Keeper features
Explore Keeper’s full suite of security, access and compliance features designed to protect your organization and empower your teams.
Credential Management
Encrypted vault
Store and manage passwords, secrets and files in a fully encrypted, zero-knowledge vault.
Passkeys
Store, use and share passkeys for passwordless login across devices.
Secure sharing
Safely share credentials, secrets and files with other Keeper users using zero-knowledge encryption.
One-Time Share
Send a time-limited, self-expiring record to anyone, even if they don’t use Keeper.
TOTP generator
Generate time-based codes directly inside the Keeper Vault.
Autofill
Quickly and securely fill passwords, passkeys and 2FA codes across apps and websites.
Self-destructing records
Protect sensitive data with records that automatically delete after a set number of views or days.
Shared team folders
Organize and distribute records to teams with granular control over edit, share and ownership permissions.
Password generator
Create strong, unique passwords or passphrases with customizable complexity in one click.
Password strength meter
See how strong your passwords are as you create them.
Password generator history
View your recently generated passwords and passphrases whenever you need them.
Record history
View and restore previous versions of your records.
Emergency access
Designate up to five trusted contacts who can access your vault if you're ever unable to.
Password change prompt
Keeper detects when you’re changing a password and prompts you to update your vault with the new one.
Browser extension
Experience secure, instant logins with a zero-knowledge browser extension for passwords, passkeys and autofill.
Wearable apps
Access records and approve logins on your smartwatch for speed and convenience.
File storage for business
Securely upload and store sensitive files, photos and documents with full end-to-end encryption.
File storage for personal
Securely store personal files, photos and videos in your encrypted vault.
Record types
Use purpose-built templates for logins, payment cards, SSH keys, database credentials and more.
Custom record templates
Create tailored record types to match your organization’s unique use cases and data fields.
Offline mode
Access your vault even without an internet connection; encrypted data stays on your device.
iOS app
Access your vault, autofill passwords and approve logins securely from your iPhone or iPad.
Android app
Manage passwords, generate passkeys and stay protected on the go with Keeper for Android.
Account transfer
Securely transfer a departing employee’s vault to another user during offboarding.
Free personal vault
Provide employees with a free Keeper Family Plan, including up to 5 family members.
Windows services
Automatically rotate and restart Windows services, scheduled tasks and IIS application pools whenever a service account password changes.
Nested Shared Folders
Organize records in folders with role-based permissions with flexible inheritance and advanced access controls.
Administration and Provisioning
Admin Console
Manage users, roles, vault policies and security settings from a single, centralized dashboard.
Team management
Group users by department or function to simplify access control and record sharing.
Two-Factor Authentication (2FA)
Require an additional factor to access the vault.
Account switching
Switch between accounts quickly without signing out.
Role-Based Access Control (RBAC)
Apply custom permissions by role to enforce security policies and limit user capabilities.
Password policy
Enforce strong password requirements to meet compliance standards and reduce risk.
Delegated administration
Assign admin responsibilities to specific roles or teams without granting full access.
Advanced organizational structure
Mirror your company’s hierarchy with nested nodes for flexible policy enforcement and visibility.
Share Admin
Designate admins to manage shared folders, control access and enforce permissions across teams.
SCIM provisioning
Automate user and team provisioning from identity platforms with SCIM 2.0 compatibility.
Keeper Commander CLI
Automate provisioning, vault operations and security policies with Keeper's open-source CLI tool.
Automation Commands
Automate PAM tasks in Commander with repeatable, scriptable commands.
Active Directory sync
Automatically sync users and groups from Active Directory to simplify deployment and user management.
LDAP sync
Connect Keeper to your LDAP directory for centralized authentication and provisioning.
Entra ID (Azure) integration
Integrate with Microsoft Entra ID (formerly Azure AD) to manage users and enforce enterprise policies.
SSO Connect
Seamlessly integrate Keeper with your Identity Provider (IdP).
Biometric login with passkeys
Log in instantly using face or fingerprint recognition, no need to enter your master password.
Biometric login with Windows Hello, Touch ID, Face ID
Quickly unlock Keeper with built-in biometric authentication on your trusted devices.
Ping integration
Sign in to Keeper with your Ping identity and give every login an encrypted, zero-knowledge vault.
Okta integration
Unify Okta authentication, credential rotation and provisioning with Keeper to automate the identity lifecycle.
AWS integration
Secure AWS identities, rotate credentials and sync secrets with Keeper to authenticate via IAM Identity Center.
Secrets Management
Developer APIs
Integrate Keeper into your stack with RESTful APIs for vault management, provisioning and audit logging.
Developer tools
Access a full suite of tools for building secure, automated workflows with Keeper’s platform.
CI/CD integration
Protect your DevOps pipeline by securely delivering secrets into build systems and deployment workflows.
KSM application sharing
Easily manage access to secrets across teams by sharing entire applications in Keeper Secrets Manager.
SaaS rotation
Automatically rotate passwords, secrets and API keys across your SaaS applications to reduce the risk of long-lived credentials.
Automated password rotation
Continuously rotate credentials across servers, databases and services to minimize your attack surface.
Password rotation policies
Automate rotation rules by user, system or schedule to enforce security best practices at scale.
SSH key management
Eliminate key sprawl by storing, rotating and assigning SSH keys from a centralized, encrypted vault.
Secrets manager CLI and SDKs
Securely inject secrets into your applications using CLI tools and SDKs for Python, Go, .NET and more.
ServiceNow integration
Resolve credentials, turn alerts into tickets and manage vault access from ServiceNow, all without secrets leaving Keeper.
