How to Set Up Two-Factor Authentication in Keeper Password Manager

Applies to: Windows 10/11, macOS, iPhone, iPad, Android, and Supported Web Browsers
Difficulty: Beginner
Estimated Time: 5–10 minutes

Overview

Two-Factor Authentication (2FA), also known as Multifactor Authentication (MFA), adds another layer of protection to your Keeper Password Manager account. Instead of relying only on your password, two-factor authentication requires an additional verification method, such as a code generated by an authenticator application or a physical security key. Because Keeper stores sensitive login credentials, protecting your vault with strong authentication is particularly important. This guide explains how to set up two-factor authentication, configure supported verification methods, safely store backup codes, and regain access if you lose your authentication device.

Before You Begin:

  • Make sure your Keeper account is activated.
  • Sign in using your organization’s approved authentication method.
  • Have your smartphone or approved security key available.
  • Confirm that your device has an internet connection.
  • Verify whether your organization uses Microsoft 365 Single Sign-On (SSO).
  • Follow any authentication requirements established by your organization.

Important: If your Keeper account uses Microsoft 365 SSO, authentication may be controlled by your organization’s Microsoft 365 security policies. You may not need to configure a separate Keeper authentication method.

Note: Available authentication methods and settings depend on your organization’s Keeper configuration.

Understanding Two-Factor Authentication

Two-factor authentication protects your account by requiring an additional verification step.

Without 2FA

A person may only need your username and password to attempt to access an account.

With 2FA

A login may require:

  1. Your account credentials.
  2. A verification code, security key, or another approved authentication method.

This makes it more difficult for someone to access your account using a stolen password alone.

Important: Two-factor authentication does not prevent every type of account compromise. Never approve an unexpected sign-in request or share an authentication code.

Understanding Keeper Authentication Methods

Keeper supports several authentication methods, depending on your account and organization.

Authenticator Application

An authenticator application generates temporary verification codes.

Supported options can include:

  • Microsoft Authenticator.
  • Google Authenticator.
  • Other compatible authenticator applications.

These codes typically change every 30 seconds.

Security Key

A security key is a physical or device-based authentication method.

Supported methods may include:

  • YubiKey.
  • Other FIDO2-compatible security keys.
  • Supported device passkeys.

Security keys can provide strong protection against phishing when used with supported authentication systems.

SMS Text Message

Keeper may send a verification code to your registered mobile telephone number.

Note: Authenticator applications and security keys are generally preferable to SMS because SMS can be vulnerable to telephone-number takeover attacks.

Organization-Managed Authentication

Some organizations use:

  • Microsoft 365 Single Sign-On.
  • Duo Security.
  • Other approved identity providers.

Your organization’s administrator determines which methods are permitted or required.

Step 1: Determine Whether You Use Keeper SSO

Before configuring authentication, confirm how you sign in to Keeper.

If You Sign In With Microsoft 365

Your process may look like this:

  1. Open Keeper.
  2. Enter your work email address.
  3. Continue to your organization’s Microsoft sign-in page.
  4. Enter your Microsoft 365 credentials if prompted.
  5. Complete Microsoft Authenticator or another required verification.
  6. Access your Keeper Vault.

In this configuration, Microsoft 365 may manage the authentication requirements for your Keeper login.

Important: Do not create a separate Keeper Master Password or modify your organization’s authentication settings unless instructed by True Synergy Networks.

If You Sign In With a Keeper Master Password

Your process may look like this:

  1. Open Keeper.
  2. Enter your email address.
  3. Enter your Keeper Master Password.
  4. Complete a Keeper verification prompt if two-factor authentication is enabled.
  5. Access your vault.

If this is your sign-in method, you may be able to configure Keeper’s built-in two-factor authentication settings.

Note: Some organizations restrict which verification methods users can select.

Windows or Mac — Enable Two-Factor Authentication

Step 1: Open Your Keeper Vault

  1. Open the Keeper desktop application or a supported browser.
  2. Visit https://vault.keepersecurity.com, unless your organization has provided another approved Keeper address.
  3. Sign in to your Keeper account.
  4. Complete any required authentication.

Step 2: Open Security Settings

  1. Click your account email address or profile menu in the upper-right corner.
  2. Select Settings.
  3. Open the Security section.
  4. Locate Two-Factor Authentication.

Step 3: Enable Two-Factor Authentication

  1. Enable Two-Factor Authentication if it is not already active.
  2. Select the available setup or edit option.
  3. Review the supported verification methods.
  4. Choose the method approved by your organization.

