Web Vault & Desktop App
Comprehensive guide for the Keeper Web Vault and cross-platform, Keeper Desktop Application.
Welcome to Keeper!
Keeper is simple to install, easy to use, and you’ll be up and running in just minutes.
With Keeper, your passwords, logins and other personal information are saved in a private, digital vault. It is here where you can view and edit all of your website login credentials and details, as well as store important files and photos.
Watch the video below for an overview of the vault with master password login.
Keeper End-User Vault Overview (Master Password Login)
If you've already signed up for Keeper on your mobile devices, you can simply login to the Web Vault or Desktop App (links below) with your email address, Master Password and Two-Factor Authentication (if enabled on your account).
Login to the Keeper Web Vault:
Download the Keeper Desktop App:
Upon Login, you may encounter a "device approval" request. If you are attempting to log in on an unrecognized device or browser, a device approval must take place before you can proceed to your Keeper vault. Users have three methods of approval to choose from: Email Verification, Keeper Push or Two-Factor Authentication.
If you select
Keeper Push, a notification (push) will be appear in your Keeper vault at an approved device or browser.
Yesto approve the new device.
Once your device has been approved, you will be prompted for 2FA (if enabled), then you will enter your Master Password to proceed to your vault.
To create your Keeper account, first enter your email address then you will be asked to create and confirm a Master Password which will be the only password you have to remember. We recommend that you choose a strong Master Password that is only used for Keeper -- don't forget your Master Password! To finalize your account and proceed to your vault, you will be asked to enter the verification code that was sent to your email.
Once you Keeper vault is created, you will be guided through a "Quick Start" walkthrough, that will help you either import passwords from your browser or other password manager or manually create new records.
Watch the video below to learn how to create your account.
Create Your Account
Users who login with an existing identity provider have various login choices. Users can either enter their email address at the login screen or click
Enterprise SSO Loginand select their login method from the dropdown menu as determined by their Keeper administrator (Enterprise Domain Login or Master Password Login).
Your passwords, logins, credit card numbers, bank accounts and other personal information are saved in your private digital Vault (as "Records") and are encrypted on your device using 256-bit AES. To begin, simply click
+ Create New > Record
- Name Your Record
- Enter Your Email or Username
- Enter the Website Address
Watch the video below to learn how to create a record.
Create a Record
Keeper can also import logins and passwords directly from your web browser, another password manager, or a text file (.csv).
Account Dropdown Menu > Settings > Import
To import passwords from your web browser, you must first install the Keeper Import Tool. To begin the installation, from the Account Dropdown Menu, click
Settings > Import > Import. If you came fresh into the Web Vault, you can download the import tool by clicking
Keeper will then walk you through a few steps to download the Keeper Import Tool:
- 1.Copy the code Keeper provides (you will need this when prompted in the Keeper Importer).
- 2.If you are using a PC - click
- 3.If you using a Mac - double click the "KeeperImport.zip" file located in your downloads and double click on the "Keeper Import App" to start the import process. You will encounter a few Keychain permission windows that will require you to enter your computer password to allow Keeper to access your web browsers.
- 4.Keeper will then ask for the code you received from step one; paste the code and click
Once the installation is complete, Keeper will report websites and their associated logins and passwords directly from your web browser. You can then scroll though the report and uncheck those you do not wish to import. Once you have finished reviewing the report, click
Add to Keeperto import the selected password.
Watch the video below to learn how to import your passwords from web browsers.
Import Your Passwords
Keeper can import logins and passwords from other password managers. From the Account Dropdown Menu, click
Settings > Import
Click on the password manager you want to import from, then click
View Import Instructions. Once you have created the export file per the instructions, drag and drop the file into Keeper's "Drop a File Here" window.
A display window will appear allowing you customize how you want the import information organized. There are six general fields across the top of the scrollable window. Clicking on the titles of each one allows you to change the organization of that column via a dropdown menu.
