Comment on page
Web Vault & Desktop App
A comprehensive guide for the Keeper Web Vault and cross-platform, Keeper Desktop Application.
Welcome to Keeper!
Keeper is simple to install, easy to use and you’ll be up and running in just minutes.
With Keeper, your passwords, logins and other personal information are saved in a private, digital vault. It is here where you can view and edit all of your website login credentials and details, as well as store important files and photos.
Watch the video below for an overview of the vault with master password login.
Keeper End-User Vault Overview (Master Password Login)
If you've already signed up for Keeper on your mobile devices, you can simply login to the Web Vault or Desktop App (links below) with your email address, Master Password and Two-Factor Authentication (if enabled on your account).
Login to the Keeper Web Vault:
Download the Keeper Desktop App:
Upon logging in, you may encounter a "Device Approval" request. If you are attempting to log in on an unrecognized device or browser, a device approval must take place before you can proceed to your Keeper Vault. Users have three methods of approval to choose from: Email, Keeper Push or Two-Factor Method.
Keeper Push is Keeper’s proprietary notification-based device approval system that sends a push notification to an existing, recognized device.
If you select Keeper Push, a notification (push) will be appear in your Keeper Vault on an approved device or browser.
Device Approval Options
Select Yes to approve the new device.
You must be actively logged into a different, recognized/approved device to receive the notification.
Device Approval Request
Once your device has been approved, you will be prompted for 2FA (if enabled), then you can enter your Master Password to proceed to your vault.
To create your Keeper account, first enter your email address then you will be asked to create and confirm a Master Password which will be the only password you have to remember. We recommend that you choose a strong Master Password that is only used for Keeper -- don't forget your Master Password!
To finalize your account and proceed to your vault, you will be asked to enter the security verification code that was sent to your email.
Enterprise users who login with SSO do not require the selection of a Master Password.
Set Your Master Password
Get Started Wizard
Watch the video below to learn how to create your account.
Create Your Account
Users who login with an existing identity provider have various login choices. Users can either enter their email address at the login screen or click Enterprise SSO Login and select their login method from the dropdown menu as determined by their Keeper administrator (Enterprise Domain Login or Master Password Login).
Enterprise SSO Login
Your passwords, logins, credit card numbers, bank accounts and other personal information are saved in your private digital Vault (as "Records") and are encrypted on your device using 256-bit AES.
Click + Create New > Record.
- Enter a name for the Record and click Next
- Enter the Login (Username or Email)
- Enter the Website Address
- Click Save to finish
Create a Record
Create a Record
You can either manually enter your existing logins and passwords into your vault or Keeper can import your existing passwords directly from your web browser (e.g. Safari, Chrome, Firefox), another password manager, or from a text file (.csv).
Account Dropdown Menu > Settings > Import
To import passwords from your web browser, you must first install the Keeper Import Tool. To begin the installation, from the Account Dropdown Menu, click Settings > Import > Import. If you came fresh into the Web Vault, you can download the import tool by clicking Install.
If you have started the import process from a mobile app and came to the Web Vault, you will be prompted to import your existing passwords, click Next > Install.
Keeper Import Tool Install
Keeper will then walk you through a few steps to download the Keeper Import Tool:
- 1.Copy the code Keeper provides (you will need this when prompted in the Keeper Importer).
- 2.If you are using a PC - click Run when prompted.
- 3.If you using a Mac - double click the "KeeperImport.zip" file located in your downloads and double click on the "Keeper Import App" to start the import process. You will encounter a few Keychain permission windows that will require you to enter your computer password to allow Keeper to access your web browsers.
- 4.Keeper will then ask for the code you received from step one; paste the code and click Import.
Copy Import Code
Once the installation is complete, Keeper will report websites and their associated logins and passwords directly from your web browser. You can then scroll though the report and uncheck those you do not wish to import. Once you have finished reviewing the report, click Add to Keeper to import the selected password.
Import Your Passwords
Keeper can import logins and passwords from other password managers. From the Account Dropdown Menu, click Settings > Import.
Click on the password manager you want to import from, then click View Import Instructions. Once you have created the export file per the instructions, drag and drop the file into Keeper's "Drop a File Here" window.