Recommendation: Use an authenticator application or a supported security key when available.

Important: If the option is unavailable or managed by your organization, do not attempt to bypass the restriction. Contact True Synergy Networks for assistance.

Windows or Mac — Set Up Microsoft Authenticator

Microsoft Authenticator can generate temporary verification codes for Keeper accounts that support authenticator-based 2FA.

Step 1: Install Microsoft Authenticator

On your smartphone:

  1. Open the Apple App Store or Google Play Store.
  2. Search for Microsoft Authenticator.
  3. Verify that Microsoft is the application publisher.
  4. Install the application.
  5. Open Microsoft Authenticator.

Step 2: Open Keeper’s Authenticator Setup

On your computer:

  1. Open Keeper.
  2. Navigate to Settings → Security.
  3. Enable Two-Factor Authentication if needed.
  4. Select Authenticator App.
  5. Continue until Keeper displays a QR code or setup key.

Step 3: Add Keeper to Microsoft Authenticator

On your smartphone:

  1. Open Microsoft Authenticator.
  2. Tap + to add an account.
  3. Select Other account or the available option for an account using an authentication code.
  4. Choose the option to scan a QR code.
  5. Scan the QR code displayed by Keeper.

Microsoft Authenticator should create an entry that generates temporary verification codes.

Important: The QR code and secret key provide access to your authentication codes. Never share them with anyone.

Step 4: Verify the Setup

  1. Return to Microsoft Authenticator.
  2. Locate the Keeper account entry.
  3. Read the current verification code.
  4. Enter the code into Keeper.
  5. Click Next or Verify.
  6. Confirm that Keeper accepts the code.

Step 5: Save Your Backup Codes

After successful enrollment, Keeper may display backup codes.

  1. Review the codes.
  2. Save them in a secure, organization-approved location.
  3. Confirm that you have stored them safely.
  4. Complete the setup process.

Important: Backup codes provide an alternative way to authenticate if your primary device becomes unavailable.

Never store backup codes in an unsecured document, screenshot collection, or shared location.

Windows or Mac — Set Up Google Authenticator

Google Authenticator can also generate verification codes for Keeper.

Step 1: Install Google Authenticator

  1. Open the Apple App Store or Google Play Store.
  2. Search for Google Authenticator.
  3. Verify that Google is the application publisher.
  4. Install the application.

Step 2: Open Keeper’s 2FA Settings

  1. Sign in to Keeper.
  2. Open Settings → Security.
  3. Locate Two-Factor Authentication.
  4. Select Authenticator App.
  5. Display the setup QR code.

Step 3: Scan the Code

  1. Open Google Authenticator.
  2. Tap the add-account button.
  3. Select Scan a QR code.
  4. Scan the QR code displayed by Keeper.
  5. Confirm that the account appears in Google Authenticator.

Step 4: Verify the Code

  1. Read the current code in Google Authenticator.
  2. Enter it into Keeper.
  3. Confirm the verification.
  4. Securely store any backup codes provided.

Note: Authenticator verification codes expire quickly. If one expires while you are typing, wait for the next code and try again.

How to Set Up SMS Verification

If your organization allows SMS verification, Keeper can send authentication codes to an approved mobile telephone number.

Step 1: Open Security Settings

  1. Sign in to Keeper.
  2. Navigate to Settings → Security.
  3. Locate Two-Factor Authentication.
  4. Select Text Message or SMS, if available.

Step 2: Enter Your Mobile Number

  1. Select the correct country or region.
  2. Enter your mobile telephone number.
  3. Review the number for accuracy.
  4. Click Next.

Step 3: Verify the Number

  1. Wait for Keeper to send the verification code.
  2. Open your smartphone’s text messaging application.
  3. Locate the Keeper verification message.
  4. Enter the code into Keeper.
  5. Complete the verification.

Step 4: Save Backup Codes

If Keeper provides backup codes:

  1. Store them securely.
  2. Confirm that they are saved.
  3. Finish enrollment.

Important: Never provide SMS verification codes to anyone who calls, emails, or messages you requesting them.

Recommendation: If supported, use Microsoft Authenticator, Google Authenticator, or a security key instead of SMS.

How to Set Up a Security Key

Keeper supports compatible FIDO2 security keys for additional account protection.

Step 1: Open Keeper Security Settings

  1. Sign in to your Keeper Vault.
  2. Open Settings.
  3. Select Security.
  4. Locate Security Keys.

Step 2: Start Registration

  1. Select Set Up, Add Security Key, or the available registration control.
  2. Follow the instructions displayed by Keeper.
  3. Insert, connect, or activate your security key when prompted.

