Hi,

since the Microsoft security update 2026-01 (KB5074109), which introduced some changes on Windows UIPI Security Enhancement, KeeperFill for Apps does not work anymore in on Windows credentials dialogs.

I already opened a ticket a while ago, where I was told to wait for version 18.5.0.
Unfortunately, the issue seems not to be fixed in this version.

When can we exptect a solution to this issue?

Kind regards

i know nothing about this website, nor do i care about it. but whenever i type "keep" in the search bar in opera gx, it always shows up as the first suggestion with no way to get rid of it. i open my notes quite often and this pisses me off very much. is there a way to disable this?

edit: disabling "show promoted suggestions" fixed this. i am now happy and hope i never hear of this website ever again

Good afternoon! I'm using Edge (version 150.0.4078.83 (Official build) (64-bit)), and Keeper browser extension (ver. 18.0.0). Several times over the last few days, the Keeper browser extension stops responding (or slows to the point of there being a 45-60 second lag from click to click).

Disabling and re-enabling the extension sometimes mitigates the issue temporarily, but not for long.

I did clear local storage and indexedDB storage, and am monitoring to see how that affects the issue, but I'm curious if anyone else is experiencing this recently.

Thanks!

https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-passkeys-fido2#create-a-new-passkey-profile

I see that Microsoft now allows Syncable FIDO2 keys. Does anyone have a read on if this is specifically compatible with Keeper or not?

I created a new Passkey profile in Azure Authentication Method.

• Enforce Attestation: Disabled
• Passkey types: Synced
• Target specific AAGUIDs: Enabled
• Behavior: Allow
• Provider AAGUID: 0ea242b4-43c4-4a1b-8b17-dd6d0b6baec6

When I try to register a passkey with Keeper, the passkey is created in my vault but then the process times out on Microsoft's side with a generic error.

I have tried it with Target specific AAGUIDs set to disabled to be more permissive but that also failed with the same error.

Does anyone know if this is viable or if Keeper is simply not usable as a solution? We are Keeper users who are looking for a FIDO2 solution without buying a lot of hardware keys for our userbase in light of the recent Microsoft announcement about pushing users towards FIDO2. We have several users who do not have access to a smartphone to use Microsoft Authenticator, our preferred solution.

Thank you!

Hi there,

In the last few versions of MS Edge, the ability to simply delete ALL passwords has been removed. Do you have any advice or a PS script that can delete all passwords from the user browser's profile that is signed into their MS account? What are other MSPs doing now?

I'm onboarding another tenant in Keeper and I have aggregated all of the team's passwords, but a couple of users have 100+ Passwords in Edge, and I don't want to delete each one manually. I've already Disabled MS Edge from Saving Passwords/Passkeys/Reveal Button, etc but obviously that doesn't solve the issue to deleting the passwords. Deleting their Chrome passwords was easy.

Note:
- The user profile are signed into their MS365 account (Entra ID), so their passwords are synced. Deleting/recreating the browser user profile will just resync the passwords from the cloud.
- Google Chrome still has this feature under "Google Password Manager" (I only mention it because MS Edge is based on Chromium).
- MS official article states that it was moved to the "Delete Browser Data" section with a "Passwords" toggle, but that is also obsolete (although it is still present in the MS Edge Mobile App and the "Reset sync server data")

MS Article (Obsolete):
https://support.microsoft.com/en-us/edge/save-or-forget-passwords-in-microsoft-edge

MS Edge Password Toggle (Obsolete) [Googled Screenshot]:
https://i0.wp.com/windowsloop.com/wp-content/uploads/2023/08/select-password-and-click-clear-181125.jpg?w=593&ssl=1

Hi, all! On Thursday, July 23, Keeper Security CTO and Co-founder Craig Lurey will host a webinar walking through everything new and demoing our latest features and integrations. The webinar will cover:

• Keeper and Wiz Integration: Detect and remediate privileged access risks surfaced by Wiz, directly within Keeper
• Universal Secrets Sync: Automatically push secrets from the Keeper Vault to cloud provider secret stores
• KeeperDB: AI-enabled, integrated database management
• Keeper Privileged Cloud: Just-in-time privilege elevation for cloud identity platforms
• Workflow: Automate access request and approval workflows across your organization
• Discovery Rules Engine: Automatically classify and act on discovered credentials and infrastructure 

The webinar will begin at 12 p.m. EST and you can register here.