Drag and Drop File into Keeper
Confirm the export file has the correct extension at the end of the file name (e.g. export.csv).
A display window will appear allowing you customize how you want the import information organized. There are six general fields across the top of the scrollable window. Clicking on the titles of each one allows you to change the organization of that column via a dropdown menu.
The content of each column and change the title of each column to accurately represent that information (e.g. If you see a column of URLs and the column title says "Notes", change that column title to "URL").
Keeper can import passwords from the following password managers:
Import instructions can also be found in the "Import Records" section of our user guides.
Keeper can also import logins and passwords from a text file (.csv). To begin, from the Account Dropdown Menu, click Settings > Import. After selecting Text File (.csv) click View Import Instructions and follow the instructions provided. Once you have created the export file per the instructions, drag and drop it into Keeper's "Drop a File Here" window.
Folder,Title,Login,Password,Website Address,Notes,Shared Folder,Custom Fields
• To specify subfolders, use backslash "\" between folder names
• To make a Shared Folder specify the name or path to it in the 7th field
Example 1: Create a regular folder at the root level with 2 custom fields
Example 2: Create a shared subfolder inside another folder with edit and re-share permission
Download the Keeper Desktop and Mobile Apps to access your Keeper Vault from any platform and use it for native applications across all of your devices.
Keeper Download Page
With Keeper you can organize your records into folders and subfolders. To create a folder, click on + Create New > Folder. Enter the name of the folder and click Create.
Create a Folder
To create a subfolder, right-click on an existing/parent folder and select New Folder.
Create a Subfolder
Create a Folder
Drag and drop the record(s) you would like to store in a folder or subfolder and click Move or Create shortcut. To move multiple records, hold "shift" and click the items to drag-and-drop.
Record shortcuts = like alias files, can exist in two or more places and when edited, change together.
Move Records with Drag-and-Drop
You can perform a number of actions by right-clicking on a record or folder to generate a contextual options menu.
Right-Click Context Menu
Right-click on a record or folder and select Delete. Click OK to confirm.
If you are deleting a folder, all records in the folder will also be deleted.
Delete a Record
Ctrl/Cmd-click multiple records or folders to select for deletion. Right-click on the selection and select Delete. Click OK to confirm. Shift-click for selecting a list of items is also supported.
If a folder is included in your selection, all records in the selected folder will be deleted.
Delete a Record
Record Favorites are used to easily identify your most frequently used records. Right-click on a record and select Add to Favorites.
Add a Record to Your Favorites
Securely share records and folders with other Keeper users such as family, friends and colleagues.
If you attempt to share a record or folder with someone who is not an existing Keeper user, they first receive an email inviting them to sign-up for Keeper.
While viewing a record, click Share.
Enter the email(s) of the user(s) you would like to share with, then choose their permission type from the dropdown menu.
Share a Record
Shared folders allow you to share multiple records at once and new records can be added to the folder as needed.
To create a Shared Folder, click Create New > Shared Folder.
Create New > Shared Folder
Choose where you would like to nest the folder using the dropdown menu and enter a name for the folder. Set the User and Record Permissions and click Create.
New Shared Folder Creation
Create a Shared Folder
Identity & Payments is the place for you to store your personal contact/address information and credit card numbers safely.
From Identity & Payments enter a username and click + Phone Number and + Address.
Enter the corresponding personal information and click Save to finish.
Add Personal Info
To store a payment card, click the Payment Cards tab, enter the card information and click Save to finish.
Add Payment Cards
You can also create a "Payment Card" Record by using the record type dropdown menu during record creation.
Store Personal and Payment Information
Click Create New > Record and select "Payment Card" from the dropdown menu, enter a title and click Next. Enter your payment card info and click Save.
Create Payment Card Record Type
Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. Keeper generates and securely stores strong, random passwords for all of your sites and apps by clicking on the dice icon. The default password length for generated passwords is 20 characters. The length slider can be used to generate longer or shorter passwords for specific sites.
This will NOT automatically change the website's existing login password. You must still visit the corresponding website's "Change Password" form to update the old password to match the new, stronger password. Click here to learn how to easily change your password with KeeperFill.
