How to Use Keeper Security Audit to Find Weak and Reused Passwords

Applies to: Windows 10/11, macOS, iPhone, iPad, Android, and Supported Web Browsers
Difficulty: Beginner
Estimated Time: 5–15 minutes

Overview

Keeper Security Audit helps you identify passwords in your Keeper Vault that may be weak, reused, or otherwise in need of improvement. Using Security Audit, you can review your overall password security score, identify records requiring attention, and take steps to strengthen your accounts. Security Audit is particularly useful for ensuring that your business passwords are strong and unique. This guide explains how to access Security Audit, understand its results, identify weak or reused passwords, and improve your password security.

Before You Begin:

  • Make sure your Keeper account is active.
  • Sign in using your organization’s approved authentication method.
  • Confirm that your device has an internet connection.
  • Have access to the websites associated with the passwords you need to review.
  • Follow your organization’s password and account security policies.

Important: Security Audit evaluates passwords saved in your Keeper Vault. It does not automatically change passwords on the websites associated with those records.

Note: Some organization-managed accounts and shared credentials require approval before their passwords can be changed.

Understanding Keeper Security Audit

Keeper Security Audit reviews saved passwords and helps identify potential security weaknesses.

Common findings include:

  • Weak passwords.
  • Medium-strength passwords.
  • Strong passwords.
  • Reused passwords.
  • Your overall vault security score.

Why This Matters

If you use a short or predictable password, someone may be able to guess it or crack it more easily.

If you reuse one password across several websites, a compromise of one account may place the others at risk.

Security Audit helps you prioritize which credentials should be improved.

Important: A strong password is not necessarily safe if it has been exposed in a data breach. Keeper BreachWatch provides separate compromised-password monitoring when available.

Understanding Your Security Score

Keeper displays an overall security score for your vault.

This score helps summarize the strength of the passwords stored in Keeper.

For example, a vault with mostly strong, unique passwords generally receives a better score than one containing many weak or reused passwords.

Your Security Audit view may include:

  • Overall Security Score.
  • Strong passwords.
  • Medium-strength passwords.
  • Weak passwords.
  • Reused passwords.

Important: The Security Audit score displayed in your vault focuses on saved password strength and reuse. Your organization’s administrative security reporting may calculate additional metrics, such as multifactor authentication and Master Password strength.

A high score is helpful, but it does not guarantee that your accounts cannot be compromised.

Windows or Mac — Open Security Audit

Step 1: Open Keeper

  1. Open the Keeper desktop application or Web Vault.
  2. Sign in using your assigned Keeper account.
  3. Complete any required authentication.
  4. Wait for your vault to load.

Step 2: Open Security Audit

  1. Locate the navigation menu.
  2. Select Security Audit.
  3. Wait for Keeper to display your results.

Step 3: Review the Dashboard

The Security Audit dashboard displays information about your saved passwords.

Review the available categories:

  • Strong.
  • Medium.
  • Weak.
  • Reused.

Look at your overall security score and identify which categories need attention.

Note: The exact layout may vary depending on your Keeper version.

How to Find Weak Passwords

Weak passwords may be short, predictable, or easier for an attacker to guess.

Step 1: Open Security Audit

  1. Sign in to Keeper.
  2. Select Security Audit.
  3. Locate the weak password section.

Step 2: Review Weak Records

  1. Select the weak password category or use the available filtering controls.
  2. Review the listed records.
  3. Identify the accounts you are authorized to update.

Examples of Weak Password Practices:

  • Using a company name as a password.
  • Using simple number sequences.
  • Using common dictionary words alone.
  • Using predictable keyboard patterns.
  • Using short passwords.

Step 3: Prioritize Important Accounts

Start with accounts that could expose sensitive business information.

Examples include:

  • Work email.
  • Financial applications.
  • Business management platforms.
  • Customer portals.
  • Other accounts containing confidential company information.

Important: For centrally managed or shared accounts, contact True Synergy Networks or the authorized account owner before changing credentials.

How to Replace a Weak Password

Step 1: Open the Website

  1. Open the affected Keeper record.
  2. Verify the saved website address.
  3. Navigate to the legitimate website.
  4. Sign in using your existing approved credentials.

Step 2: Find Password Settings

  1. Open the website’s account settings.
  2. Locate Security, Password, or Change Password.
  3. Open the password change form.

Step 3: Generate a Strong Password

  1. Open Keeper’s password generator.
  2. Generate a long, random password.
  3. Use the website’s required length and character settings.

Recommendation: Choose a unique password of at least 16 characters when the website allows it. A longer generated password is appropriate when supported.

Avoid predictable variations of your previous password.

Step 4: Change the Website Password

  1. Enter your current password if required.
  2. Enter the newly generated password.
  3. Confirm the new password.
  4. Complete any required authentication.
  5. Save the changes.

