Skip to content

Closed-source password manager from Keeper Security in Chicago that encrypts each record with its own AES-256-GCM key and derives keys with PBKDF2 at 1,000,000 iterations.

Owner
Keeper Security, Inc.
Based in
United States
Founded
2011
Type
Standalone app
Free plan
Yes
One mobile device and about 10 records; no desktop sync or sharing
Personal plan
Not verified
Latest audit
None published
No named, dated audit found
On record
No incidents found
in our research
  • No published third-party audit found
  • Has a free plan

How Keeper encrypts your vault

From Keeper's security documentation, next to the other 22. Keeper is outlined.

  • End-to-end encrypted

    Encrypted on your device before it's stored (like 20 others)

    Cipher: AES-256-GCM

  • Website addresses encrypted

    Encrypted with the rest of the item (like 18 others)

  • Item names encrypted

    Titles and folder names are encrypted (like 16 others)

    With the enterprise compliance feature, titles and URLs can be exposed to authorized admins through an enterprise key.

  • Memory-hard password hashing

    Repeated hashing, but not memory-hard: cracking hardware has an easier time (like 10 others)

    PBKDF2, 1,000,000 iterations to derive the Master Password Key that unwraps the Data Key; a separate 1,000,000 iterations for authentication

  • Extra secret key

    Your master password is the only secret (like 13 others)

    Recovery phrases exist, but no Secret Key equivalent in the standard model.

What you'll pay

In USD, from Keeper's own pricing page, checked 2026-10-16.

Free plan

Yes

One mobile device and about 10 records; no desktop sync or sharing

Personal plan

Unknown

After the first year

—

Family plan

Unknown

Business:
$2/user/mo
Free trial:
Unknown
Money-back:
Unknown
About the renewal:
Vendor does not always list exact public renewal prices.

Audits

Independent security reviews, newest first.

No published third-party audit with a named auditor found for Keeper.

  • Open-source appsNoNo
  • Open-source serverNoNo
  • Run it yourselfNoNo
  • Bug bountyBugcrowdBugcrowd

Certifications: SOC 2 Type 2, ISO 27001, ISO 27017, ISO 27018, FedRAMP

Incidents

Breaches, stolen data and serious flaws on record.

None found in our research.

Apps, browsers and passkeys

  • WindowsYesYes
  • macOSYesYes
  • LinuxYesYes
  • iPhoneYesYes
  • AndroidYesYes
  • Web vaultYesYes
  • ChromeYesYes
  • FirefoxYesYes
  • SafariYesYes
  • EdgeYesYes
  • Saves and fills passkeysYesYes
  • Unlock the vault with a passkeyYesYes
  • Passkey import and export (CXP)Not verifiedNot verified

Sharing, recovery and extras

  • Shared vaultsYesYes
  • Share with non-usersYesYes
  • Emergency accessYesYes
  • 2FA codes built inYesYes
  • Breach monitoringYesYes
  • Email aliasesNoNo
  • File attachmentsYesYes
  • SSH keys and agentNot foundNot found
  • Command lineYesYes
  • Encrypted exportYesYes
  • Works offlineYesYes
  • Authenticator-app 2FAYesYes
  • Security key for 2FAYesYes
  • Password health reportYesYes
  • CSV exportYesYes
All sources for Keeper (12)