Web Vault & Desktop App

Quick start guide for the Keeper Web Vault and cross-platform desktop application.

Master Password Login

If you signed up for Keeper on your mobile devices, you can simply login to the Web Vault or Desktop App with your email address, master password and two-factor authentication (if enabled on your account).

Login to the Keeper Web Vault from:

Download the Keeper Desktop App from:

New User Registration

First, you must choose a Master Password. We recommend that you select a strong Master Password that is only used for Keeper, and not used for any other service. Do not forget your Master Password. Enterprise customers may enforce a Master Password that adheres to company guidelines.

Enterprise users who login with SSO do not require selection of a Master Password.

Enterprise SSO Login

Customers who login with an existing identity provider will click on "Use Enterprise SSO Login". Type in the enterprise domain provided by your Keeper administrator.

Creating Records

Keeper protects you against cybercriminals with a secure and convenient password manager. Your passwords, logins, credit card numbers, bank accounts and other personal information are saved in your private digital vault that is encrypted on your device using 256-bit AES.

To create a new record, click the + Create New button.

Create New Record

Importing Passwords

Keeper Web Vault can quickly import passwords from your computer and web browsers. To start the process, click on the Account > Settings > Import. If you have started the import process from a mobile app and came to the web vault, the web vault will ask you to install the Keeper Import Tool. If you came fresh into the Web Vault, you can download the import tool by clicking on the Import button.

Click on Install to start the download process. Keeper will walk you through the process and ask you to double click on the Keeper Import installer from your Downloads folder.

  • Copy the code Keeper gives you. You will need this when prompted in the Keeper Importer.

  • If you are using a PC, you can just click on Run when prompted.

  • If you are on a Mac, Double click the KeeperImport.zip file in your downloads. Then double click on the Keeper Import App to start the import process. You will encounter a few Keychain permission windows that will need your computer password to allow Keeper to access your web browsers.

Keeper will then ask for your token. Paste the token and click Import. Keeper will report websites that you can scroll though and uncheck if you don't want specific websites stored. Click Add to Keeper to import the selected passwords.

Import Passwords from Browsers

Keeper can also import records and passwords from text file (.csv) or other password managers. Click on Settings > Import to view the options. After selecting the password manager you want to import from, click View Import Instructions and follow the step-by-step import instructions.

Keeper can import records and passwords from text file (.csv) or other password managers. Click on Settings > Import to view the options.

Import instructions can also be found under the Import Records section in the left-hand column of these user guides.

Creating Folders and Subfolders

Keeper allows you to organize your vault records by folders and subfolders.

To create a folder, click on + Create New and **select Folder. To create a Subfolder, navigate to the parent folder first, then **click the + Create New button and **select Folder.** You can also use the right-click menu to create a subfolder.

Moving & Shortcuts

Multiple records and folders can be moved between folders, or "shortcuts" can be created. Shortcuts are like alias files that can exist in two or more places, that when edited, change together. To move a single folder or record, click and drag that item to the destination. Confirm the action by clicking Create shortcut or Move. To move multiple items, hold Shift and click the items, drag and drop.

Moves and shortcuts can also be performed by right-clicking on a record or folder to get a contextual menu. Clicking on the Options menu will also provide the ability to Move To and Create Shortcut.

Dynamic Search

Keeper's search feature automatically displays relevant records as you type. For your convenience, dynamic searching works in all fields within each Keeper record.

Filter Records

To filter by Name or Date, use the Name dropdown menu.

To filter by specific record types, use the All Records dropdown menu and buttons.


Deleted Records can be accessed from the left navigation menu.

Password Generator

Long, random passwords that are generated for each website help protect your information and reduce your exposure to data breaches. Keeper's Password Generator instantly creates strong, random passwords with a click of the Dice.

Custom Fields

Custom Fields can be used to store additional data such as the answer to a security question, a pin number, an account number or anything else that makes the record valuable. Custom fields are created in pairs; the "Custom Field Name" and the "Custom Field Value". The custom field value can be used to autofill fields via the browser extension.

To create a custom field while viewing a Keeper record, first click Edit then click on the Custom Field heading and observe the custom field name and value appear. Custom fields can be arranged in any order by dragging them in the desired order.

Adding "Website Address" to the Custom Field Name and a URL to the Custom Field Value allows you to associate the username and password credential of the record to an additional website if they use the same identity.


