One-Time Share

Time-limited secure sharing of a record with anyone even if they don't have a Keeper account.

One-Time Share is now live on Web Vault, Desktop App version 16.6+, iOS and Android.

Overview

Keeper "One-Time Share" provides time-limited secure sharing of a record to anyone without requiring them to create a Keeper account. One-Time Share is the most secure way to send confidential information to a friend, family member or co-worker without exposing information over email, text message or messaging.

One-Time Shares are secure by design, utilizing Keeper's Zero-Knowledge encryption. The record data is decrypted locally on the recipient's device using 256-bit AES and all requests to the server are signed with elliptic-curve cryptography (ECDSA).

Share links automatically expire at a time of your choosing, and they can only be used on one device. Even if you forget to un-share the record, it will expire and access will be revoked. As an additional layer of security, One-Time Shares are device-locked which means that only the original recipient is able to access the data. If the link is later opened up by a third party, or your email account is compromised, the link cannot be accessed, except on the original device.

Use Cases

Consumer Use Cases

Share your wi-fi password to a guest
Share an encrypted file with a family member
Provide time-limited access to payment cards

Business Use Cases

Share access credentials with a contractor
Share an encrypted file with a co-worker
Provide secure documentation or instructions

Delivery Options

QR Code
Airdrop
Email
SMS
Other out-of-band channels

The applications and uses for this are virtually endless. Any time you have a need to securely deliver data to a non-Keeper user, One-Time Shares are the perfect choice.

To create a One-Time Share, click the menu icon within the record that you own or have the permission to re-share. Then select "Create a One-Time Share" to generate a link.

One-Time Share is only available on records created after April 26, 2021 when we published Record Types. If you're not seeing the One-Time Share feature, try creating a new record.

If you are an Enterprise user, the use of One-Time Share may be restricted by your Keeper Administrator.

Next, select the record access expiration from the dropdown menu and click Generate.

You can copy the URL of the link, or copy the entire invitation body (for sending additional contextual information to the recipient). If you scroll down the dialog, you will also see a QR code that can be sent to the recipient.

When the recipient of the share link opens the record, it will open in their web browser and it will be bound to their device. The record access will automatically expire after the set amount of time.

After the record has expired, the link will no longer be valid, and existing devices will no longer load the information.

To delete a One-Time Share, click the trash icon next to the share. This will immediately disable the share link. Expired shares will appear under the "Expired" tab.

iOS

Keeper One-Time Share is also available for iOS.

(1) Open the record you would like to share then tap Share > One-Time Share.

(2) Tap the Create a Share Link.

(3) Select a record access expiration from the provided options or select a custom date and time and tap Create.

(4) Once the share link has been created, select the method of delivery (QR Code, Airdrop, Email, SMS, etc.). When the recipient of the share link opens the record, it will open in their web browser and will be bound to their device. The record access will automatically expire after the set amount of time.

Android

Keeper One-Time Share is also available for Android.

(1) Open the record you would like to share then tap Share > One-Time Share.

(2) Tap the add share icon in the lower right corner of your screen.

(3) Select a record access expiration from the provided options or select a custom date and time.

(4) Once the share link has been created, tap Share, Copy Link (to paste into a message) or the recipient can scan the provided QR code to view the record. When the recipient of the share link opens the record, it will open in their web browser and will be bound to their device. The record access will automatically expire after the set amount of time.