Keeper is a password and secrets manager from Keeper Security sold to businesses directly and to MSPs through a separate partner programme with a multi-tenant admin console. Business and Enterprise plans are billed per user per month, but Keeper does not publish the actual figures without picking a region at checkout, and the MSP programme and KeeperPAM privileged access product are quote-only.
Listing updated . Checked by MSP Software .
Keeper is a password and secrets manager with a shared team vault, admin console and detailed access controls, plus a separate secrets management product for storing API keys and infrastructure credentials, sold by Keeper Security to businesses that need audit-ready compliance reporting alongside day-to-day password sharing. It offers a free trial, though there is no permanently free tier.
Keeper suits MSPs serving clients in regulated industries who need role-based access, event logging and breach monitoring as standard, rather than a lighter consumer-style vault. Business Starter, Business and Enterprise plans are priced per user per month, billed annually, but Keeper shows the actual figure only after a region is selected at checkout rather than publishing it outright, so a specific starting price cannot be quoted here (checked September 2026). MSPs buy separately through Keeper's MSP partner programme, which adds a multi-tenant admin console for managing several client vaults from one login and a separate privileged access product, KeeperPAM, for zero-trust session and secrets management; pricing for both is quote-only and Keeper does not publish wholesale rates or margins for the programme. Keeper integrates with identity providers including Okta, Microsoft Entra ID, JumpCloud, Duo and Ping Identity for single sign-on, plus DevOps tools such as Jenkins, GitHub Actions and Terraform for secrets injection. It holds FedRAMP, HIPAA, PCI DSS and GDPR-related compliance certifications. MSPs should confirm which compliance reporting features are included at their chosen tier before promising specific audit deliverables to a client, ask Keeper directly for MSP programme pricing since none of it is published, and check how Keeper's breach monitoring alerts flow into their own ticketing process, since a security feature that only surfaces inside Keeper's own console is less useful to a busy service desk than one that opens a ticket automatically.
1Password Business Workforce password manager priced per user, from $8.99 a month billed annually. No reviews yet · from US$8.99 vs 1Password Business
Bitwarden Open-source password manager with a free tier and published, low-cost business pricing. No reviews yet · from US$4.00 vs Bitwarden| Feature | Supported | Note |
|---|---|---|
| Shared team vaults | yes | Shared team folders on Business and Enterprise plans. |
| Role-based access control | yes | Role-based policies; advanced provisioning and governance on Enterprise. |
| Breach monitoring | yes | BreachWatch dark web monitoring. |
| Password health reports | yes | Security Audit screen scores each user's password strength and reuse (docs.keeper.io/enterprise-guide/security-audit). |
| SSO integration | yes | SAML 2.0 SSO and SCIM provisioning, included from the Enterprise tier. |
| FIDO2 and hardware key support | yes | FIDO2/WebAuthn keys including YubiKey and Google Titan. |
| Secrets management | yes | Separate Keeper Secrets Manager product for API keys and infrastructure credentials. |
| Browser extension | yes | Chrome, Firefox, Safari, Edge and Opera extensions. |
| Mobile app | yes | iOS and Android apps. |
| Event logging and audit trail | yes | Advanced Reporting & Alerts and Compliance Reports add-ons; full audit trails across admins, workloads and service accounts. |
| Emergency access | no | Keeper documents Emergency Access as available on consumer accounts only, not on Business, Enterprise or MSP plans (docs.keeper.io/user-guides/emergency-access). |
| Multi-tenant MSP console | yes | Multi-tenant admin console for the MSP partner programme. |
| Feature | Supported | Note |
|---|---|---|
| Multi-factor authentication | yes | TOTP, SMS, biometric, push and FIDO2 hardware keys. |
| Single sign-on | yes | SSO Connect Cloud/On-Prem lets Keeper act as a SAML relying party against Okta, Entra ID, Ping Identity and others. |
| Conditional access and device trust | unknown | |
| Privileged access management | yes | KeeperPAM: zero-trust privileged sessions, password rotation and a Keeper Gateway for target environments. |
| Passwordless and passkey support | yes | Passkey protection and sharing documented on the KeeperPAM MSP pages. |
| Directory sync | yes | SCIM provisioning documented for Okta, Azure AD, JumpCloud, Google Workspace, OneLogin and CloudGate. |
| Session and risk monitoring | unknown | |
| Legacy VPN and app support | unknown | |
| Self-service password reset | unknown | |
| Breach monitoring | yes | BreachWatch dark web monitoring. |
| RADIUS and SAML support | unknown | |
| Admin audit log | yes | Advanced Reporting & Alerts and full audit trails across admins, workloads and service accounts. |
Keeper does not publish a specific number: its Business Starter, Business and Enterprise plans are all shown only as 'starts at [amount] per user per month, billed annually', with the actual figure appearing only after a region or currency is selected at checkout. A free trial is available, so an MSP can see the real price for their region before committing. There is no permanently free tier for business use.
Keeper's standard business pricing is sold in Business Starter, Business and Enterprise tiers, while its separate MSP Partner Programme (with MSP-Authorised through MSP-Platinum levels) adds a multi-tenant admin console for managing several client vaults from one login. Neither the standard business prices nor the MSP programme's terms are published outright, so an MSP should get a quote from Keeper directly for the route it plans to buy through.
Yes, Keeper's Enterprise tier and its MSP and business plans above Business Starter support SAML 2.0 single sign-on and SCIM provisioning, with documented integrations for Okta, Microsoft Entra ID, JumpCloud, Duo and Ping Identity, alongside FIDO2 hardware keys and biometric unlock. This lets a business tie vault access to its existing identity provider rather than managing separate Keeper credentials for every user.
Keeper documents FedRAMP, HIPAA, PCI DSS and GDPR-related compliance support, plus a Security Audit screen that scores every user's password strength and reuse, and Advanced Reporting & Alerts and Compliance Reports as add-on modules. Exactly which reporting features are included depends on the pricing tier, so MSPs should confirm what is included before promising specific audit deliverables to a client in a regulated industry.
Yes, Keeper Secrets Manager is a separate product for storing API keys and infrastructure credentials, with documented integrations for Jenkins, GitHub Actions, GitLab, Azure DevOps and Terraform, distinct from Keeper's core team password vault. MSPs needing both password sharing and infrastructure secrets management should confirm with Keeper whether this is priced as an add-on or a separate subscription, since neither is published.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review
