Keeper is not listed in this report because Keeper is not vulnerable to this exploit.  Keeper does not utilize IPC to communicate between the browser extension and desktop application, by design.

I have personally communicated with the authors of this study to receive confirmation that we are not affected, and the researchers noted that Keeper does not use IPC.

Keeper’s engineering team specializes in application and cloud security – we make decisions everyday to prioritize security as the core foundation for our products. It’s our standard mode of operation and this commitment to our customers – to protect them, their privacy and their confidential information.

If you have any questions about this report, please email security@keepersecurity.com.

Thank you,

Craig Lurey

CTO & Co-founder

Keeper Security Inc.

The post IPC Vulnerability – Keeper is NOT Affected appeared first on Keeper Blog.

Adam is a professional cryptographer, publishes research on applied cryptography and analyzes emerging cryptographic protocols for Google and other technology companies. He is also the co-inventor of the Pythia PRF service that protects passwords with an oblivious cryptographic primitive. He co-authored ReCrypt, a key-homomorphic encryption scheme for securely rotating keys used in cloud storage. In the past, Adam has discovered and published flaws in the Linux random number generator and the Dual Elliptic Curve random number generator.

He also presents talks on cryptography at industry events including Milwaukee’s CypherCon, Chicago’s Thotcon and Defcon. He received his PhD in computer science from the University of Wisconsin and we are very excited for him to be lending his expertise to Keeper. If you’d like to connect with Adam you can find him on LinkedIn or by emailing security@keepersecurity.com.

As always, our commitment to privacy and security is at the forefront of all that we do. If you’re interested in learning more about our security protocols visit keepersecurity.com/security. We also remain committed to working with BugCrowd to manage our vulnerability disclosure program which you can learn more about by visiting https://bugcrowd.com/keepersecurity or our blog post here.

The post Welcoming Adam Everspaugh to Keeper! appeared first on Keeper Blog.

Free Unlimited Password Storage

Never forget a password again. The average number of online accounts each person has doubles every 5 years. That is a lot of passwords to manage and remember, which is why Keeper offers unlimited FREE password storage for all users. Whenever a new service or website prompts you to create a new account, Keeper makes the process simple. Create and store new records without even leaving the website, and avoid the cumbersome process of having to navigate to another tab on your browser. Keeper does the heavy lifting for you.

Password Storage for the Whole Family

Reusing simple, easy-to-remember passwords is a huge problem. In fact, more than 81% of cyber breaches occur due to weak passwords. Hackers don’t discriminate and target young adults as well as the elderly, stealing their identities, money and digital assets. Create unique accounts for the whole family and keep them safe from hackers with our family plan for as little as $5.00 a month.

Autofill on Unlimited Devices

KeeperFill for Apps is a powerful and easy-to-use autofill feature that makes signing into your favorite desktop applications a breeze across both Mac and Windows. To enable, click “More” from Keeper Desktop, go to “Settings” and select “KeeperFill.” Then define the hotkeys you would like to use to automatically fill your logins.

Our Browser Extensions are a powerful time-saving tool when on the web using your Mac or PC. Available on most browsers, our extensions enable advanced prompting for autofill, login, submit, save, and changing passwords.

Additional Keeper Password Manager Features

• Emergency Access
• Security Audit for Improved Password Strength
• Subfolders for Increased Organization
• Secure Sharing (Vault to Vault)
• Personalized Vault Themes
• Instant Vault Backup
• Self-destruct Protection
• Zero-knowledge Security Architecture
• 256-bit AES Encryption
• Biometric Login
• Secure Messaging with KeeperChat

Keeper Makes Switching Easy – Quickly Import Existing Passwords!

Do you already use a password manager? Is your browser holding all your passwords? Keeper offers easy methods to retrieve your data from other products and import into your new Keeper account. Getting started is easy using our Password Importer to collect all existing passwords stored in Chrome, IE, Edge, and Firefox. Keeper automates the retrieval process and provides step-by-step instructions. Keeper also supports importing passwords from other password managers and formats. To access this feature, click on “Import” from Keeper Desktop.

