One-Time Share

Overview

Keeper "One-Time Share" provides time-limited secure sharing of a record to anyone without requiring them to create a Keeper account. One-Time Share is the most secure way to send confidential information to a friend, family member or co-worker without exposing information over email, text message or messaging.

One-Time Shares are secure by design, utilizing Keeper's Zero-Knowledge encryption. The record data is decrypted locally on the recipient's device using 256-bit AES and all requests to the server are signed with elliptic-curve cryptography (ECDSA).

Share links automatically expire at a time of your choosing, and they can only be used on one device. Even if you forget to un-share the record, it will expire and access will be revoked. As an additional layer of security, One-Time Shares are device-locked which means that only the original recipient is able to access the data. If the link is later opened up by a third party, or your email account is compromised, the link cannot be accessed, except on the original device.

Use Cases

Consumer Use Cases

• Share your wi-fi password to a guest

• Share an encrypted file with a family member

• Provide time-limited access to payment cards

Business Use Cases

• Share access credentials with a contractor

• Share an encrypted file with a co-worker

• Provide secure documentation or instructions

Delivery Options

• QR Code

• Airdrop

• Email

• SMS

• Other out-of-band channels

The applications and uses for this are virtually endless. Any time you have a need to securely deliver data to a non-Keeper user, One-Time Shares are the perfect choice.

Create a One-Time Share

To create a One-Time Share, within the selected record, click Share > One-Time Share > Create a One-Time Share. to generate a link.

Next, select the record access expiration from the dropdown menu and click Generate.

You can copy the URL of the link, or copy the entire invitation body (for sending additional contextual information to the recipient). If you scroll down the dialog, you will also see a QR code that can be sent to the recipient.

When the recipient of the share link opens the record, it will open in their web browser and it will be bound to their device. The record access will automatically expire after the set amount of time.

After the record has expired, the link will no longer be valid, and existing devices will no longer load the information.

Delete a One-Time Share

To delete a One-Time Share, click the trash icon next to the share. This will immediately disable the share link. Expired shares will appear under the "Expired" tab.

Bidirectional Sharing

Keeper's upgraded One-Time Share feature enables two-way sharing between Keeper users and non-users, providing a secure way of exchanging confidential information and files.

Bidirectional one-time sharing encourages seamless collaboration with the ability to collect signed documents, feedback or sensitive files and information from clients, contractors, legal times and anyone else without requiring them to create a Keeper account.

To utilize the bidirectional one-time sharing feature, begin by creating a one-time share as you normally would. Within the selected record, click Share > One-Time Share > Create a One-Time Share.

To enable the bidirectional sharing capabilities for the record, check the box next to "Allow recipient to edit record fields and upload files". Use the dropdown menu to select when you would like the share to expire and click Create Link.

Once the recipient receives the secure share link, they can then Click to Open to view the contents of the shared record.

The recipient can upload file attachments and enter any other requested information or notes.

Once the recipient clicks Save, the original record will automatically update within the sender's vault with the added files/information. The sender and recipient can continue to edit the record until the share link expires or once access is revoked.

iOS

Keeper One-Time Share is also available for iOS.

(1) Open the record you would like to share then tap Share > One-Time Share.

(2) Tap the Create a Share Link.

(3) Select a record access expiration from the provided options or select a custom date and time and tap Create.

(4) Once the share link has been created, select the method of delivery (QR Code, Airdrop, Email, SMS, etc.). When the recipient of the share link opens the record, it will open in their web browser and will be bound to their device. The record access will automatically expire after the set amount of time.

Android

Keeper One-Time Share is also available for Android.

(1) Open the record you would like to share then tap Share > One-Time Share.

(2) Tap the add share icon in the lower right corner of your screen.

(3) Select a record access expiration from the provided options or select a custom date and time.

(4) Once the share link has been created, tap Share, Copy Link (to paste into a message) or the recipient can scan the provided QR code to view the record. When the recipient of the share link opens the record, it will open in their web browser and will be bound to their device. The record access will automatically expire after the set amount of time.

Security

To learn more about the security and encryption model powering One-Time Shares, read our security and encryption documentation here.

Keeper Encryption ModelEnterprise Guide