Custom Fields allow you to store additional data within a record, such as the answer to a site's security question or a passport number. Any record created with one of Keeper's Record Types, can be further enhanced with various custom field options.
Custom field labels can be edited and if you are creating multiple custom fields, you can drag and drop them in your preferred order.
While creating or editing a record, click Custom Field.
Add Custom Field
Select the custom field you would like to add to the record.
Select Custom Field Type
Available Custom Fields:
- URL (website address) used for Autofill
- Security Question & Answer
- Multi-line Text
- Address (new or linked)
- Pin Code (4-digit numeric)
- Phone Number
- Payment Card (new or linked)
- Hidden Field
Enter the field values and click Save to finish.
Security Question & Answer Custom Field
Keeper autofills the custom fields of login forms as long as both the Website Address and Custom Field Name of the Keeper record match those of the login form.
Within a "general" record type, custom fields can be created in pairs: a "Custom Field Name" and a "Custom Field Value".
Custom Field in Legacy Record Type
Use advanced search filters to quickly narrow down your results and find exactly what you need.
Advanced Search Filters
Quick search shows recently viewed items and improves sort results. Click within the "Search" field to narrow down your results based on search terms or to reveal recently viewed items.
Quick Search and Recently Viewed
Launch allows you to quickly navigate to your favorite websites. Simply click a record's Website Address, Launch button, or launch icon to launch the target site and login with Keeper in a new window.
The Security Audit screen gives the passwords stored in your vault an overall security score based on password strength. You can clearly view information about each record's password strength and reuse from this screen.
You can easily view a record that contains a high-risk password by clicking on it from the provided list. To resolve the risk, you will be directed to change the password at the record's website and then update the corresponding record in your vault.
Keeper provides you with the ability to view and restore previous versions of a record by clicking on the record's information icon and View Record History.
Select the version of the record you want to review/and or restore based on the last modified date and time. Click Restore to revert the record back to the selected version.
Deleted records can be reviewed and restored by visiting the Deleted Items section of your vault (this is available as a paid feature).
Give trusted family and friends access to your Keeper Vault in the event of an emergency or loss of life. You can designate up to five emergency contacts and decide how much time should pass before their access is granted.
Please note, the Emergency Access feature is only available for consumer accounts.
From the Account Dropdown Menu, click Account > Emergency Access
Click Trusted Users and enter the email addresses of up to five contacts (Keeper users). Optionally, select a "Delay Access" duration from the dropdown menu for each user, then click Send.
The amount of time between your request to provide emergency access and access granted can be set up to three months per contact. If a delay is configured, the countdown begins the moment the trusted user attempts to login to your vault.
Account > Emergency Access >Trusted Users
Add Trusted Users
In order for the recipient to accept the request, you must first establish a "sharing" relationship if one hasn't already been established through Keeper's record/folder sharing features.
If prompted, click Send Invite.
If the recipient is not an existing Keeper user, they will receive an email inviting them to sign up for a Keeper account. Once they sign up and login to their account, they can accept the sharing relationship request.
Once the recipient accepts your sharing request, you will need to invite them to be your emergency contact once more from the “Emergency Access” section of your vault. This step is not necessary if a sharing relationship has previously been established.
You can view and restore previously deleted records from the "Deleted Items" section of your vault by clicking Restore.
Recently Deleted Records
Please note, Deleted Items is available as a paid feature.
The “Lost Access” tab contains records that you own, but are no longer accessible (e.g. You delete a record that you own that has also been shared with another user). This feature allows users to individually add these records back to their vault.
Click Add to My Vault to add a record back to your vault.
For extra security on supported sites and apps, click Add Two-Factor Code to store Two-Factor Authentication (2FA) codes for standard TOTP (Time-Based One Time Passwords) in your Keeper records.
Add Two-Factor Code to a Record
Store 2FA Code in a Record
Storing two-factor codes in your vault has several advantages:
- Keeper two-factor codes are more secure than using SMS text messages.
- Two-factor codes stored in Keeper are protected with strong Zero-Knowledge encryption.
- Codes can be auto-filled quickly while logging in to a site, saving time and reducing friction.
- Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.