Keeper can import passwords from the following password managers:
Keeper can also import logins and passwords from a text file (.csv). To begin, from the Account Dropdown Menu, click
Settings > Import. After selecting
Text File (.csv)click
View Import Instructionsand follow the instructions provided. Once you have created the export file per the instructions, drag and drop it into Keeper's "Drop a File Here" window.
Please see the full description and file format of our CSV import here:
Folder,Title,Login,Password,Website Address,Notes,Shared Folder,Custom Fields
• To specify subfolders, use backslash "\" between folder names
• To make a Shared Folder specify the name or path to it in the 7th field
Example 1: Create a regular folder at the root level with 2 custom fields
Example 2: Create a shared subfolder inside another folder with edit and re-share permission
Keeper Download Page
Keeper allows you to organize your records by folders and subfolders. To create a folder, click on
+ Create New > Folder.
To create a subfolder, right-click on the existing/parent folder and click
Watch the video below to learn how to create a folder.
Create a Folder
Drag-and-drop the record(s) you would like to store in a folder or subfolder and click
Create shortcut. To move multiple records, hold "shift" and click the items to drag-and-drop.
Move Records with Drag-and-Drop
To learn how to delete a record, watch the video below.
By right-clicking on a record you can create a record "Favorite", used to easily locate your most frequently visited sites.
Securely create, share and manage records and folders with existing Keeper users such as family, friends and colleagues.
While viewing a record click
Options > Sharing
Enter the email(s) of the Keeper users then choose their permission type from the dropdown menu.
Watch the video below to learn how to share a record.
Share a Record
Shared folders allow you to share multiple records at once and new records can be added to the folder as needed.
To create a Shared Folder, click
Create New > Shared Folder.
Create New > Shared Folder
New Shared Folder Creation
Choose where you would like to nest the folder using the dropdown menu and enter a name for the folder. Set the User and Folder Permissions and click
Watch the video below to learn how to create a shared folder.
Create a Shared Folder
Identity & Payments is the place for you to store your personal contact/address information and credit card numbers safely.
Identity & Paymentsenter a username and click
+ Phone Numberand
Enter the corresponding personal information and click
To store a payment card, click
Payment Cards, enter the card information and click
Watch the video below to learn how to store your personal and payment information.
Store Personal and Payment Information
Create New > Recordand select "Payment Card" from the dropdown menu, enter a title and click
Enter your payment card info and click
Long, random passwords that are created for each login help protect your information and reduce your exposure to data breaches. Keeper generates and securely stores strong, random passwords for all of your sites and apps with the click of the dice.
Custom Fields allow you to store additional data within a record, such as the answer to a site's security question or a passport number. Any record created with one of Keeper's new Record Types, can be further enhanced with various custom field options.
Custom field labels can be edited and if you are creating multiple custom fields, you can drag and drop them in your preferred order.
Available Custom Fields:
- URL (website address) used for Autofill
- Security Question & Answer
- Multi-line Text
- Address (new or linked)
- Pin Code (4-digit numeric)
- Phone Number
- Payment Card (new or linked)
- Hidden Field
Within a "general" record type, custom fields can be created in pairs: a "Custom Field Name" and a "Custom Field Value".
Auto-launch allows you securely and quickly navigate to your favorite websites. Simply click a record's Website URL to launch and login with Keeper in a new window.
Security Audit gives your passwords an overall security score and lets you clearly see what passwords are weak from a password strength visual indicator (red being the weakest, green being the strongest).
You can edit a record's password by clicking on the record from the provided list (you will still need to update the password at the record's website to match the new password in your Vault).
Keeper provides you with the ability to restore previous versions of a record by clicking
Options > Record History
Select the version of the record you want to review/and or restore based on the last modified date and time.
Click the info icon to review specific record version information. Click
Restoreto revert the record back to the selected version.
Give trusted family and friends access to your Keeper Vault in the event of an emergency or loss of life. You can designate up to five emergency contacts and decide how much time should pass before their access is granted. From the Account Dropdown Menu, click
Account > Emergency Access
Trusted Usersand enter the email addresses of up to 5 contacts. Set their "Delay access" duration and click
In order for the recipient to accept the request, you must first establish a "sharing" relationship with them if one hasn't already been established through our sharing features.