It doesn’t take a complete restructuring of your daily routine to practice good password hygiene. All it takes is Keeper.

Related Article:

PC Magazine – Keeper Security Review (Editors Choice)

The post Affordable Password Management for All appeared first on Keeper Blog.

• Full Enterprise password management
• Cross-platform sync
• Autofill on apps and web browsers
• Securely share passwords individually and with teams
• Provision users through Active Directory and SSO systems

Keeper supports import of Keepass (.kdbx version 4) files with nested folder structure using using Keeper Commander, our powerful command-line SDK.

Linux and Mac

1. Get Python 3 from python.org.
2. Install Keeper Commander with pip3:

$ pip3 install keepercommander

Important: Restart your terminal session after installation

Windows

1. Download and install WinPython
2. From the install folder of WinPython, run the “WinPython Command Prompt”
3. Install Keeper Commander with pip3:

$ pip3 install keepercommander

Now that Keeper Commander is installed, import your existing Keepass file into Keeper:

$ keeper import –format=keepass input.kdbx

Alternatively, to make each folder to be a shared folder object within Keeper, use the –shared option:

$ keeper import –format=keepass –shared input.kdbx

After import is complete, you can simply login to Keeper on any device and start managing your new Keeper vault. To learn more about Keeper Commander, visit this page. You can now access the vault on the command line:

$ keeper shell

If you have any questions, we’re here to help on live chat or email support@keepersecurity.com.

Craig Lurey
CTO & Co-founder
Keeper Security Inc.

The post How to Migrate from Keepass to Keeper appeared first on Keeper Blog.

Keeper recently updated the Secure File Storage plan for Keeper Business and Enterprise. Businesses can choose from 100 GB, 1 TB and 10 TB of space based on their needs. The files, photos and videos kept in the Secure File Storage are protected using the same 256-bit AES encryption as the passwords.

People find secure file storage useful for both personal and business needs. J.C. Rausch, a video network engineer at Metro Systems keeps nearly 300 documents in Keeper Secure File Storage. “I store multiple documents in there ranging from car insurance and renters insurance to medical information and lab reports,” he told us. “I also keep important notes that I’ve written to myself. Even though I have backup on my PC, I use Keeper as an encrypted secondary backup.”

J.C. has been using Keeper for over 5 years on his desktop computer and iPhone. “I probably tried four or five different apps, and Keeper seemed to be the easiest and simplest to use. It’s never let me down,” he said.

He didn’t use secure file storage at first, opting instead for one of those internet file-sharing services. But as we’ve seen in recent headlines, even they are susceptible to hackers. “As far as I know, Keeper has never been hacked, and others have,” he said. J.C. still uses public file sharing services for non-sensitive documents, but “for anything I don’t want others to see, I use Secure File Storage,” he said. “I have so much space available that I plan on going through a lot of my documents and uploading them,” he added.

Happy Guadalupe doesn’t use secure file storage for documents, but he’s founded equally a useful application that relates to his job in team admin support at the Coca-Cola Company.

Happy (whose real name is Eduardo, but he’s been “Happy” as long as he can remember) first came across Keeper because he was looking for a way to get his passwords out of a paper notebook and into something more secure. “I was becoming afraid because that book had become my life,” he said. “Keeper came along and it was love at first sight.”

Keeper has particular value for Happy at work because Coca-Cola’s security settings don’t permit employees on the internal network to save passwords on any sites they visit. “Keeper is a blessing,” he said. “I call it my second brain.”

As an admin, he frequently makes travel reservations for others, and that’s where secure photo storage comes in handy. Experts will tell you that sending personally identifiable information in email is playing with fire, but in Happy’s field of work, he frequently needs to exchange credit card information with hotels and travel services. That’s why he files away photos of all his credit cards next to the card numbers in Keeper. When making a hotel reservation, “I can send the photo of the card without sending the number in text,” he said. “After I send it, I immediately delete the message.” So far, most vendors have been perfectly OK with that arrangement.