- Since Keeper records are shareable, two-factor codes are always available to everyone who has access to the record.
Two-Factor Codes Integration
The KeeperFill Browser Extension allows you to autofill your passwords and save new login credentials to your vault. KeeperFill is available for every web browser (Chrome, Firefox, Safari, IE, Edge and Opera).
KeeperFill at Login Screen
Autofill with KeeperFill
KeeperFill makes it easy to change your passwords. When visiting a site's "Change Password" form, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking Yes, Keeper will walk you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
- Autofill your old/current password
- Automatically generate and autofill a new secure password
- Confirm the changes and save them to your vault
KeeperFill's Prompt to Change a Password
Changing Your Passwords
Keeper offers Secure File Storage to protect your confidential files, photos and videos. Securely upload and store files such as passport photos, medical cards, drivers licenses, tax and loan documents, videos and any other private file to your Keeper vault.
Files can either be added to an existing record or you can create a new record to store the file independently of other login information.
Click Files or Photos to upload a file, or simply drag-and-drop the file directly into your Vault.
Files or Photos
Drag-and-Drop a File Directly Into Your Vault
BreachWatch is a powerful secure add-on feature that monitors the internet and dark web for breached accounts matching records stored within your Keeper Vault. BreachWatch alerts you so that you can take immediate action to protect yourself against hackers. Once activated, BreachWatch continuously monitors for compromised credentials and notifies you if any of your records are at risk.
To start your BreachWatch scan, from the left navigation menu, click BreachWatch > Let's Begin.
BreachWatch will then scan your records and report any risks associated with them. Clicking each record listed will allow you view the steps needed to resolve each risk.
Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in your Keeper Vault with the same password.
If you click Ignore, then that record will be skipped on future scans until the password is reset. You may also do nothing (deferring a response) and leave the risky password unchanged and thus still at risk.
Users can configure specific features like language, theme and two-factor authentication from the Settings Menu. You can access the Settings Menu by clicking on the Account Dropdown Menu (your email) in the upper-right corner of your screen.
- Choose a Theme: Select from a number of available themes. The theme will affect coloring of buttons, backgrounds, icons and other components.
- Clipboard Expiration (Desktop App Only): This will clear any data copied to the clipboard via a copy button after a period of time. Note: If your operating system maintains a clipboard history, this information may still be available after it has been cleared.
- Choose another language: English US & UK, Spanish, Japanese, Romanian, Chinese Simplified & Traditional, French, Korean, Russian, Arabic, Greek, Dutch, Slovak, Brazilian Portuguese, Hebrew, Polish, German, Italian, and Portuguese
- Record Type Sorting: Adjust the order that record types show in the "Create new" dropdown.
- Master Password: Allows you to reset your master password. You must re-enter your current master password in order to change it.
- Account Recovery: Allows you to set your recovery phrase which can be used to access your vault in the event you forget your master password.
- Email Address: Allows you to change the email address associated with your account. You must re-enter your current master password in order to change it.
- Delete All Unshared Owned Records: This will delete all records from your vault that you own. Records that have been shared, will still be shared. Deleted records will be moved to the trash can. To permanently delete them, you must also empty your trash.
- Auto-Logout: Logout of Keeper after a number of minutes of inactivity. On the web vault, this is controlled in the browser extension settings. On desktop you have the ability to also wipe application memory and restart the desktop app on logout.
- Stay Logged In: If Auto-Logout is enabled, this setting will maintain the inactivity timer and preserve your login if the system is rebooted or your browser is restarted. If "Stay Logged In" is disabled, you will be logged out if the application closes.
- Two-Factor Authentication: Enable a second factor of authentication such as SMS, RSA token, DUO security token, Authenticator or KeeperDNA. This will be used in addition to device verification and a master password.
- Auto-Approve Devices from Recognized IP Address(es): Device approval is needed for any client to login for the first time. The device token is saved per device. If you would like to automatically skip device approval when you are on an IP that matches another already approved device, this will skip the check.
- Touch ID (MacOS only): Login to the keeper vault using biometrics. This replaces the first factor (your master password), and second factors will still be required.
- Optionally extend display of temporary confirmation messages.