If the recipient is an existing Keeper user, they will receive an email like the one below notifying them you want to establish a sharing relationship, at which point they will be prompted to login to their Keeper Vault and accept or deny the request. Once the recipient has accepted the request, you will be notified and then you must send the Emergency Access invite once more.
After the recipient accepts the emergency access request in their vault, they will notice a red notification indicator appears in the Emergency Access section of their Account Settings. There they can then navigate to
Declinethe emergency access request and proceed to
Login(once the access delay has passed, if enabled).
Once requests are accepted, trusted users will appear within the Emergency Access section of your vault.
For extra security on supported sites and apps, click
+ Add Two-Factor Codeto store Two-Factor Authentication codes for standard TOTP (Time-Based One Time Passwords) in your Keeper records.
Two-Factor Codes Integration
Storing Two-Factor Codes in your vault has several advantages:
- Keeper two-factor codes are more secure than using SMS text messages.
- Two-factor codes stored in Keeper are protected with strong Zero-Knowledge encryption.
- They can be auto-filled quickly while logging in to a site, saving time and reducing friction.
- Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.
- Since Keeper records are shareable, Two-Factor Codes are always available to everyone who has access to the record.
Record Containing a Two-Factor Code
With the KeeperFill browser extension, you can autofill your passwords and save new login credentials to your vault. KeeperFill is available for every web browser (Chrome, Firefox, Safari, IE, Edge, and Opera).
Watch the video below to learn how to autofill with KeeperFill.
Autofill with Keeperfill
KeeperFill makes it easy to change your passwords. When visiting a site's "Change Password" form, you will receive a prompt from Keeper asking if you would like help changing your password. By clicking
YesKeeper will walk you through a few quick steps to change your password and simultaneously update the record in your vault. These steps will include a series of prompts detailing the following actions:
- Autofill your old/current password
- Automatically generate and autofill a new secure password
- Confirm the changes and save them to your vault
KeeperFill's Prompt to Change a Password
Watch the video below to learn how to change your passwords with Keeper.
Changing Your Passwords
Keeper offers Secure File Storage to protect your confidential files, photos and videos. Securely upload and store files such as passport photos, medical cards, drivers licenses, tax and loan documents, videos and any other private file to your Keeper vault.
Files or Photosto upload a file, or simply drag-and-drop the file directly into your Vault.
Drag-and-Drop a File Directly Into Your Vault
BreachWatch is a powerful secure add-on feature that monitors the internet and dark web for breached accounts matching records stored within your Keeper vault. BreachWatch alerts you so that you can take immediate action to protect yourself against hackers. Once activated, BreachWatch continuously monitors for compromised credentials and notifies you if any of your records are at risk.
To start your BreachWatch scan, from the left navigation menu, click
BreachWatch > Let's Begin
BreachWatch will then scan your records and report any risks associated with them. Clicking each record listed will allow you view the steps needed to resolve each risk.
Resolving the risk requires you to change the password at the affected website. Once you have done that, be sure to update the corresponding record in your Keeper Vault with the same password.
If you click
Ignore, then that record will be skipped on future scans until the password is reset. You may also do nothing (deferring a response) and leave the risky password unchanged and thus still at risk.
Users can change specific features like language, theme and Two-Factor Authentication in the Settings menu. You can access the Settings menu from the Account Dropdown Menu.
- Choose a Theme: Select from a number of available themes. The theme will affect coloring of buttons, backgrounds, icons and other components.
- Clipboard Expiration: Desktop only, this will clear any data copied to the clipboard via a copy button after a period of time. Note: If your operating system maintains a clipboard history, this information may still be available after it has been cleared.
- Choose another language: English US & UK, Spanish, Japanese, Romanian, Chinese Simplified & Traditional, French, Korean, Russian, Arabic, Greek, Dutch, Slovak, Brazilian Portuguese, Hebrew, Polish, German, Italian, and Portuguese
- Record Type Sorting: Adjust the order that record types show in the "Create new" dropdown.
