One-Time Share

Time-limited secure sharing of a record with anyone even if they don't have a Keeper account.

Overview

Keeper "One-Time Share" provides time-limited secure sharing of a record to anyone without requiring them to create a Keeper account. One-Time Share is the most secure way to send confidential information to a friend, family member or co-worker without exposing information over email, text message or messaging.

Create a One-Time Share in the Web Vault

One-Time Shares are secure by design, utilizing Keeper's Zero-Knowledge encryption. The record data is decrypted locally on the recipient's device using 256-bit AES and all requests to the server are signed with elliptic-curve cryptography (ECDSA).

Share links automatically expire at a time of your choosing, and they can only be used on one device. Even if you forget to un-share the record, it will expire and access will be revoked. As an additional layer of security, One-Time Shares are device-locked which means that only the original recipient is able to access the data. If the link is later opened up by a third party, or your email account is compromised, the link cannot be accessed, except on the original device.

Keeper One-Time Share

Use Cases

Consumer Use Cases

• Share your wi-fi password to a guest

• Share an encrypted file with a family member

• Provide time-limited access to payment cards

Business Use Cases

• Share access credentials with a contractor

• Share an encrypted file with a co-worker

• Provide secure documentation or instructions

Delivery Options

• QR Code

• Airdrop

• Email

• SMS

• Other out-of-band channels

The applications and uses for this are virtually endless. Any time you have a need to securely deliver data to a non-Keeper user, One-Time Shares are the perfect choice.

Create a One-Time Share

To generate a One-Time Share link, within the selected record, click Share > One-Time Share > Create a One-Time Share.

Share a Record

Create a One-Time Share

One-Time Share is only available on records created after April 26, 2021 when we published Record Types. If you're not seeing the One-Time Share feature, try creating a new record.

If you are an Enterprise user, the use of One-Time Share may be restricted by your Keeper Administrator.

Next, select when you would like the share link to expire from the dropdown menu and click Create Link.

If you would like to learn how to enable bidirectional functionality for the share, allowing the recipient to edit and upload files to the record, click here.

To share the link you can either provide the URL , copy the pre-written invitation (for sending additional contextual information to the recipient), or you can provide a QR code to the recipient to scan and view the record.

Copy the One-Time Share Link, Invite or Provide a QR Code

When the recipient of the share link opens the record, it will open in their web browser and be bound to their (one) device. The record access will automatically expire after the set amount of time.

One-Time Share Recipient View

After the record access has expired or if the sender has deleted it, the link will no longer be valid, and existing devices will no longer load the information.

Expired Access

Delete a One-Time Share

To delete a One-Time Share, click the trash icon next to the share. This will immediately disable the share link. Expired shares will appear under the "Expired" tab.

Delete a One-Time Share

Bidirectional Sharing

Keeper's upgraded One-Time Share feature enables two-way sharing between Keeper users and non-users, providing a secure way of exchanging confidential information and files.

Bidirectional one-time sharing encourages seamless collaboration with the ability to collect signed documents, feedback or sensitive files and information from clients, contractors, legal times and anyone else without requiring them to create a Keeper account.

Introducing Keeper's Bidirectional One-Time Share

To utilize the bidirectional one-time sharing feature, begin by creating a one-time share as you normally would. Within the selected record, click Share > One-Time Share > Create a One-Time Share.

Share a Record

The sender can enter any customized instructions for the recipient within the record "Notes" field.

To enable the bidirectional sharing capabilities for the record, check the box next to "Allow recipient to edit record fields and upload files". Use the dropdown menu to select when you would like the share to expire and click Create Link.

Allow Recipient to Edit and Upload

If you are an Enterprise customer, the use of Bidirectional One-Time Sharing may be restricted by your Keeper Administrator.

Once the recipient receives the secure share link, they can then Click to Open to view the contents of the shared record.

Click to Open the Record Details

Recipient's View of the Record Details

The recipient can upload file attachments and enter any other requested information or notes.

Editable One-Time Share with File Attachments

Once the recipient clicks Save, the original record will automatically update within the sender's vault with the added files/information. The sender and recipient can continue to edit the record until the share link expires or once access is revoked.

One-Time Share Record Details

iOS

Keeper One-Time Share with bidirectional sharing capabilities is also available for iOS.

Open a record then tap Share > One-Time Share > Create a Share Link.

Create Share Link

From the dropdown menu, select when you would like the share link to expire and check the box if you want to allow bidirectional sharing capabilities (allowing the recipient to edit record fields and upload files), then click Create Link.

Expiration & Bidirectional Sharing Options

Once the share link has been created, tap Share or Copy Link (to paste into a message); additionally, the recipient can scan the provided QR code to view the record.

Share or Copy Link

Keeper One-Time Share for iOS

Android

Keeper One-Time Share is also available for Android.

1. Open the record you would like to share then tap Share > One-Time Share.

2. Tap the add share icon in the lower right corner of your screen.

3. Select a record access expiration from the provided options or select a custom date and time.

4. Once the share link has been created, tap Share, Copy Link (to paste into a message) or the recipient can scan the provided QR code to view the record. When the recipient of the share link opens the record, it will open in their web browser and will be bound to their device. The record access will automatically expire after the set amount of time.

Keeper One-Time Share with bidirectional sharing capabilities is also available for Android.

Open a record then tap Share > One-Time Share > Create Share Link.

Share > One-Time Share Link

Create Share Link

From the dropdown menu, select when you would like the share link to expire and check the box if you want to allow bidirectional sharing capabilities (allowing the recipient to edit record fields and upload files), then click Create Link.

Expiration & Bidirectional Sharing Options

Once the share link has been created, tap Share or Copy Link (to paste into a message); additionally, the recipient can scan the provided QR code to view the record.

Share or Copy Link

Keeper One-Time Share for Android

Security

To learn more about the security and encryption model powering One-Time Shares, read our security and encryption documentation here.

Keeper Encryption and Security Model Details | Enterprise and MSP Guide | Keeper Documentation Portaldocs.keeper.io