- Zoom keyboard shortcut: Cmd +/-
In order to properly utilize the vault's +Create New button and various dropdown menus, users must first disable the JAWS "Virtual Cursor" setting if applicable (or ALT + arrow up/down for NVDA).
In JAWS navigate to Utilities > Settings Center and search for "use virtual PC cursor", then uncheck "Use Virtual PC Cursor".
- Search Settings: Control the visibility of Keeper’s search results dropdown overlay and advanced search filters.
- Automatic Syncing Delay (Business Customers Only): Set your vault sync delay frequency to improve syncing performance across large user groups.
- Show Numbering In Record List View: Choose whether you want records in "list view" to be numbered.
Advanced Account Settings > Search
- Import: Import passwords from browsers or other password managers. Web imports are typically file based. Keeper Desktop has more availability for automated imports from other solutions.
- Export: Export your vault to CSV, JSON or PDF. This includes the ability to include records that have been shared with you that you are not the owner of.
- Shared Records Report: Generate a report in CSV, JSON or PDF format. This provides a list of records that you own, and who those records are shared with.
Two-Factor Authentication (2FA) provides an extra layer of security when logging into your Keeper Vault or another site or application by requiring a secondary passcode upon logging in.
Enabling Two-Factor Authentication is advised for highly valuable or sensitive accounts (e.g. banking, medical and social media accounts).
Keeper provides two ways to take advantage of 2FA:
- To log into your Keeper Vault.
- To login into any site or application from your Keeper Vault by embedding a Two-Factor code into your records.
To enable 2FA for your Keeper vault, from the Account Dropdown Menu, click Settings > Security, toggle "Two-Factor Authentication" on and select your 2FA method.
Security > Two-Factor Authentication
Two-Factor Authentication Methods
(1) The Text Message toggle is on by default. Select a Region from the dropdown (US+1 by default), enter your 10 digit phone number including your area code and click Next.
(2) To verify that you trust this number and device, enter the Keeper web code that was sent to the phone number you provided. Select your 2FA code duration from the dropdown menu and click Next. Codes will only last for a minute; if you need another code sent, click Send a new code.
You will be prompted for 2FA every time you login to your Vault unless you select an alternative code duration. Business customers may be required to enter the code every login as determined by their Keeper Administrator.
Enter Verification Code
(3) Backup codes will be shown next. If you are unable to receive Two-Factor codes via the phone number you entered, you can enter one of the codes listed instead. Click I have written these codes down to finish.
(1) Toggle "Google and Microsoft Authenticator (TOTP)" on and click Next.
(2) Using the device that runs the Google or Microsoft Authenticator App, scan the QR code provided. The app will then acknowledge the QR code and produce a verification code.
Two-Factor Authentication Sign Up
(3) Enter that verification code and click Next.
You will be prompted for 2FA every time you login to your Vault unless you select an alternative code duration. Business customers may be required to enter the code every login as determined by their Keeper Administrator.
(4) Backup codes will be shown next. If you are ever unable to receive Two-Factor codes, you can enter one of the codes listed instead. Click I have written these codes down to finish.
In order for Azure MFA (using the Microsoft Authenticator app.) to be utilized as a TOTP, the Azure administrator needs to allow the verification method "Verification code from mobile app or hardware token" when setting up MFA in Azure.
Keeper DNA is a Two-Factor Authentication method that uses your smart watch as your second factor.
To use this feature, toggle the switch next to Keeper DNA, then follow these links to set up KeeperDNA on your preferred platform:
(1) At the target website, visit the two-factor authentication screen which is usually located within security settings. It is sometimes referred to as "login verification" or "two-step verification". Screengrab the QR pattern or copy the secret code to your clipboard.
(2) Within a record, click Add Two-Factor Code.
Add Two-Factor Code
(3) Upload the screengrab of the two-factor QR pattern (with security key) associated with the site or application. If there isn't a QR pattern, use the manual entry method. Enter the code given under “Secret Key”, often a 32-digit code and fill out the rest of the fields.
Upload QR Code or Manual Entry Setup
(4) After adding the security key to the record, a two-factor code will be generated inside the Keeper record.
