Keeper Review – Zero‑Knowledge, Secure & Enterprise‑Trusted Password Manager
Hero Intro
This website is made in Japan and published from Japan for readers around the world. All content is written in simple English with a neutral and globally fair perspective.
Keeper is a password manager used by individuals, families, and enterprises around the world on Windows, macOS, iOS, and Android. It provides zero-knowledge encrypted credential storage, secure file storage, BreachWatch dark web monitoring, shared vaults with granular access controls, auto-fill, multi-device sync, and a built-in password generator, all within a structured and security-focused interface. This review takes a neutral and practical look at what the software does well, where it performs consistently, and who is most likely to find it useful.
Keeper is built around a zero-knowledge security model in which all encryption and decryption occurs on the user’s device before any data is transmitted. This means Keeper employees and systems have no technical ability to access the contents of a user’s vault at any point. For individuals and organizations that treat credential security as a critical requirement rather than a convenience feature, this architectural approach provides a meaningful level of assurance beyond what many mainstream alternatives offer.
The software has a strong presence in enterprise and government environments, with SOC 2 certification and a track record of adoption by large organizations that have specific compliance and security requirements. For individual users and small businesses that want the same level of structural security without an enterprise contract, Keeper’s personal and family plans bring those same foundations to a more accessible price point.
Try Keeper
What Is Keeper
Keeper is a zero-knowledge password manager and secure digital vault designed to store, encrypt, and automatically fill login credentials across Windows, macOS, iOS, and Android. All data is encrypted at the device level using AES-256 with PBKDF2 SHA-256 key derivation before being transmitted to Keeper’s servers, and the decryption keys are never shared with Keeper. Browser extensions for all major desktop browsers handle auto-fill and credential saving, and vault data syncs automatically across all linked devices.
Beyond standard credential storage, Keeper includes encrypted file storage for sensitive documents, images, and digital assets. The BreachWatch add-on monitors stored credentials against dark web breach databases and alerts users when their information appears in a known leak. Shared vaults and folders with configurable permission levels support both family sharing and team-based credential management.
Keeper is used by individuals, families, and organizations ranging from small businesses to government agencies. The software is positioned as a security-first tool that does not compromise on encryption standards or compliance requirements, making it one of the more thoroughly vetted options available across the full range of user types.
Key Features
Zero-Knowledge Architecture: All encryption and decryption in Keeper takes place on the user’s device. The keys required to access vault contents are never transmitted to or stored by Keeper, meaning the company cannot access user data under any circumstances, including legal requests.
Secure Password Vault: All stored credentials are encrypted with AES-256 under the zero-knowledge model. The vault holds login entries, secure notes, payment card details, and identity information, with data accessible only to the account holder.
KeeperFill (Auto-Fill and Auto-Save): Browser extensions for all major desktop browsers recognize login forms and fill stored credentials automatically. New credentials entered on unfamiliar sites trigger a save prompt to keep the vault current without manual entry.
BreachWatch (Dark Web Monitoring): Available as an add-on, BreachWatch continuously scans stored credentials against dark web breach databases and sends alerts when personal information appears in a known leaked dataset. Alerts include details about the compromised service and recommended actions.
Secure File Storage: Keeper includes encrypted storage for sensitive files including documents, images, and digital assets. Files are encrypted using the same zero-knowledge model as credential data and are accessible across all linked devices.
Shared Vaults and Folders: Credentials and files can be shared with specific users or teams through named folders with configurable permission levels, including view-only, edit, and share access. This supports both household sharing and organizational credential management.
Multi-Device Sync: Vault data is synchronized across all linked devices through Keeper’s encrypted cloud infrastructure, covering Windows, macOS, iOS, and Android simultaneously without manual intervention.
Password Generator: A built-in tool creates randomized passwords with adjustable length, character sets, and complexity requirements, supporting both character-based passwords and passphrase generation.
Browser Extensions: Extensions are available for all major desktop browsers including Chrome, Firefox, Edge, and Safari, enabling auto-fill and auto-save directly within the browsing experience.
Performance Review
Zero-Knowledge Integrity and Vault Security
In tested scenarios, Keeper’s zero-knowledge model functioned as described, with all encryption occurring locally before sync. The vault remained inaccessible without the master password across all tested configurations, and the software provided no recovery path that would require transmitting decryption keys to Keeper’s servers. For users and organizations with strict data residency or compliance requirements, this architecture is among the most rigorously implemented in the consumer and SMB password manager category.
Auto-Fill Accuracy
In tested scenarios, KeeperFill recognized login forms accurately across a wide range of websites and populated credentials correctly without requiring manual correction in most cases. The auto-save prompt appeared consistently when new credentials were entered on sites not yet stored in the vault. Performance was stable across Chrome, Firefox, and Edge during extended use, including on pages with multi-step and enterprise login flows.
Secure File Storage
In tested scenarios, file uploads and retrievals worked without errors across desktop and mobile platforms. Uploaded files were encrypted before transmission and accessible across linked devices after sync. The interface for managing stored files was integrated into the main vault view, making it straightforward to organize credentials and related documents in the same location without switching between separate applications.
Shared Vaults and Team Access
In tested scenarios, the shared folder system allowed credentials to be shared with specific users at configurable permission levels. Access changes took effect promptly, and the permission model supported view-only access for users who need to use a credential without being able to modify or share it further. This level of granularity is practical for both household use and small team environments where different members need different levels of access to the same credentials.
Pricing & Plans
Personal Plan: Covers unlimited credential storage, secure file storage, multi-device sync, and full KeeperFill functionality for a single user. This is the core tier for individual use and includes the complete zero-knowledge feature set.
Family Plan: Extends the Personal plan to up to five household members, each with an individual vault and file storage. Shared folders allow family members to access common credentials without combining personal vaults.
Business Plan: Covers team-based credential management with administrative controls, shared team vaults, activity reporting, and role-based access. Suited to small and medium-sized organizations that need structured credential governance.
Enterprise Plan: Includes all Business features plus single sign-on integration, advanced provisioning, SIEM integration, and compliance reporting. This tier is aimed at larger organizations with formal security and compliance requirements.
BreachWatch Add-On: Dark web monitoring is available as a paid add-on across personal and family plans, and is included in business and enterprise tiers.
A free trial is available for users who want to evaluate the full feature set before committing to a subscription.
Use Cases
Zero-Knowledge Credential Storage: For users and organizations that require verifiable assurance that no third party can access their vault data, Keeper’s device-level encryption model provides one of the strongest available implementations in the password manager category.
Secure Document and File Storage: Encrypted file storage for sensitive documents, identity cards, and digital assets alongside credential data eliminates the need for a separate encrypted storage solution.
Dark Web Breach Monitoring: BreachWatch provides continuous monitoring against known breach databases, alerting users when their credentials appear in leaked datasets before the damage compounds.
Enterprise and Compliance Environments: SOC 2 certification, detailed audit logs, SSO integration, and role-based access controls make Keeper a practical choice for organizations with formal security or compliance requirements.
Family Credential Management: The family plan covers up to five members with individual vaults and shared folder access, supporting household credential sharing with proper permission controls.
Team Credential Governance: Shared team vaults with granular permissions allow small businesses and distributed teams to manage shared account access securely without routing credentials through insecure channels.
Pros and Cons
Pros:
- Zero-knowledge architecture with device-level encryption ensures that Keeper has no technical ability to access vault contents, providing a strong and verifiable privacy foundation.
- Encrypted file storage is integrated directly into the vault, adding practical value for users who want to keep sensitive documents alongside their credentials in a single secure location.
- BreachWatch provides continuous dark web monitoring with clear, actionable alerts when stored credentials are found in known breach databases.
- SOC 2 certification and enterprise adoption by government agencies and large corporations provide independent validation of the security infrastructure.
- Shared vaults with granular permission levels support both household and team use cases with enough flexibility for most organizational needs.
Cons:
- BreachWatch is available as a paid add-on for personal and family plans rather than being included in the base subscription, which adds to the total cost for users who want comprehensive breach monitoring.
- The pricing is higher than several competing tools in the personal and family tiers, which may be a consideration for budget-conscious users who do not specifically require the enterprise-grade security architecture.
Who Should Consider This Software
Keeper is a strong option for security-conscious individuals, families, and organizations that want a thoroughly verified zero-knowledge credential manager with enterprise-grade encryption standards. It is particularly well suited to professionals who work with sensitive data, small businesses that need structured team credential management, and users who want the same security architecture used by large enterprises without an enterprise contract.
Users who are primarily looking for a low-cost or free password manager with a simple interface will find Keeper’s pricing higher than alternatives like Bitwarden. For users who prioritize structural security, encrypted file storage, and reliable breach monitoring over cost, Keeper is one of the most capable and thoroughly validated options available.
Final Verdict
Keeper delivers a comprehensive and security-first password management experience that stands out for its zero-knowledge architecture, encrypted file storage, and enterprise-validated infrastructure. The combination of device-level encryption, BreachWatch monitoring, and granular sharing controls provides a level of security depth that few competing tools match across both personal and organizational use cases.
For users and organizations that treat credential security as a critical requirement and want a tool with a proven track record in demanding environments, Keeper is a dependable and thoroughly capable choice.
Try Keeper
Previous: Dashlane Review – Smart, Secure & Feature‑Rich Password Manager for Global Users