Google Cloud Platform integration
Sync secrets to Google Cloud Secret Manager, encrypt configuration files with Google Cloud KMS and deliver credentials to GCP apps and pipelines.
Property File record type
Deliver secrets to local tools and AI agents from your encrypted vault, with no plaintext credentials on disk.
Discovery
Identify unmanaged credentials and privileged accounts across your infrastructure with automated asset discovery.
Remote Access
Connection management
Securely launch and monitor privileged sessions across infrastructure without exposing credentials.
Keeper Privileged Cloud
Enforce zero standing privilege with Just-in-Time (JIT) access across your cloud platforms.
KeeperDB
Secure database access with encrypted connections and centralized management.
TCP tunneling
Create secure tunnels for local development tools and database clients without exposing your network.
Remote browser isolation
Open internal web apps in a hardened, isolated browser environment to prevent data exfiltration and malware.
“Launch as” PAM connections
Connect to systems with elevated privileges using role-based, just-in-time credentials.
Agentless connections
Access infrastructure using native protocols, no agents, VPNs or firewall changes required.
Launch SSH, RDP and VNC sessions
Instantly connect to servers, desktops and remote systems through your browser or desktop app.
Connection templates
Standardize and scale access with reusable templates for common SSH, RDP, and database configurations.
Session recording playback
Record and audit privileged sessions with searchable video and keystroke playback across protocols.
Ephemeral accounts
Create temporary privileged accounts that are automatically deleted after use.
Break Glass Account
Ensure admin access with a secure fallback if SSO or your identity provider goes down.
Time-limited access
Enforce expiration windows for privileged access; credentials expire automatically after a set duration.
Least privilege policies
Enforce access controls that limit users to only the systems and credentials they need.
MCP Server
Self-host Keeper’s Multi-Cloud Proxy server to control routing, enforce data residency and streamline PAM deployments.
SSH Agent
Load SSH keys from your Keeper vault and establish secure sessions without exposing private keys.
Remote Privileged Access Management (RPAM)
Enable secure remote access to infrastructure and applications across hybrid and multi-cloud environments.
Vendor Privileged Access Management (VPAM)
Grant secure, limited access to third-party vendors without creating permanent accounts.
Wiz integration
Act on Wiz cloud security findings directly in KeeperPAM so teams can close the gap between detection and remediation.
Endpoint Privilege Management
Zero-standing privilege
Remove standing access to critical systems. Grant access dynamically and only when needed.
Workflow
Control Just-In-Time (JIT) privileged access with request and approval workflows that define how access is granted and used.
Jira workflow
Handle access requests and vault actions directly in Jira without switching tools.
ServiceNow integration
Resolve credentials, turn alerts into tickets and manage vault access from ServiceNow, all without secrets leaving Keeper.
Slack Workflow
Approve or deny access requests directly in Slack so teams can respond faster, stay aligned and keep work moving securely.
Teams workflow
Bring requests, approvals and privileged elevation into Microsoft Teams with end-to-end encryption and on infrastructure you control.
Agentic AI governance
Detect AI coding assistants and autonomous agents on your endpoints and govern what they can execute, elevate and access.
Monitoring and Reporting
Risk Management Dashboard
Get a real-time view of vault security, policy enforcement and user behavior across your organization.
Security audit
Continuously monitor password strength, reuse and risk across users, teams and shared records.
KeeperAI®
Leverage AI-powered insights to identify security gaps, automate responses and strengthen least privilege enforcement.
Pattern-based risk detection
Identify suspicious behavior across vaults with intelligent monitoring for risky access patterns.
Snapshot tool
Capture and export real-time views of user permissions and vault access for audits or internal reviews.
Compliance reports
Instantly audit who has access to what, with downloadable reports that support SOX, HIPAA, ISO 27001 and more.
Advanced Reporting and Alerts Module
Build custom reports and real-time alerts for security events, role changes and vault activity.
BreachWatch for business
Continuously monitor the dark web for exposed credentials and alert users to take immediate action.
BreachWatch for personal
Actively monitor for compromised credentials and get notified when records are at risk.
Dark web alerts
Receive real-time notifications when Keeper detects compromised passwords linked to your accounts.
SIEM integration
Stream Keeper logs into your SIEM to centralize visibility and accelerate incident response.
Jira ITSM
Turn security alerts into actionable Jira tickets with real-time response and full audit trails.
Crowdstrike integration
Enrich threat intelligence by connecting Keeper with CrowdStrike for extended detection and response (XDR).
Google Chronicle integration
Push Keeper audit logs to Google Chronicle for scalable threat analysis and correlation.
Cloud Security integration
Bring findings from your CNAPP into Keeper, remediate them with rotation, JIT access or onboarding, and sync status back.
Discovery Rules Engine
Automatically evaluate, onboard or flag discovered resources using rules you define to secure infrastructure at scale.
Security
Zero-knowledge encryption
Only you can access your data. Keeper can’t see or decrypt your vault.
Quantum-resistant encryption
Next-generation encryption built to protect your data against future quantum threats.
Forcefield
Detect and block credential theft in real time with endpoint-level protection powered by Keeper.
Keeper push
Approve new devices or login attempts with a simple push notification.
Device approval
Control which devices can access your Keeper Vault to prevent unauthorized logins.
Privacy screen
Mask passwords in the vault, browser extension and mobile apps so users covered by the policy can't unmask them
FedRAMP High Authorized
Keeper is FedRAMP Authorized, meeting rigorous U.S. government security and compliance standards for cloud services.
GovRAMP High Authorized
Built for the public sector, Keeper GovCloud is GovRamp Authorized to protect sensitive federal, state and local data.
See Keeper in action
Learn how Keeper can help secure your organization’s passwords, infrastructure and privileged access.