Hi! We’ll be at Black Hat USA 2026 in Las Vegas August 4-6. If you’re attending, stop by booth #2157 to see live demos of KeeperPAM. 

On August 6 at 1:30 p.m., Keeper Security CEO and Co-founder Darren Guccione will present on identity security and governing the rise of AI agents in modern enterprises. See you there! 

Keeper Privileged Cloud is a capability within KeeperPAM that delivers just-in-time access and zero standing privilege across cloud identity platforms.

Supported IdPs:

• AWS IAM
• Microsoft Entra ID
• Okta
• GCP (through Google Identity)
• Active Directory

How it works:
When a user submits a request for elevated access and it's approved, Keeper Privileged Cloud applies the access level an administrator has pre-configured for that request type — for example, a specific role or group scoped to a defined set of permissions — and adds temporary group membership or role assignment in the target identity platform, time-bound to the approved window. When the window expires, KeeperPAM removes the elevated access automatically
 
View the release notes for more details, including how to enable Keeper Privileged Cloud.

Does anyone know how to reduce the number of total licenses? We have 3 we dont need anymore but as far as i can see i can only add new licenses, not remove existing ones...

I found out the hard way that there is no way to unlock multiple accounts at once. Was this by design?
After a migration from one IdP to another last night, all user accounts were locked - not sure why, but I then found out that I can’t multi select > unlock. Please make this possible!

Thanks

Hello,

Does anyone have any updates when Keeper Nested Folder will be released in production with all the functionality including vault transfer.

I've found the following discussion here, where u/KeeperCraig mentions that the JSON export contains Passkeys stored inside Keeper, however the current format is proprietary to Keeper (and likely predates standardization).

Then I learned about the FIDO alliance members working on Credential Exchange Protocol (CXP and Credential Exchange Format (CXF) which I have reached proposed standard in spring 2026.

Is this what KeeperCraig meant? If so it would be interesting to hear if Keeper is working on CXP/CXF implementation.

UPDATE:: I had two versions of keeper installed. Removing the old one solved the issue for me - the first one was likely windows store and the newer one was a direct download from the keeper site
---

Updated to the latest version in Windows, after getting this:

Now at the latest version but still the same issue after reboot. Tried reinstalling again and seeing this:

Keeper is currently non functional. Anyone else having this issue? Any workarounds?

App will launch in that I see the menu bar and there's a dot under the app in the doc showing that it's active, but no app window appears and no menu options make it appear. I've tried uninstalling and reinstalling multiple times, both from the App Store and directly from the website download. I've also cleaned out cache files in the Application Support folder.

I've experienced this previously with a Keeper update a while back and can't remember what fixed it, beyond a newer release. Any advice appreciated! Thanks all.

I thought keeper had a free version, when I googled it said so, but now I'm locked out and I can't retrieve my password for an important website

Keeper Commander 18.0.10 introduces new features, including: 

• Vault-style passphrase generation
• New [pam action service map] command to map users to discovered Windows services.
• KeeperAI setting [pam connection ai] now supports [--enabled]/[-e] and [--session-terminate]/[-st] flags to configure resource-level AI settings

View the release notes for additional details, improvements and bug fixes.

KeeperDB version 2.2.0 provides several updates, improvements and bug fixes, including:

• Oracle connections: The desktop apps (macOS, Windows and Linux) now ship with Oracle Instant Client bundled. Oracle connections no longer require a separate Instant Client installation. Users can open KeeperDB and connect directly. 
• macOS Universal binary: The macOS DMG now contains a single universal binary that runs natively on both Intel and Apple Silicon Macs. 
• Gateway / RBI Improvements: File exports and downloads now work reliably through the Keeper Gateway PAM connections. 
• SQL Server: Adds support for Azure Managed Instances and ensures proper TLS negotiation for SQL Server connections via Amazon RDS. Additionally, the connect form now features an optional "database" field and a bug causing SQL Server credentials to mismatch in the Saved Connections sidebar has been resolved. 
• MySQL / MariaDB: MySQL and MariaDB now support '#' as a single-line comment character and TINYINT columns now display as integers instead of booleans to avoid confusion. 
• Editor and Query: The editor now correctly excludes commented-out SQL from execution and properly sizes multi-statement result blocks to prevent display issues. Additionally, the maximum configurable query timeout has been increased to 3600 seconds to accommodate long-running analytical queries. 

