About Keeper
Keeper is a good fit if you want a mature paid manager with published compliance credentials and business features. It is from Keeper Security, and its extension fills logins, saves new ones and generates passwords in Chrome, Firefox, Edge and Safari. Keeper describes itself as zero-knowledge, meaning vault data is encrypted and decrypted on your device and is not accessible to the company.
Its security page lists SOC 2, ISO 27001, 27017 and 27018, FedRAMP High for its government cloud, and FIPS 140-3 validation. It says outside experts run quarterly penetration tests, and it runs a bug bounty through Bugcrowd. The Personal plan covers unlimited passwords and devices, and the Family plan covers up to five users with shared folders and emergency access.
These are the company's own statements, and the code is closed, so you cannot check them against the source. A Google researcher found a flaw in the extension in 2017, which Keeper fixed. Keeper says it has never had a vault breach, and we found no independent report of one. There is no permanent free plan, only a 30-day trial, and BreachWatch dark web monitoring and file storage cost extra. For one person on a budget, Bitwarden or Proton Pass cost less.
Pros and cons
- Lists SOC 2 Type 2, ISO 27001, FedRAMP High and FIPS 140-3 validation
- Quarterly third-party penetration tests and a Bugcrowd bounty, per Keeper
- Extensions for Chrome, Firefox, Edge and Safari
- Family plan with shared folders and emergency access
- Closed source, so you cannot read the code
- No permanent free plan, only a trial
- Dark web monitoring and file storage are paid add-ons on Personal
Permissions
It requests access to all websites so it can fill logins, plus tabs, web navigation and web request access. It also asks for browsing data, privacy, clipboard write and offscreen permissions that support features such as clearing data and copying passwords.
