Keeper

Keeper is the password manager to pick when the buyer is IT. SOC 2, ISO 27001, HIPAA-BAA availability, FedRAMP Authorised status and a zero-knowledge architecture make it one of the few password managers regulated enterprises can adopt without a long procurement fight. It is not the best consumer product on the market, but it is the strongest compliance story.

Best for

• Regulated enterprises (healthcare, finance, government) that need HIPAA / FedRAMP-friendly password management.
• IT teams that want SSO, SCIM, granular RBAC and detailed audit trails.
• Businesses that want secrets management (KeeperPAM) alongside password management.
• Managed service providers who need multi-tenant admin.

Not ideal for

• Individuals looking for the cheapest working option (use Bitwarden).
• Users who prefer open-source software (Keeper is closed source).
• Households that primarily want a beautiful shared-vault UX (1Password Families is smoother).

Independent verdict

Keeper is the pragmatic enterprise pick. The security architecture is genuinely robust — zero-knowledge, zero-trust, per-record encryption keys — and the compliance certifications remove most of the procurement blockers that stop finance and healthcare teams from adopting a password manager at all. Admin tooling is dense but capable: SSO Connect for on-prem AD, SCIM provisioning, shared folders with granular permissions, detailed audit exports and BreachWatch monitoring.

The consumer experience is fine but not exciting. The apps are functional, the UI feels dated compared to 1Password, and useful extras like BreachWatch dark-web monitoring and secure file storage are frequently sold as upsells rather than bundled. Pricing on paper is competitive, but the "with add-ons" total often creeps toward 1Password or Dashlane territory.

Pricing model

Keeper Personal starts around $2.92/month billed annually. Family covers five vaults at around $6.25/month. Business tiers begin around $3.75/user/month with Enterprise pricing on request. KeeperPAM (Privileged Access Management), Secrets Manager, BreachWatch dark-web monitoring, and Compliance Reporting are typically sold as add-on modules. Government / FedRAMP pricing is quoted separately.

Security architecture

Keeper uses AES-256-GCM with per-record encryption keys derived from your master password via PBKDF2, wrapped in a zero-knowledge model where Keeper cannot access vault contents. Additional elliptic-curve cryptography powers secure record sharing. Certifications include SOC 2 Type II, ISO 27001/27017/27018, FedRAMP Authorised, StateRAMP, and support for HIPAA workflows. Keeper runs a public bug bounty on Bugcrowd.

Key features

• Password, secret, note, file and payment storage with per-record encryption keys.
• Passkey support across apps and browser extensions.
• SSO Connect (SAML) with Okta, Entra, Google, JumpCloud, ADFS and more.
• SCIM provisioning for automated user lifecycle.
• Shared folders with granular role-based permissions.
• KeeperPAM for privileged access management and secrets rotation.
• BreachWatch dark-web monitoring (add-on).
• Compliance reporting and detailed audit event exports.

Real-world limits

Consumer UX lags 1Password. Many of the differentiators — dark web monitoring, secrets manager, compliance reporting — are individually priced add-ons, so the sticker price is not always the deployed price. Admin console is powerful but not self-explanatory. Not open source and not self-hostable.

Alternatives

1Password Business is the leading direct competitor and easier to roll out to a small team. Bitwarden Enterprise is the open-source alternative and materially cheaper. Dashlane Business sits between them. For most SMBs without regulated workloads, one of those three is a better fit than Keeper.

Bottom line

Keeper is the pick when compliance, admin control and privileged access management matter as much as password vaulting. For individuals and non-regulated SMBs, 1Password, Bitwarden or Proton Pass are better value.