
    Empty the Trash.
If you need assistance, please contact the Keeper support team at