One-click login lets you securely access your favorite websites. From your Keeper record, simply click the Website Address field and your site will launch.


With KeeperFill, you can autofill your login credentials and save new website information to your secure Keeper vault. The KeeperFill browser extension is available for Chrome, Firefox, Safari, Edge, Opera and Internet Explorer. To learn more about KeeperFill, check out our guides under KeeperFill Browser Extensions.

The video below will show you how to:

  • Install KeeperFill for Chrome

  • Create Records with KeeperFill

  • Login to your Sites and apps with KeeperFill

  • Import Existing Records to your Keeper Vault

  • Share Records

  • Share Folders

Secure File Storage

Securely store files such as your passport photo, secret photos, drivers license, loan documents, videos and any private file to your Keeper vault. You can also securely share your private files and documents with other Keeper users from vault to vault. Simply click the + Files or Photos button or drag-and-drop your files.

Note: Secure File Storage is available as a Secure Add On.

The Web Vault supports file sizes up to 100MB in size and the Desktop App supports file sizes up to 5GB in size.

Your file usage cannot exceed the purchased storage space. Attaching a file larger than the remaining space will result in an error.

Add Two-Factor Code (TOTP)

For extra security on supported websites and apps, use Keeper to store Two-Factor Authentication codes for standard TOTP (Time-Based One Time Passwords).

Two-Factor Codes Integration

Storing Two-Factor Codes in the vault has several advantages:

  • Keeper two-factor codes are more secure than using SMS text messages.

  • Two-factor codes stored in Keeper are protected with strong Zero-Knowledge encryption.

  • They can be auto-filled quickly while logging in to a site, saving time and reducing friction.

  • Keeper records are securely backed up so if you lose a device you don’t have to reset all the codes.

  • Keeper records are shareable. If you have multiple people that need to log in with the same credentials, they won’t need to track down the person who has the only device containing the code.

See instructions for Setting up Two-Factor Codes for Logging into Websites and Applications.

Sharing Records & Folders

You can securely share individual records or entire folders with other Keeper users. To share a single record with another user, open the Keeper record and click on Options and then Sharing. Enter the emails, then choose Can Edit, Can Share, Can Edit & Share, Read Only, or Transfer Ownership.

You can also create a shared folder. Shared folders allow you to share any number of records across your personal folders with one or more Keeper users.

To create a shared folder:

  1. Click on the + Create New button.

  2. Select Shared Folder.

  3. Use the drop-down menu to select where you would like this folder to be located.

  4. Give the folder a name then click on Create.

  5. You can add Records and Users by clicking on the Edit button. To add records, click the Records tab and then click on the Add Records search field to select which individual records you would like to add.

  6. Use the Permissions drop-down menu to **give each record a permission. Can Edit means the record's contents can be edited by users of the shared folder, Can Share means the record can be shared by users of this shared folder. Can Edit & Share means that users can both edit and share, and Read Only** means that the users can only view the record.

  7. To add users, click the Users tab and then click on the Email or Team Name search field. You can either select an **existing individual's email address or team or type in the email address of a new user. If you input a new email address, click on Add** to confirm the addition of the user.

  8. Using the User Permissions drop-down menu, assign each user a permission. Can Manage Users means the user can add or remove other users from the shared folder. Can Manage Records means the user can add or remove any records in this folder. Can Manage Users & Records means the user can do both. No User Permissions means the user can’t manage others or the records.

  9. Once finished, click Save.

Shared Folder Permissions
User Permissions

For security reasons, you can only share records with existing Keeper users.

Default Folder Settings

Default Folder Settings can be configured to apply specific settings as a default configuration. There are four settings that can be configured. The first two apply to the users added to the shared folder: Can Manage Users and Can Manage Records. The second two apply to the records added to the shared folder: Can Edit Record and Can Share Record.

To set default settings:

  1. Click Edit on the Shared Folder.

  2. Click Default Folder Settings.

  3. Select the check box for each of the desired default settings.

Once the configuration is set, it will only affect users and records added after enabled. To change users or records added prior to the default settings, those items will need to be changed either individually or through a bulk change.

Account Emergency Access

Give trusted family and friends access to your Keeper Vault in the event of an emergency or loss of life. You can designate emergency contacts and decide how much time should pass before access is granted. Account Emergency Access can be found under the Account Menu > Account > Emergency Access. The amount of time between request and access granted can be set up to 3 months per contact.

