Keeper review

Keeper is broader than a password manager: it describes itself as a zero-trust identity security platform for passwords, privileged access, secrets, remote connections, endpoints and databases. Its product range covers individuals, families, businesses, enterprises and MSPs, so the intended buyer runs from a personal user to an organization managing employee and machine identities.

The platform combines password management with privileged access controls, including Just-in-Time access, elevation, session control and audit trails. Keeper also offers secrets management and secure remote database access. Its KeeperAI feature analyzes privileged activity, classifies risk and can terminate sessions it considers high-risk. Keeper says its end-to-end, zero-knowledge encryption means only users can decrypt their data. That is the company’s security claim, not an independent assessment of its implementation.

Keeper’s main advantage is range. Rather than treating password storage as a standalone tool, it brings password management together with controls for privileged users, secrets and remote access. That can make it relevant to organizations that need to govern both employee credentials and non-human identities or workloads, though the right fit depends on the products and limits in a quote.

The listed privileged-access features are specific: Just-in-Time access, elevation, session control and audit trails. KeeperAI adds risk classification for privileged activity and can terminate high-risk sessions, according to the product description. For teams managing infrastructure credentials, secrets management is part of the platform; remote connections and secure remote database access are also included in its stated scope.

Keeper says its zero-knowledge, end-to-end encryption leaves decryption to users. That is a meaningful privacy and security position to evaluate against your requirements, but it should not be mistaken for proof that every product or workflow suits your threat model. The range of offerings—from personal and family plans to enterprise and MSP products—also gives buyers more than one route into the Keeper ecosystem.

The biggest buying problem is price opacity. Monthly and annual prices are not published in the pricing information available to us; buyers need a custom quote or must contact sales. A free trial is listed, but its duration is not published. The available pricing details are marked low-confidence, so verify the current terms directly before comparing costs.

The published KeeperPAM NHI and workload bands give some capacity guidance, but not a bill. The Base plan lists up to 24 annual active NHIs and 5,000 monthly workloads at no cost. Tier 1 covers 25–99 NHIs and 5,001–25,000 workloads; Tier 2, 100–249 NHIs and 25,001–250,000 workloads; Tier 3, 250–749 NHIs and 250,001–1,000,000 workloads. Enterprise starts at 750+ NHIs and 1,000,000+ workloads. Prices remain unpublished across these tiers, and seat limits are not published. That leaves teams unable to estimate the cost of adding users from the available figures alone.

Keeper does not publish monthly or annual prices in the published pricing information. Pricing requires a custom quote or a sales contact, so there is no public starting price to compare. A free trial is listed, but its duration is not published.

The KeeperPAM Base plan includes up to 24 annual active non-human identities (NHIs) and 5,000 monthly workloads at no cost. The next tiers cover 25–99 NHIs and 5,001–25,000 workloads; 100–249 NHIs and 25,001–250,000 workloads; and 250–749 NHIs and 250,001–1,000,000 workloads. Enterprise starts at 750 NHIs and 1,000,000+ workloads. These are thresholds, not published price jumps: the dollar difference between tiers is unknown. Seat limits are not published for any tier.

No add-on prices or details are listed in the published pricing data. Monthly versus annual billing rates are also unpublished, so ask sales for the full quote, billing terms and any seat or usage limits before comparing plans.

The published materials describe Keeper’s products, but don’t specify migration tools, supported import formats, export options or how long a typical move takes. We can’t assess the migration workload from this information alone. Before switching, ask Keeper to confirm how passwords, secrets and privileged-access policies can be imported and exported, and whether exports remain usable outside Keeper.

That matters for lock-in: the materials describe Keeper’s end-to-end encryption and say only users can decrypt their data, but don’t explain how that affects account recovery or an exit. Get those answers in writing before moving a large vault or building workflows around the platform.

The published sources include no Reddit posts or comments, so we can’t reliably say what tends to make customers leave. There’s no sourced basis here to attribute departures to price, migration problems or product limits. For a comparison, request a quote and test the specific export and handoff process your team would need.