User Guide | Security | Client Facing
Keeper Security
Your organization's password vault — set up in about ten minutes.
Keeper is where every work password now lives: one secure vault that fills in your logins for you, works everywhere you do, and ends the era of passwords in spreadsheets, documents, and sticky notes. This guide walks you through your first sign-in from start to finish. Before you begin, have three things ready: your Keeper welcome email, your phone with an authenticator app installed (Microsoft Authenticator or Google Authenticator), and your regular Microsoft 365 sign-in.
Prefer to watch? · 4 min 20 sec
The video covers the same 27 steps as the written guide below — use whichever suits you, or both.
| Applies To | All staff enrolling in Keeper Security |
| Time Required | About 10 minutes |
| You Will Need | Welcome email · smartphone with authenticator app · Microsoft 365 credentials |
| Companion Document | APM-SOP-SEC-KPR-002 — Keeper Security Onboarding, Client Edition v1.0 |
Part 01
Your first login: accepting the invitation, turning on two-factor authentication, and acknowledging the standard vault policies. This takes about ten minutes — have your phone nearby.
Open your Keeper welcome email and click Set Up Your Account Now.
The invitation arrives on the date announced by your organization. You will sign in with your existing Microsoft 365 credentials — there is no separate master password to create or remember.
Click OK on the two-factor authentication notice.
Two-factor authentication is required for every account in your organization — this one-time setup is how your vault stays protected even if a password is ever exposed.
Enable the Authenticator App method.
The authenticator app is the recommended method (Microsoft Authenticator or Google Authenticator both work). If your organization uses Duo, it is available as a secondary alternative.
Click Next.
Click the Verification Code field.
Keeper displays a QR code — scan it with your authenticator app first, and the app will begin generating six-digit codes.
Open the Two-Factor Code Duration menu.
Select Require 2FA every 30 days.
This is the standard for your organization: each device you use re-verifies once every 30 days, so you get strong protection without a code prompt at every login.
Enter the six-digit verification code from your authenticator app.
Click Next.
Save your backup codes, then click I have written these codes down.
Backup codes let you back into your account if you lose your phone. Write them down and store them somewhere physically secure — never in a spreadsheet, document, or note.
Click Accept on the Vault Transfer Policy dialog.
This is a one-time acknowledgment. It allows your organization to recover the work credentials in an account if its owner ever leaves — it is part of the standard policy for every account.
Part 02
With your account created, bring your existing passwords into the vault, switch on the conveniences that make Keeper effortless day to day, and put the browser extension to work.
Click Import Now in the Get Started panel.
Plan to import your individual work credentials during your first 2–3 weeks. Shared and team credentials are handled separately by your administrator, so you only need to bring over what is yours.
Select Import in Keeper Settings.
Click Install to install the Keeper Import Tool.
Click Import for another source.
Open the Select a source menu.
Scroll through the available import sources and choose the one that matches where your passwords live today.
Keeper can import from browsers, other password managers, and CSV files. If you are unsure which source to pick, ask before importing — it is easier than cleaning up afterward.
Close the import source menu.
Close the Settings window.
Select Turn On Biometric Login.
On devices that support it, biometric login (fingerprint or face) makes unlocking your vault fast without weakening security.
Select Enable Notifications.
Notifications let Keeper alert you to sharing invitations and security events that need your attention.
Click Set Up under Enable Notifications in the Get Started panel.
In your browser’s Extensions menu, click the pin icon next to Keeper Password Manager.
Pinning keeps Keeper on the toolbar of every browser you use for work, so filling a login is always one click away.
Click the Keeper icon now pinned to your browser toolbar.
The KeeperFill panel opens — search your vault or browse your recent records without leaving the page.
Click the launch icon next to a record to open its website and fill your login for you.
The star pins a favorite, the launch arrow opens the site and fills your credentials, and the three-dot menu holds the record’s details.
Part 03
The payoff: from now on, Keeper fills your logins for you.
Click Sign in. When Keeper offers to auto-fill your login, click Yes.
That is it — your vault is working for you. From here, sign in to Keeper anywhere you work: the web vault, the browser extension, or the mobile app.
Keep Learning
Everything below is published and maintained by Keeper Security, so it always reflects the current version of the app.
Verified Documentation
Verified Video Training
Support
During rollout
Reply to the Keeper announcement email — your reply automatically opens a support ticket with the APM Support Desk. You can also reach out to your organization's internal Keeper contact.
Good to know
You can use Keeper from the web vault, the browser extension, and the mobile app. Two-factor re-verification happens once every 30 days per device, and your backup codes are your safety net — keep them somewhere secure.