Emergency Access
Trusted Users

Record History

Keeper provides the ability to save and restore previous versions of your records. To restore a version of a record, click on the Options button and select Record History.

Select a version of the record you want to review based on the last modified date and time.

Review the record info by clicking on the record Info icon. To restore the record, click on the Restore icon. To confirm the restore, click on Yes in the popup window.

Deleted Records

Deleted records can be reviewed and restored by visiting the Deleted Items section in the left navigation menu.

Review the deleted records and click on a record to review its information. To restore a deleted record, click on the Restore icon. To confirm the restore, click on Yes in the popup window.


BreachWatch monitors the dark web for breached accounts and alerts you so you can take action to protect yourself against cybercriminals.

Note: BreachWatch is available as a Secure Add On.

To start your BreachWatch scan, navigate to the BreachWatch section of the left navigation menu. Click on Let's Begin then click the Scan button.

BreachWatch will scan your records and report the risks associated with them. Clicking Scan Results will show the records at risk. Clicking on the record will allow users to resolve those risks.

Resolving the risk requires you to change the password at the affected website. Be sure to update the record in the Keeper Vault with the same password.

Security Audit

Security Audit allows the user to quickly see what passwords are weak. Click on the left navigation menu and then select Security Audit. You can edit that record's password by clicking on the name of the record in the list and then clicking the Edit button.

Identity & Payments

Identity & Payments is the place for you to store your personal address information and your credit card numbers safely. KeeperFill can autofill this information when making a purchase online. Click on the left navigation menu and then select Identity & Payments.


Once you have your address and credit card information stored, you can then use KeeperFill to securely autofill the information into websites. Make sure you are logged into the **[Keeper Browser Extension](https://docs.keeper.io/user-guides/browser-extensions) and then click the Keeper lock** that appears in an address or a credit card field.


Users can change specific features like Language, Theme and Two-Factor Authentication in the Settings menu. To access the Settings menu, click the Account Dropdown Menu. Settings are broken down into tabs: General, Security, KeeperFill, Import and Export.

Account Dropdown
Account Dropdown


Under the General Settings you can:

  • Choose a new color theme

  • Set Clipboard Expiration*

  • Choose another language: English US & UK, Spanish, Japanese, Romanian, Chinese Simplified & Traditional, French, Korean, Russian, Arabic, Greek, Dutch, Slovak, Brazilian Portuguese, Hebrew, Polish, German, Italian, and Portuguese

  • Reset Master Password

  • Reset Security Question

  • Change Email Address

  • Find and delete duplicate records

  • Delete All Owned Records

*Clipboard Expiration is on the Desktop only.


Under the Security Settings you can setup:

  • Auto-Logout

  • Enable Self-Destruct

  • Turn on Two-Factor Authentication

  • Setup U2F Security Keys

  • Windows Hello Login

  • Change PBKDF2 Iterations

Windows Hello Login

Keeper is compatible with Windows Hello, a biometrics-based technology that allows users to authentic and log into their Windows device using biometric facial recognition, fingerprint reader, or pin (available on Windows 10). If Windows Hello is configured on a user's device and enabled in Keeper, this eliminates the requirement for users to enter their Master Password at the Keeper login screen, further expediting the login process.

Enabling Windows Hello

  1. Within your Vault, navigate to Settings.

  2. Click Security.

  3. Toggle Windows Hello Login "ON".

  4. Once you have read the warning notification, click Enable to accept.

Window's Hello Login Enabled in Keeper's Security Settings

Windows Hello Setup

If Windows Hello is not yet configured on your device, you will receive a prompt to open your Windows Settings to configure it. Once you have configured Windows Hello, close out of the Settings window and return to your Vault to proceed with steps 3 & 4 above (Enabling Windows Hello).

Windows Hello Configuration Prompt

Logging in with Windows Hello

Next time you log in to Keeper, Windows Hello will first attempt to authenticate your identity. Once authenticated, you will be automatically logged into Keeper.

By clicking Cancel you will be returned to the login screen to log in with your Master Password instead.

Windows Hello and Keeper

Two-Factor Authentication

Two-Factor Authentication (2FA) provides an extra layer of security for logging in by adding a passcode after the username & password are entered. Using 2FA is advised for highly valuable or sensitive accounts.