Keeper’s Secure File Storage is available for business and personal users. You can purchase as an add-on in the checkout page. Business users can also contact sales for a quote or add to your base plan. Keeper provides 3 Secure File Storage options for Keeper Business and Enterprise users: $125/year for 100 GB, $500/year for 1 TB and $2,000 for 10 TB. For Keeper Unlimited users, it starts from 10 GB for $9.99/year. For Keeper Family Plan users, 10 GB is included in the subscription and you can purchase more storage starting at $39.99/year for 50 GB.

The post Keeper Updated Secure File Storage Plan for Business appeared first on Keeper Blog.

The video below demonstrates how to move from LastPass to Keeper:

Step by Step Instructions

1. Login to LastPass.com and visit More Options > Advanced > Export
2. On the new tab, Edit > Select All followed by Edit > Copy
3. On Mac, Open TextEdit and switch to Plain Text mode
On PC, open Notepad or any other text editor
4. Edit > Paste the contents into the new file.
5. File > Save and save the text file to your Desktop
6. Login to Keeper from keepersecurity.com/vault
7. Click on More > Import > LastPass
8. Drag and drop the file saved into the screen and finish the import

Other Import Tools

Keeper’s Import Tool seamlessly imports passwords that are stored in Chrome, Firefox, Edge and IE web browsers on your computer. From the Web Vault or Desktop App, click on More > Import then click Start Import.

Using the Import Tool, you’ll see that Keeper also supports importing data from other password managers including Dashlane, Keepass, 1Password and others.

If you have any questions, we’re here to help on live chat or email support@keepersecurity.com.

Craig Lurey
CTO & Co-founder
Keeper Security Inc.

The post How to Migrate from LastPass to Keeper appeared first on Keeper Blog.

If you’re looking for increased organization across teams, functions and account types, then you will enjoy our addition of subfolders. Subfolders provide greater control and organization over your private Keeper records and files.

If you read that last section and thought “Great, I have a million records. Moving all of them is going to be time-consuming”, well fear not. Our new “drag and drop” feature allows you to quickly move records between folders and subfolders. Click and hold to select one record and use the control key to select multiple records – drag them into your designated folder and you’re done!

In addition to moving records into other folders, you can also create shortcuts (i.e. a reference) of that record for another folder. This allows you to have a reference to that record in multiple folders for greater control, access, and convenience.

Grid view allows you to view your records in a graphical, tile format which displays beautiful, curated logos for popular websites. To enter Grid view, simply tap the Folders selector and tap “Grid” in the drop-down menu.

You can now right-click on records and folders from the “Folders” or “List” view to perform common actions such as moving records between folders, creating shortcuts or launching into websites.

With the launch of subfolders, the architecture of Keeper’s folder system has been radically improved. A folder and a shared folder are now “objects” that are created independently of records. Keeper’s implementation of subfolders is powerful and flexible, providing customers with the most secure encryption model while improving the overall user experience.

Here are a few key things to know:

• A Folder can be made up of personal records, shared records or other subfolders.
• Subfolders can be either shared or personal.
• You can create an unlimited number of folders and shared folders.
• A Shared Folder can be made up of an unlimited number of subfolders, each subfolder beneath a shared folder retains the permissions of the parent.
• There is no limit to the folder tree depth.
• A folder is a container made up of records or “shortcuts” (explained below)
• A Shared Folder is a container of records, with flexible user and team sharing capability

To create a new folder or subfolder, click on “Create New” then “Folder” or “Shared Folder”. You can select the parent folder or select “My Vault” to add the folder at the root level.

A record can exist outside of a folder, inside a folder or inside a shared folder. A record can also be linked into multiple folders or shared folders. A linked record is also referred to as a “shortcut”.

There are two ways to Move a record into a shared folder:

• Drag & Drop the record from the left pane and select “Move” when prompted
• Right-click a record from the left pane and select “Move to…“

To add a record to multiple folders (e.g. create a Shortcut), please follow one of these methods:

• Click on the Folder and then click “Edit“. In the “Add Records” search box, search for the records to add and click “Add“.
• Drag & Drop the record from the left pane and select “Create Shortcut” when prompted.
• Right-click a record from the left pane and select “Create Shortcut…“

If you’re switching between password managers that support subfolders, you can drag and drop your exported file with your passwords into your newly created Keeper Vault and it will import all of your information with subfolders intact, to keep everything as organized as you had it.

