Keeper review 2026: security, features and prices

Keeper is a security-first password manager with one of the longest certification lists in the field, passkey support and a family plan for up to five people. Its weak spots are add-on pricing and a fairly corporate feel. This review is an editorial assessment based on vendor documentation, published certifications, feature lists and prices as of October 2026. It is not a laboratory test.

Quick verdict

Criterion	Assessment
Encryption	AES-256-GCM per record, PBKDF2, zero-knowledge
Independent audits	SOC 2, ISO 27001/27017/27018, FedRAMP High, StateRAMP, FIPS 140-3 validated cryptography (per Keeper)
Passkeys	Supported on personal and family plans
Server location	EU region documented for organisation tenants; unclear for personal accounts
Recovery	Account recovery options plus emergency access on the family plan
Export	Export tools available; check passkey handling before you switch
Platforms	Windows, macOS, Linux, Android, iOS, web and browser extensions
Price	Low base price, add-ons extra

Security

Keeper encrypts at the record level: each item gets its own 256-bit AES key in GCM mode, generated on your device, and those keys are protected by further layers at folder and vault level. Key derivation uses PBKDF2, which is older and less resistant to GPU attacks than Argon2id, so a long master passphrase matters more here than with providers that use Argon2id. Keeper says that its cryptographic module is FIPS 140-3 validated, which is relevant mainly for government and regulated customers.

The compliance list is the product’s signature strength. Keeper reports ISO 27001, 27017 and 27018, SOC 2, FedRAMP High and StateRAMP, PCI DSS and HIPAA compliance, and it takes part in the EU-US Data Privacy Framework. These are vendor statements that we did not verify against the reports. They show that processes are audited, which is valuable for businesses, but they are not the same as public code audits like those Bitwarden and Proton publish. For background on why audits and open source matter, read our password manager guide.

Features

• Passwords and passkeys. Unlimited passwords, devices and sync, plus passkeys on personal plans. See passkeys explained.
• Sharing. Unlimited secure sharing, shared folders and permissions on the family plan.
• Emergency access. Estate-planning style access for trusted contacts on the family plan.
• Biometrics. Fingerprint and face unlock on supported devices.
• Secure messaging. KeeperChat, an encrypted messenger inside the app.
• Add-ons. BreachWatch for dark web monitoring and secure file storage, with 10 GB included in the family plan.

Keeper is strongest as a business tool, and its Personal and Family plans benefit from that engineering. Teams will find it in our overview of password managers for business, and small firms can pair it with the advice in small business login security.

Pricing (as of October 2026)

Prices vary between sources because of first-year discounts. Price comparison sites quote the Personal plan at roughly 20 to 40 USD per year after discount or at list price, and the Family plan for five users at somewhat above 40 USD per year with the new-customer discount and about double at the regular rate. Billing is annual. BreachWatch and file storage are charged extra, reportedly around 27 USD per year for BreachWatch and from about 14 USD per year for 10 GB of storage. We could not confirm euro prices for your country, so check the current price list before buying. The first-year discount does not apply on renewal.

An earlier free tier was limited to one mobile device and a small number of records, and its current status should be confirmed on the Keeper site.

Privacy and data location

Keeper is a US company, and US jurisdiction applies. The vendor documents six hosting regions for organisations, including an EU region, with customer data isolated to the region you choose. For personal accounts we found no equally clear option, so treat EU residency as unconfirmed until Keeper states it for your plan. Users who need a documented EU choice can compare European password managers or look at Bitwarden, which lets you pick the EU region at sign-up.

Who Keeper suits

Keeper suits security-conscious households and small teams that want a vendor with a long compliance record and are willing to pay a little extra for add-ons they actually use. The record-level encryption, shared folders and emergency access work well for families who need to hand over access in a crisis. It is a weaker fit for people who want open source, a free tier with no limits, or a lean tool without an enterprise flavour. If you are comparing for a company, read the business-oriented material and the vendor’s documentation on regions and administration, which go well beyond the personal plans.

Getting started safely

1. Choose a long master passphrase. Because Keeper derives keys with PBKDF2, length matters more than complexity tricks.
2. Add a second factor, preferably a hardware key or an authenticator app, and store the backup method offline.
3. Review the account recovery settings and the emergency access contacts so that a trusted person can help if something happens to you.
4. Decide whether you need the paid add-ons before you subscribe, and note the renewal price once the first-year discount ends.
5. Test an export of a few records and see how passkeys and attachments are handled.

What we could not verify

The certifications and the FIPS 140-3 claim are the vendor’s statements, and we did not read the audit reports. We could not confirm an EU hosting option for personal accounts, and the quoted prices differ between sources because of discounts and currency. If any of these points is decisive for you, ask Keeper for a written answer.

Alternatives

• Bitwarden: open source, free tier, EU region, lower prices.
• 1Password: refined apps, Secret Key and a strong family plan.
• Dashlane: bundled VPN and dark web monitoring, no free tier.
• More options in the best password managers comparison.

Conclusion

Keeper is a solid, heavily certified password manager that suits security-conscious households and small teams that value compliance. Its drawbacks are add-on costs, PBKDF2 rather than Argon2id, and unclear EU hosting for personal accounts. If you want public code audits, open source or a generous free plan, Bitwarden is the better fit. If you want a polished consumer experience, look at 1Password. If compliance paperwork matters to your organisation, Keeper deserves a place on the shortlist.