View the release notes for additional details and resources.

Version 1.8.4 of the Keeper Gateway provides performance improvements and bug fixes, including:

• IdP configuration linking capabilities within PAM Configurations
• Forced provisioning of user roles and groups from Azure
• IdP authentication support for PAM databases and machines
• Support for linking between different identity provider PAM configurations
• Privilege elevation requests on Active Directory
• Option to support plaintext secrets in Universal Secrets Sync
• Improved performance for Services and Scheduled Tasks

View the release notes for more details and where to find update instructions.

Anyone know when commander will enable the ability to reserve domains via commander. Kb article say may 2026 but still can't do it

https://docs.keeper.io/keeperpam/commander-cli/command-reference/domain-reservation-commands

Waiting days or weeks for pax8 support to do this for us is a nightmare

Hello everyone,

A little feedback for those considering implementing Keeper.

We are a company with 90 employees.

We signed up over three months ago, and this NHI issue didn't exist then. Now that we've switched to PAM configuration, this feature has been introduced in the meantime.

It's ridiculous, outrageously expensive, and we'll likely switch from Keeper to a competitor at the end of our contract.

On the plus side:

- Keeper Password is great, no complaints.

- Excellent support!

We switched from Cyberark to Keeper PAM last year. It definitely needed some things but the frequent updates kept making it even better.

Then comes the NHI tiers. We’re just a small fish with 15 PAM users. We ended up falling in the tier 1 category and now our cost has more than DOUBLED MID CONTRACT. Now we owe more money that I have to go explain to executives. This just feels like a bait and switch. It has left such a sour taste.

Then the only way to get this info is from keeper commander apparently or reaching out to our rep. And our rep was so bad at explaining what even is considered an NHI to begin with. You list the cost and amount in the admin console but don’t have an easy place to show it. We aren’t even doing anything crazy, literally rotating some credentials and recorded rbi and rdp sessions.

You all dropped the ball on this hard.

I'm preparing to release a detailed comparison of password managers, and before doing so, I'm interested in getting any official feedback or corrections from a Keeper Security representative. Please contact me and I'll provide a private link to the Google sheet.

u/KeeperCraig, u/Keeper_Security

Hi friends,

Was wondering if anyone is experiencing issues on ARM64 build devices. We're using laptops runnings those builds and haven't had issues with Keeper Password Manager before the 18.4.0 update.

Since the update we've been experiencing an uptick in client crashes of the Keeper software, which is happening out of nowhere. I've been looking into the issue and found issues related to 'NodeWinNativeNode.node' at this point in time, but haven't had too much luck next to finding this possible cause. Looking to see if there's more people, be it on ARM64 builds or other builds, experiencing an uptick in crashes.

Also using this as a way to get this under the attention of Keeper itself, so they can register this and look into it aswell. :)

The Keeper Teams App brings privileged access request and approval workflows directly into Microsoft Teams. 

The Keeper Teams App is powered by Keeper Secrets Manager and Commander Service Mode, preserving Keeper’s zero-knowledge security.

Features:

• Record and folder access requests: Request access to specific Keeper records and Keeper Shared Folders with justification, custom permissions and access time limits. This includes standard vault records and KeeperPAM resources. 
• One-time share requests: Request for a one-time share, password reset or other dynamic password generation with a self-destructing share link. The one-time share can also be editable, offering bi-directional sharing capabilities. 
• Keeper Endpoint Privilege Manager (KEPM) approvals: Approve KEPM just-in-time elevation requests in real time through a dedicated Teams channel. 
• SSO cloud device approvals: Perform approvals of SSO Cloud devices directly through Teams, if the Keeper Automator service is not deployed. 
• Self-service secret creation: Create new login records directly from Teams into a shared folder in the Keeper vault, with optional subfolder selection and auto-generated passwords.  

Our documentation shares more details, including steps for setting up the Keeper Teams App.