Since most of our Enterprise customers most frequently use the Desktop and Web Vault for on-site operations, they requested we launch Subfolders on these platforms first. When you log in to the Web Vault or Keeper Desktop application, you’ll automatically be converted to the new folder architecture. Your other applications such as the Windows Store, iOS, and Android apps are still under development, so you’ll notice that new folders created on the Web Vault and Desktop App won’t show up on your mobile device – however, this will not affect the integrity of your records. As soon as the mobile apps are updated (within 30 days), the folder structure on all mobile clients will be identical to that of the Web Vault and Desktop applications.

We’re available on live chat or email support@keepersecurity.com.

Thank you!

Craig Lurey
CTO & Co-founder
Keeper Security Inc.

The post Introducing Subfolders, Drag and Drop & Grid View Features! appeared first on Keeper Blog.

This National Internet Safety Month, learn how adopting an Enterprise Password Management Solution can significantly improve the security of your organization.

The post How to Protect Your Business from its Greatest Security Threat – National Internet Safety Month appeared first on Keeper Blog.

The post Stay Connected and Secure While Traveling – National Internet Safety Month appeared first on Keeper Blog.

Over the years we have developed and launched various methods and tools for customers to backup and recover their stored vault information in case of a lost or damaged device. One of the first ways we offered this was through a cloud-based “Backup” and “Restore” function. By clicking “Backup”, a snapshot of your Keeper vault was created and then stored in the Keeper Cloud Security Vault. Customers would manually need to click “Backup” on their device. We later added the ability to automatically perform a backup at a set time interval. Restoring a specific backup file involved going through a sequence of steps and it would completely replace the user’s vault with the selected file.

We then added the capability to instantly sync any stored information between devices and computers via our Cloud Security Vault. We called it “Internet Sync”. Through the use of Internet Sync, we added the ability to “share” a Keeper record with another privileged user, as well as creating “Shared Folders” to share to an entire business team. Edit and re-share permissions, as well as many other role-based access controls, were added. We added the ability to store individual files and photos to a Keeper record. Files could be attached to a Keeper record and also shared to other privileged users.

Our “Internet Sync” feature quickly became the most seamless and secure solution for backing up and synchronizing data between devices. Signing into a new device or transferring your vault between an old device and new device was automatic and seamless, and this dramatically reduced the need for manually created cloud snapshots. Support issues were reduced and customers were very happy with the capability. Since we still needed a way to completely recover a vault for a user, we left Backup and Restore in place.

In 2016, we made a massive improvement to Internet Sync on our backend which automatically creates a new “version” of a record every time any change or deletion occurred. By performing versioning of the data, we further reduced the need for a user to perform a snapshot. Thereafter, we introduced a new user interface around Version History in our Keeper Web Vault and Desktop App which gives customers the ability to view and recover any version of any record in their vault. Again, this dramatically reduced the necessity to have a snapshot “Backup” and “Restore”.

Based on many customer support issues surrounding these legacy features, and the fact that the Keeper Cloud Security Vault maintains version history for a full year; these enhanced data retention features now replace the previous “Backup” and “Restore” features on our mobile and desktop applications.

You can access your version history by logging into the Keeper Web Vault or Keeper Desktop and clicking “Record History” under the “Options” menu of a record. It’s incredibly easy to view a previous record version, see what changed, and restore that version if necessary. We are currently in the process of releasing a user interface for “Version History” on our iOS and Android applications. When released, customers can access a full history of their records (including deleted records) and recover those records at any time from their mobile devices.

We trust you’ll enjoy the new Version History feature. If you have any questions, please contact us at support@keepersecurity.com.

Thank you,

Craig Lurey
CTO & Co-founder
Keeper Security, Inc.

The post “Backup and Restore” is Now Called “Version Control and Record History” and It’s Awesome! appeared first on Keeper Blog.