Step 3: Confirm the Security Key

Depending on the key and device:

  1. Touch the key’s confirmation area.
  2. Enter the security key PIN if prompted.
  3. Complete any additional device verification.
  4. Assign a recognizable name to the key.
  5. Confirm registration.

Step 4: Test the Key

  1. Confirm that Keeper displays the registered security key.
  2. Review any required backup authentication method.
  3. Test the key during your next legitimate login.

Important: Do not remove your existing working authentication method until you have confirmed that the new key works and your organization permits the change.

Note: Security key features depend on your Keeper account, browser, operating system, and organization security policy.

iPhone or iPad — Set Up Keeper Two-Factor Authentication

If your account uses Keeper-managed 2FA, you may configure supported methods from the Keeper mobile application.

Step 1: Open Keeper

  1. Open Keeper Password Manager.
  2. Sign in using your assigned account.
  3. Unlock the vault if prompted.

Step 2: Open Two-Factor Settings

  1. Tap Settings.
  2. Select Two-Factor Authentication.
  3. Review the available methods.

Step 3: Select a Verification Method

Depending on your account, options may include:

  • Authenticator application.
  • SMS verification.
  • Supported security keys.
  • Other organization-approved methods.
  1. Select the appropriate option.
  2. Follow Keeper’s setup instructions.
  3. Complete verification.
  4. Securely save any recovery or backup codes provided.

Note: The mobile interface may display different options than the desktop application.

Android — Set Up Keeper Two-Factor Authentication

Step 1: Open Keeper

  1. Open the Keeper Password Manager application.
  2. Sign in to your account.
  3. Unlock your vault.

Step 2: Open Security Settings

  1. Navigate to Settings.
  2. Locate Two-Factor Authentication or the corresponding Security section.
  3. Review the available verification methods.

Step 3: Configure Your Method

  1. Select your approved authentication method.
  2. Follow the setup instructions.
  3. Complete the verification process.
  4. Securely store any backup codes.

Important: Only use verification methods approved by your organization.

Understanding Backup Codes

Keeper may provide backup codes when you configure certain two-factor authentication methods.

These codes help you sign in if your primary verification device is unavailable.

When Backup Codes May Be Needed

  • You lose your smartphone.
  • Your authenticator application is unavailable.
  • Your mobile device is damaged.
  • You cannot receive verification messages.

How to Store Backup Codes

Store codes in an approved, secure location that you can access if your primary authentication device is lost.

Important: Do not rely exclusively on storing backup codes on the same phone used for authentication.

Never share them through unsecured email or text messages.

How Often Will Keeper Ask for Verification?

Keeper may allow users to select how frequently additional verification is required.

Depending on the application and organization settings, options may include:

  • Every login.
  • Every 12 hours.
  • Every 24 hours.
  • Every 30 days.
  • Remembering an approved device.

Important: Your organization may require verification every time you sign in or enforce other restrictions.

Do not reduce authentication frequency to bypass your organization’s security policy.

Understanding Device Approval vs. Two-Factor Authentication

Keeper may ask you to approve a new device even when you already use two-factor authentication.

These are separate security checks.

Device Approval

Verifies whether a new computer, browser, or phone is authorized to access your Keeper account.

Two-Factor Authentication

Verifies your identity using an additional method during sign-in.

Example:

When signing in on a new computer, you may be asked to approve the device first and then complete your authentication steps.

Important: Never approve a device login that you did not initiate.

How to Change Your Authentication Method

If you get a new phone or want to replace your current verification method:

  1. Sign in to Keeper using your existing approved method.
  2. Open Settings → Security or the applicable mobile 2FA settings.
  3. Review your current authentication methods.
  4. Add or replace a method only if the controls and your organization’s policy allow it.
  5. Complete verification of the new method.
  6. Confirm that the replacement method works before removing the old one.

Important: If your organization manages authentication through Microsoft 365 SSO, changes to your Microsoft authentication methods must follow your organization’s approved Microsoft 365 procedures.

Contact True Synergy Networks if you are unsure which method controls your account.

What to Do if You Lose Your Authentication Device

If your phone or security key is lost:

  1. Stop attempting repeated sign-ins.
  2. Check whether you have an approved backup authentication method.
  3. Use a valid backup code if Keeper offers that option and your organization permits it.
  4. Contact True Synergy Networks if you cannot authenticate.
  5. Follow the approved identity verification and recovery procedure.

Important: Do not create another Keeper account to bypass a lost authentication device.