- Master Password: Allows you to reset your master password. You must re-enter your current master password in order to change it.
- Security Question: Allows you to reset your security question. You must re-enter your current master password in order to change it.
- Email Address: Allows you to change the email address associated with your account. You must re-enter your current master password in order to change it.
- Delete All Owned Records: This will delete all records from your vault that you own. Records that have been shared, will still be shared. Deleted records will be moved to the trash can. To permanently delete them, you must also empty your trash.
- Auto-Logout: Logout of Keeper after a number of minutes of inactivity. On the web vault, this is tied to the browser extension settings. On desktop you have the ability to also wipe application memory and restart the desktop app on logout.
- Stay Logged In: If Auto-Logout is enabled, this setting will maintain the inactivity timer and preserve your login if the system is rebooted or your browser is restarted. If 'Stay Logged In' is disabled, you will be logged out if the application closes.
- Enable Self-Destruct: This setting will remove any locally stored and cached data if there have been 5 failed login attempts. If you have a paid plan where your data is synced to the cloud, the impact should be minimal. On your next successful login, the data will be downloaded.
- Two-Factor Authentication: Enable a second factor of authentication such as SMS, RSA token, DUO security token, Authenticator or KeeperDNA. This will be used in addition to device verification and a master password.
- Auto-Approve devices from Recognozed IP Address(es): Device approval is needed for any client to login for the first time. The device token is saved per device. If you would like to automatically skip device approval when you are on an IP that matches another already approved device, this will skip the check.
- Touch ID (MacOS only): Login to the keeper vault using biometrics. This replaces the first factor (your master password), and second factors will still be required.
- Accessibility mode: Enable this to adjust accessibility settings.
- Status and Toast messages: Toast messages are small popups that show up in the bottom right after certain actions have been completed. This setting controls the duration of the toast messages.
- Import: Import passwords from browsers or other password managers. Web imports are typically file based. The desktop app has more complete automated imports from some other solutions.
- Export: Export your vault to CSV, JSON or PDF. This includes the ability to include records that have been shared with you that you are not the owner of.
- Shared records report: Generate a report in CSV, JSON or PDF format. This provides a list of records that you own, and who those records are shared with.
Two-Factor Authentication (2FA) provides an extra layer of security when logging into your Keeper Vault or another site or application by requiring a secondary passcode upon logging in.
Keeper provides two ways to take advantage of 2FA:
- To log into your Keeper Vault.
- To login into any site or application from your Keeper Vault by embedding a Two-Factor code into your records.
To enable 2FA for your Keeper vault, from the Account Dropdown Menu, click
Settings > Security, toggle "Two-Factor Authentication" on and select your 2FA method.
(1) The Text Message toggle is on by default. Select a Region from the dropdown (US+1 by default), enter your 10 digit phone number including your area code and click
(2) To verify that you trust this number and device, enter the Keeper Web code that was sent to the phone number you provided. Select your 2FA code duration from the dropdown menu and click
(3) Backup codes will be shown next. If you are unable to receive Two-Factor codes via the phone number you entered, you can enter one of the codes listed instead. Click
I have written these codes downto finish.
(1) Toggle "Google and Microsoft Authenticator (TOTP)" on and click
(2) Using the device that runs the Google or Microsoft Authenticator App, scan the QR code provided. The app will then acknowledge the QR code and produce a verification code.
(3) Enter that verification code and click
(4) Backup codes will be shown next. If you are ever unable to receive Two-Factor codes, you can enter one of the codes listed instead. Click
I have written these codes downto finish.
Keeper DNA is a Two-Factor Authentication method that uses your smart watch as your second factor.
To use this feature, toggle the switch next to Keeper DNA, then follow these links to set up KeeperDNA on your preferred platform:
(1) At your target website, visit the two-factor authentication screen which is usually located within security settings. It is sometimes referred to as "login verification" or "two-step verification". Screengrab the QR pattern or copy the secret code to clipboard.
