Is Keeper® Password Manager & Digital Vault safe?
Keeper Password Manager stores, autofills, and manages credentials across all websites and supports enterprise SSO authentication.
The extension injects into every page to detect login forms and offer autofill from the user's encrypted Keeper vault. For enterprise users, it registers an SSO content script on all URLs that listens for postMessage events without validating the sender's origin, meaning any page could send a message to trigger SSO login flows. Credential data is transmitted to Keeper Security's servers at keepersecurity.com for authentication and vault sync.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itKeeper Security, Inc. - 1 other listing from the same operator, none carrying a finding
Keeper Security, Inc. - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 2.0M+ users between them, none of them carrying a finding.
Shared hosts - 11 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Keeper® Password Manager & Digital Vault contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- keepersecurity.com
Keeper® Password Manager & Digital Vault sends data to keepersecurity.com. 2 other extensions we have analyzed send data here.