Some authentication methods require administrator assistance to reset or replace.

Troubleshooting

Keeper Is Not Showing the Two-Factor Authentication Option

If the setting is missing:

  1. Confirm that you are signed into the correct Keeper account.
  2. Review the Security settings.
  3. Verify whether your organization uses Single Sign-On.
  4. Contact True Synergy Networks if the option remains unavailable.

Note: Organization-managed authentication policies may restrict user configuration.

Microsoft Authenticator Codes Are Not Working

  1. Confirm that you selected the correct Keeper entry in Microsoft Authenticator.
  2. Wait for a new verification code.
  3. Enter the code before it expires.
  4. Confirm that your smartphone’s date and time are set automatically.
  5. Try again.

If verification continues to fail, contact True Synergy Networks.

Important: Do not delete the authenticator entry before confirming that an alternative recovery method is available.

Google Authenticator Codes Are Not Working

  1. Confirm that the correct account is selected.
  2. Wait for the next code.
  3. Enter the code carefully.
  4. Verify that the phone’s time settings are correct.
  5. Contact True Synergy Networks if the issue continues.

I Am Not Receiving SMS Verification Codes

  1. Confirm that your phone has cellular service.
  2. Check whether the registered number is correct.
  3. Wait briefly for the message.
  4. Select Send a New Code if available.
  5. Avoid repeatedly requesting codes.

If codes do not arrive, use another approved method or contact True Synergy Networks.

Keeper Says My Verification Code Is Invalid

  1. Confirm that you are entering the code for Keeper.
  2. Check whether the code has expired.
  3. Verify that the correct authentication method is selected.
  4. Wait for a fresh code and try again.

If the issue continues, contact True Synergy Networks.

I Lost My Backup Codes

If your backup codes are missing:

  1. Determine whether you still have access to your current authentication device.
  2. If signed in, review whether Keeper permits generating or replacing backup codes.
  3. Follow your organization’s approved recovery procedure.
  4. Contact True Synergy Networks if assistance is required.

Important: Do not disable or replace authentication methods without confirming that you can maintain access.

My Security Key Is Not Recognized

  1. Confirm that the key is compatible with the device.
  2. Check that it is connected correctly.
  3. Use a supported browser.
  4. Follow any PIN or touch confirmation prompts.
  5. Try another approved USB port or supported connection method.

If the issue continues, contact True Synergy Networks.

Keeper Keeps Asking Me to Verify My Device

  1. Confirm that you are using a recognized browser or device.
  2. Check whether your browser is configured to clear session data.
  3. Review whether your organization requires frequent authentication.
  4. Complete legitimate verification prompts.

If the behavior appears abnormal, contact True Synergy Networks.

I Use Microsoft 365 SSO and Keeper Asks for Different Verification

  1. Confirm that you entered your work email address correctly.
  2. Check whether you were redirected to the expected Microsoft sign-in page.
  3. Review the verification prompt carefully.
  4. Do not approve unexpected requests.
  5. Contact True Synergy Networks if the sign-in procedure has changed unexpectedly.

Important: Do not create a new Keeper Master Password or enroll an unfamiliar authentication method simply to bypass an unexpected login screen.

I Received a Verification Request That I Did Not Initiate

If you receive an unexpected authentication request:

  1. Do not approve it.
  2. Do not provide any verification codes.
  3. Review the displayed account and device information.
  4. Contact True Synergy Networks immediately.

Important: Unexpected verification prompts may indicate that someone else is attempting to access your account.

Additional Information

  • Keeper supports multiple two-factor authentication methods.
  • Authenticator applications generate temporary verification codes.
  • Microsoft Authenticator and Google Authenticator can be used with compatible Keeper accounts.
  • Supported FIDO2 security keys provide strong authentication protection.
  • SMS verification may be available but is generally less resistant to certain attacks than authenticator applications or security keys.
  • Keeper may provide backup codes for account recovery.
  • Device approval is separate from two-factor authentication.
  • Keeper Enterprise SSO accounts may rely on Microsoft 365 or another identity provider for authentication.
  • Your organization’s administrator may enforce required verification methods and frequencies.
  • True Synergy Networks manages organization-level security policies and authentication recovery assistance.

Security Reminder: Never share authentication codes, backup codes, security keys, or device approval requests with anyone. Only approve sign-in attempts that you personally initiated. Do not disable multifactor authentication or change organization-managed security settings without authorization. If you lose your authentication device, receive unexpected verification prompts, or suspect that your Keeper account has been compromised, contact True Synergy Networks immediately.