Keeper provides two ways to take advantage of 2FA:

  1. To log into the Keeper Vault.

  2. To login into any site or application from the Keeper vault by embedding a Two-Factor code as an extra field into records. Using 2FA is advised for important or sensitive sites like banks, medical records, email and social media.

Set Up Two-Factor codes for Logging Into the Keeper Vault:

Under Account Dropdown > Settings > Security Tab > Two Factor Authentication > Setup you can choose a 2FA method. The methods are:

  • Text Message (via SMS on a mobile phone)

  • Authenticator Apps (e.g. Google and Microsoft) which use Time-based One Time Passwords (TOTP).

  • RSA SecurID (Business or Enterprise customers only)

  • DUO Security (Business or Enterprise customers only)

  • Apple Watch / Android Wear (KeeperDNA). This will send the Two Factor code directly to your watch.

Text Message

  1. The Text Message toggle is on by default. Select a Region (US+1 by default) and enter your 10 digit phone number that includes your area code. Click on Next.

  2. You will see a prompt that says your Two-Factor Authentication code as been sent. Keeper then will ask to Enter your code. Enter in the Keeper code that was sent to the phone number you added. This verifies that you trust this number and device. Click on Next. Codes only last for a minute so if you need another code sent, click on Send a new code.

  1. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter in one of the ones shown instead. Click on I have written these codes down to finish.

Note: Your 2FA code will need to be entered every time upon Web Vault login, unless you check the box "Don't ask for 30 days". Business customers may be required to enter the code every login.

Google and Microsoft Authenticator (TOTP)

  1. Toggle the Google and Microsoft Authenticator (TOTP) on. ** Click Next**.

  2. Using the device that runs the Google and Microsoft Authenticator App, scan the QR code on the screen. The app will acknowledge the QR code and produce a verification code. Enter that verification code back into Keeper. Click Next.

  1. Backup Codes will be shown next. If you are unable to receive Two-Factor codes via that device, you can enter in one of the ones shown instead. Click on I have written these codes down to finish.

Note: Your 2FA code will need to be entered every time upon Web Vault login, unless you check the box "Don't ask for 30 days". Business customers may be required to enter the code every login.

If you are not receiving SMS messages from Keeper, please use the TOTP method or contact support@keepersecurity.com to troubleshoot the issue.

Keeper DNA

Keeper DNA is a Two-Factor Authentication method that uses your smart watch as your second factor.

To use this feature, toggle the switch next to Keeper DNA, then follow these links to set up Keeper DNA on your platform:

To turn off Two-Factor Authentication, toggle the Two-Factor Authentication setting to Off in Settings > Security.

Set Up Two-Factor Codes for Logging into Websites and Applications:

  1. On the target website, visit the two-factor authentication screen which is usually located within security settings. It is sometimes referred to as "login verification" or "two-step verification". Screengrab the QR pattern or copy the secret code into your clipboard.

  2. From a Keeper record, select Edit and then Add two-Factor Code

  3. Upload the screen grab of the Two-Factor QR pattern (with security key) associated with the site or application. If there is no QR pattern, use the manual entry method. Enter the code given under “Secret Key”, often a 32-digit code and fill out the rest of the fields.

  4. After adding the security key to the vault record a Two-Factor Code field will be generated inside the record.

  5. The Two-Factor code will be regenerated frequently and can then be filled into the site or app that will prompt for it after logging in with a username and password.

Security Keys

To increase security, Keeper supports FIDO-compatible U2F hardware-based security key devices such as YubiKey and Google Titan keys as a second factor.

Note: A two-factor authentication method must be set up before you register a security key. This insures that there is a backup method if the key is not present. Follow this link to set up a two-factor method.

  1. Under Settings > Security > Security Keys select Setup.

  2. Make sure the security key is not in the computer and click on Next.

  3. Insert your security key into a USB port. Give the key a name. Click Register.

  4. Tap the sensor on your security key. The key is now registered. Click Done.

A user can register up to 5 security keys. Any one of those keys will unlock the account.

NOTE: To delete a security key, click on Edit under the Security Key section and then click on the trash can by the registered key. If you turn off the backup two-factor authentication, you will delete the registered keys as well.


KeeperFill Browser Extensions

With KeeperFill, you can autofill your passwords and save new passwords to your vault. The KeeperFill browser extension is available for every web browser.