(2) Within a Keeper record, select
Edit > Add Two-Factor Code
(3) Upload the screengrab of the Two-Factor QR pattern (with security key) associated with the site or application. If there isn't a QR pattern, use the manual entry method. Enter the code given under “Secret Key”, often a 32-digit code and fill out the rest of the fields.
(4) After adding the security key to the vault record a Two-Factor Code will be generated inside the Keeper record.
(5) The two-factor code will be regenerated frequently and can then be copied and filled into the site or app when prompted after logging in with a username and password.
To increase security, Keeper supports FIDO-compatible U2F hardware-based security key devices such as YubiKey and Google Titan keys as a second factor. A user can register up to five security keys. Any one of those keys will unlock the account.
Settings > Security > Security Keysselect
- 2.Make sure the security key is NOT already inserted into your USB port and click
- 3.Insert the security key into the USB port, name the key and click
- 4.Tap the sensor on your security key and click
KeeperFill for Apps is a convenient tool used to further enhance your experience with the fully-featured Keeper Desktop App. Used in conjunction with your desktop applications, KeeperFill for Apps provides a simple login solution and quick access to your vault records.
Using a hotkey, KeeperFill for Apps also provides autofill features for native desktop applications. Please note, this feature is only available when using the Keeper Desktop application.
KeeperFill for Apps
To configure your Touch ID Magic keyboard fingerprint login capabilities, you must first be running the latest version of macOS (Big Sur 11.5.2). Once updated, navigate to your computer's System Preferences > Touch ID > Add Fingerprint. Follow the prompts to register your fingerprint to the device.
Mac System Preferences
System Preferences > Touch ID
Fingerprint Successfully Registered
Enable Touch ID in Keeper Vault
Once you have registered your fingerprint, log in to the Keeper Desktop App and click on your account email address in the upper right corner of your screen, then click
Settings > Securityand toggle "Touch ID" on.
The next time you login to the Keeper Desktop App, the "Touch ID" button will appear at the login screen. Click
Touch IDand when prompted, apply your registered fingerprint to the Touch ID sensor on your keyboard to log in.
Touch ID Prompt
On supported MacBook Pro devices, Keeper supports the use of Touch ID to login to your Vault. You can enable Touch ID from Keeper's Settings menu.
The next time you login to Keeper, the Touch Bar will show the Touch ID button, tap it.
Apply your registered fingerprint on the Touch ID sensor to log in.
Keeper is compatible with Windows Hello, a biometrics-based technology that allows users to authentic and log into their Windows device using biometric facial recognition, fingerprint reader, or pin (available on Windows 10).
To enable Windows Hello Login for Keeper, from the Account Dropdown Menu, click
Settings > Securityand toggle "Windows Hello Login" on.
Enabling Windows Hello Login
Next time you log in to Keeper, Windows Hello will first attempt to authenticate your identity. Once authenticated, you will be automatically logged into Keeper.
Windows Hello & Keeper
When accessing your Keychain, a popup will be triggered asking you to enter your Mac password. This is because Keeper Desktop App saves local storage protected by a key saved in Keychain Access which is used to encrypt local app data. Enter your Mac password and click Always Allow.
Keychain Access Password Popup
To backup your records, from the Account Dropdown Menu click
Settings > Export. There are three formats for export: PDF, .csv File, and .json File. To begin backup, simply click
Export Nowunder the file format you would like to export to.
The instructions below are for uninstalling Keeper Desktop App (Keeper Password Manager) for Mac and Windows OS.
- 1.Drag the Keeper Password Manager app to the Trash.
- 2.Empty the Trash.
Uninstall Keeper Password Manager
- 1.Navigate to the Windows Start Menu > Settings > Apps & Features.
- 2.Within Apps & features, click the Keeper Password Manager application.
- 3.Click Uninstall.
- 4.You will be warned that the app and its related info will be uninstalled, click Uninstall to confirm.
- 5.User Account Control will ask you to confirm making changes to your device, confirm the changes by clicking Yes.