(5) The two-factor code will be regenerated frequently and can then be copied and filled into the site or app when prompted after logging in with a username and password.
Store 2FA Code in a Record
To increase security, Keeper supports FIDO-compatible U2F hardware-based security key devices such as YubiKey and Google Titan keys as a second factor. A user can register up to five security keys. Any one of those keys will unlock the account.
A two-factor authentication method must be set up before you register a security key. This ensures that there is a backup method if the key is not present. Click here to learn how to set-up a two-factor method.
Security Key Setup
- 1.Under Settings > Security > Security Keys select Setup.
- 2.Make sure the security key is NOT already inserted into your USB port and click Next.
- 3.Insert the security key into the USB port, name the key and click Register.
- 4.Tap the sensor on your security key and click Done.
To delete a security key, click Edit within the "Security Keys" section of the Settings menu and click on the trash icon next to the registered key to delete it. If you turn-off the backup two-factor authentication, you will delete the registered keys as well.
KeeperFill for Apps is a convenient tool used to further enhance your experience with the fully-featured Keeper Desktop App. Used in conjunction with your desktop applications, KeeperFill for Apps provides a simple login solution and quick access to your vault records.
Using a hotkey, KeeperFill for Apps also provides autofill features for native desktop applications. Please note, this feature is only available when using the Keeper Desktop application.
KeeperFill for Apps
To configure your Touch ID Magic keyboard fingerprint login capabilities, you must first be running the latest version of macOS (Big Sur 11.5.2 or newer). Once updated, navigate to your computer's System Preferences > Touch ID > Add Fingerprint. Follow the prompts to register your fingerprint to the device.
Mac System Preferences
System Preferences > Touch ID
Fingerprint Successfully Registered
Enable Touch ID in Your Keeper Vault
Once you have registered your fingerprint, log in to the Keeper Desktop App and click on the account dropdown menu in the upper-right corner of your screen, then click Settings > Security and toggle "Touch ID" on.
Enable Touch ID
The next time you login to the Keeper Desktop App, the "Touch ID" button will appear at the login screen. Click Touch ID and when prompted, apply your registered fingerprint to the Touch ID sensor on your keyboard to log in.
Touch ID Login
Touch ID Prompt
Keeper is compatible with Windows Hello, a biometrics-based technology that allows users to authentic and log into their Windows device using biometric facial recognition, fingerprint reader, or pin (available on Windows 10).
To enable Windows Hello Login for Keeper, from the Account Dropdown Menu, click Settings > Security and toggle "Windows Hello Login" on.
Enable Windows Hello Login
Next time you log in to Keeper, click the Windows Hello login button.
Windows Hello Login
Windows Hello will then attempt to authenticate your identity. Once authenticated, you will be automatically logged into Keeper.
Windows Hello Prompt
When accessing your Keychain, a popup will be triggered asking you to enter your Mac password. This is because Keeper Desktop App saves local storage protected by a key saved in Keychain Access which is used to encrypt local app data. Enter your Mac password and click Always Allow.
Keychain Access Password Popup
To backup your records or generate a Shared Records Report, from the Account Dropdown Menu click Settings > Export. There are three formats for export: CSV, JSON and PDF file. To begin backup, select your preferred file format and click Export.
Export File and Shared Records Report
The instructions below are for uninstalling Keeper Desktop App (Keeper Password Manager) for Mac and Windows OS.
Uninstalling the Keeper Password Manager will delete the data from Keeper on the local device. Data stored in Keeper's Cloud Security Vault is NOT erased.
- 1.Drag the Keeper Password Manager app to the Trash.
- 2.Empty the Trash.
Uninstalling Keeper Password Manager will also remove KeeperFill Browser Extension from Safari. Data stored in Keeper's Cloud Security Vault will NOT be erased.
Uninstall Keeper Password Manager
- 1.Navigate to the Windows Start Menu > Settings > Apps & Features.
- 2.Within Apps & features, click the Keeper Password Manager application.
- 3.Click Uninstall.
- 4.You will be warned that the app and its related info will be uninstalled, click Uninstall to confirm.
- 5.User Account Control will ask you to confirm making changes to your device, confirm the changes by clicking Yes.