You can learn more about our extension under KeeperFill Browser Extensions.

Install KeeperFill from https://keepersecurity.com/download

KeeperFill for Apps

KeeperFill for Apps provides autofill features for native desktop applications using a hotkey. This feature is only available when using the Keeper Desktop application.

A native application is an app that is developed specifically for a certain device or platform.

KeepeFill for Apps

Record Favorites

A record favorite is one that is marked to be quickly displayed under Favorites in the filter settings. To mark a record as a favorite, click on Options > Add to Favorites. You can also right click on a record and choose Add To Favorites. To see all your record favorites, click on filter menu at the top screen and choose Favorites.

Password Import

Keeper can import records and passwords from other password managers and .csv files. To do this click on the Account Dropdown > Settings > Import.

Keeper can import from the following password managers:

This requires an export file from those products. Click on the password manager you want to import from and then click on View Import Instructions. Follow the instructions provided. Once you have the export file from that manager, drag and drop it into Keeper's Drop a File Here window.

Make sure the export has the extension at the end of the file name. Example: export.csv

The import process allows you customize how you want the information organized. There are six general fields across the top of the scrollable window. Clicking on the titles of each one allows you to change the organization of that column via a drop down menu. Note the content of each column and change the title of each column to represent that info. Example: If you see a column of URLs and the column title says Notes, change that column title to URL. Once column titles are set, click on Import.

Bulk Import from .CSV File

File Format: Folder, Title, Login, Password, Website Address, Notes, Shared Folder, Custom Fields

  • To specify subfolders, use backslash "\" between folder names

  • To make a shared folder specify the name or path to it in the 7th field

Example 1: Create a regular folder at the root level with 2 custom fields

  • My Business Stuff,Twitter,marketing@company.com,123456,https://twitter.com,These are some notes,API Key,5555,Date Created, 2018-04-02

Example 2: Create a shared subfolder inside another folder with edit and re-share permission

Backup - Export

To back up your records, click on the Account Dropdown > Settings > Export. There are two formats for export: PDF and .csv. There is an option to include records that are shared from other people. Click on Export Now under the file format you want.

CSV Export will not back up files saved in records. This includes pictures, documents, music, etc. Only basic record hierarchy information will be exported. This includes Folder name, Title, Login, Password, URLs, Notes, Shared Folder Name, Custom Fields. Permissions and Add-On Features will not carry over. For advanced backup capabilities see Keeper Commander.

Mac OS - Touch ID Support

On supported Macbook Pro devices, Keeper supports the use of Touch ID to login to your vault.

Enable Touch ID Login

  1. Enable Touch ID in your Settings.

  1. The next time you login to Keeper, the Touch Bar will show the Touch ID button. Tap the Touch ID button.

  1. Use your registered fingerprint on the Touch ID sensor to log in.

KeeperFill for Apps

Keeperfill for Apps is used to autofill login credentials into applications and websites. You can launch the panel from the hotkey combination, Command-Shift-1. After launching, permissions must be granted before you can use this feature.

KeeperFill for Apps Window
Answer OK and Open System Preferences to continue
System Preferences > Security & Privacy > Privacy > Accessibility

Click on the lock and enter your password to make changes to the Accessibility settings under the Privacy tab. Click on the checkmark next to Keeper Password Manager to allow KeeperFill for Apps to login to your applications.



Removing Keeper Password Manager will also remove KeeperFill from Safari. Data stored in Keeper's Cloud Security Vault is NOT erased.

  1. Drag the Keeper Password Manager app to the Trash.

  2. Empty the Trash.


Uninstall Keeper Password Manager

Uninstall will delete the data from Keeper on the local device. Data stored in Keeper's Cloud Security Vault is NOT erased.

  1. Navigate to the Windows Start Menu > Settings > Apps & Features.

  2. Under Apps & features, click the Keeper Password Manager application.

  3. Click Uninstall.

  4. You will be warned that the app and its related info will be uninstalled, click Uninstall to confirm.

  5. User Account Control will ask you to confirm making changes to your device, confirm the changes by clicking Yes.

Contact Information

Consumer support: support@keepersecurity.com

Business support: business.support@keepersecurity.com

Link to FAQ Site: https://keepersecurity.com/faq.html

More videos are available at: https://keepersecurity.com/support

User Guides

Additional user guides can be found by visiting the following links: