Keeper

Why it's a strong pick

Keeper is a password manager with passkey and 2FA code storage, and it lists a long set of compliance credentials. Keeper says it holds SOC 2, ISO 27001, ISO 27017 and ISO 27018 certifications and is FedRAMP and StateRAMP Authorized. The trade-off: the browser extension is not in Keeper's free tier. You need a paid plan or the free trial.

What it does

Keeper makes strong, random passwords with a built-in generator and keeps them in an AES-256 encrypted vault that syncs across devices. It also stores passkeys and 2FA codes next to your logins. Keeper describes its design as zero-knowledge, which it says means encryption and decryption happen on your device.

Key features

• Zero-knowledge vault. Keeper says its servers do not hold your unencrypted data.
• AES-256 encryption. Per-record AES-256, according to Keeper.
• Password generator. Create strong, random passwords for new accounts.
• Passkey and 2FA storage. Keep passkeys and 2FA codes with your logins.
• Cross-device sync. The vault syncs across your devices.
• Several browsers. Keeper lists Chrome, Firefox, Edge, Safari and other Chromium browsers.

Who it's for

Keeper suits teams and business users who need compliance credentials, and individuals who want those credentials too. These are Keeper's own claims, so check its security page for the current list. For a personal setup you can also look at free options such as Bitwarden or Proton Pass. For a team tool you host yourself, see Passbolt.

Is there a free version of Keeper?

Keeper has a free plan, but the extension is not part of it. Keeper says the free plan has a limit on passwords and passkeys and is for one mobile device. The browser extension is only available with a paid plan or during a free trial. Keeper's pages describe a trial with no credit card, so check the current terms.

What certifications does Keeper say it holds?

Keeper's security page says it holds SOC 2, ISO 27001, ISO 27017 and ISO 27018 certifications, and that it is FedRAMP Authorized and StateRAMP Authorized. It also says it has the longest-standing SOC 2 and ISO 27001. These are Keeper's own statements. Ask for the reports if you need them for your work.

What permissions does Keeper ask for?

Check the install prompt on the Chrome Web Store listing. A password manager has to read and fill forms on the sites you visit, so expect a broad request. Permissions can change between releases, so read the prompt again after big updates.

Does Keeper work with Manifest V3?

Yes. Keeper's release notes say version 16.9.0, released on 25 May 2024, moved the extension to Manifest V3 for all users, after a phased start in February 2023. Manifest V3 is Chrome's current extension format. Keeper's release notes are public, so check them for later changes.

FAQ

What does the paid plan add? Keeper lists unlimited passwords and passkeys, unlimited devices, secure record sharing and emergency access on its Unlimited plan. Dark web monitoring and secure file storage are add-ons. Check current plans.

Is it open source? We found no statement from Keeper that it is, so we do not claim it.

Who makes it? Keeper Security.

Good to know

If you only want free autofill in your browser, Keeper's free plan will not do it, because it covers one mobile device. Try the trial first. Turn on two-factor authentication for your account and keep a recovery option, so a lost device does not lock you out.

Other password managers to compare

Keeper is one of 10 picks in our Password Managers guide, which compares them side by side and explains how to choose. The other picks:

• 1Password: A password manager from AgileBits Inc. (1Password). It has a free trial but no free plan.
• Bitwarden: An open-source password manager from Bitwarden Inc. The free plan covers unlimited passwords and devices.
• NordPass: A password manager from Nord Security. The free plan covers one active device; Premium adds more.
• Proton Pass: An open-source, end-to-end encrypted password manager from the Proton Mail team. It has a free plan.
• RoboForm: A password manager from Siber Systems, Inc. The free plan is for one device with no sync.
• KeePassXC-Browser: An open-source extension that fills in logins from your KeePassXC desktop app.
• authenticator.sh 2FA: An open-source authenticator that makes your 2FA codes inside Chrome, with no host permissions.
• Passbolt: The Chrome extension for Passbolt, an open-source password manager built for teams.
• Psono: An open-source password manager client that needs a Psono server, hosted or your own.

Compare: Passbolt vs Psono (two team-focused managers)

Also see: Best Chrome extensions for privacy