Step 5: Update Keeper

  1. Open the corresponding Keeper record.
  2. Select Edit.
  3. Replace the old password with the new password if KeeperFill has not already updated it.
  4. Click Save.

Step 6: Verify the New Login

  1. Confirm that the website accepted the new password.
  2. Sign out when appropriate.
  3. Return to the login page.
  4. Use KeeperFill to sign in.
  5. Confirm that the new password works.

Important: Generating or saving a new password in Keeper does not automatically change the password on the website.

Both must match.

Understanding Reused Passwords

A reused password is a password that appears in more than one saved login record.

Example

You use the same password for:

  • A scheduling website.
  • A vendor portal.
  • A personal shopping account.

If one website experiences a data breach, an attacker may attempt to use that password to access the others.

This is called a credential-stuffing attack.

Recommendation: Use a completely different password for every account.

How to Find Reused Passwords

Step 1: Open Security Audit

  1. Sign in to Keeper.
  2. Select Security Audit.
  3. Locate the Reused password category.

Step 2: Review the Records

  1. Select the category.
  2. Review the affected records.
  3. Determine which accounts share credentials.
  4. Identify the accounts that should receive new passwords.

Note: Some records may intentionally reference the same underlying account. Verify that they represent separate logins before making changes.

Step 3: Prioritize Changes

Start with:

  1. Accounts containing sensitive business information.
  2. Accounts with elevated permissions.
  3. Accounts used to access customer information.
  4. Other accounts sharing the same password.

Important: Do not independently change shared company passwords that may be used by other employees or automated systems.

How to Fix Reused Passwords

Step 1: Choose an Account

  1. Open the record.
  2. Navigate to its legitimate website.
  3. Sign in.
  4. Open the password change settings.

Step 2: Generate a New Password

  1. Open Keeper’s password generator.
  2. Generate a new, unique password.
  3. Confirm that it meets the website’s requirements.

Step 3: Update the Account

  1. Complete the website’s password change process.
  2. Save the updated password in Keeper.
  3. Test the login.

Step 4: Repeat for Other Accounts

Repeat the process for each separate account using the reused password.

Important: Changing one website’s password does not protect the other accounts that still use the old password.

Every separate account should have a unique credential.

How to Review Medium-Strength Passwords

Keeper may classify some passwords as medium-strength rather than weak or strong.

These passwords may not be the highest priority, but they can often be improved.

Step 1: Open the Medium Category

  1. Open Security Audit.
  2. Locate the medium-strength password category.
  3. Review the affected records.

Step 2: Decide Which Passwords to Improve

Prioritize:

  • Important business accounts.
  • Accounts containing customer information.
  • Accounts without multifactor authentication.
  • Credentials you have not updated in a long time, where there is a reason to suspect compromise or another security issue.

Note: Password age alone does not necessarily require rotation. Change passwords when they are weak, reused, compromised, or when your organization’s policies require it.

Step 3: Update Authorized Accounts

  1. Open the legitimate website.
  2. Change the password using Keeper’s generator.
  3. Save the new value in Keeper.
  4. Confirm that the login works.

How to Review Strong Passwords

Keeper identifies passwords that meet its strength evaluation criteria.

Strong passwords are generally harder to guess than weak passwords.

However, remember that:

  • Strong passwords can still be exposed in a data breach.
  • Strong passwords should not be reused.
  • Multifactor authentication remains important.
  • Websites and accounts can be compromised through other methods.

Recommendation: Use Security Audit to improve password strength and Keeper BreachWatch to review known password exposure when available.

iPhone or iPad — Use Security Audit

Step 1: Open Keeper

  1. Open Keeper Password Manager.
  2. Sign in using your assigned account.
  3. Unlock your vault if prompted.

Step 2: Open Security Audit

  1. Open the application’s navigation menu.
  2. Tap Security Audit.
  3. Review the overall security score and available categories.

Step 3: Review Weak or Reused Passwords

  1. Select the appropriate category.
  2. Review the listed accounts.
  3. Tap the affected record.
  4. Identify the website and username.

Step 4: Improve the Password

  1. Open the legitimate website.
  2. Navigate to its password change settings.
  3. Use Keeper to generate a strong replacement password.
  4. Complete the password change.
  5. Update the saved Keeper record.
  6. Verify that the new login works.

Note: Available sorting and filtering controls may vary by Keeper mobile application version.

Android — Use Security Audit

Step 1: Open Keeper

  1. Open Keeper Password Manager.
  2. Sign in using your assigned account.
  3. Unlock your vault.

Step 2: Locate Security Audit

  1. Open the navigation menu.
  2. Select Security Audit, if available.
  3. Review the displayed security information.

Step 3: Review Password Risks

  1. Open the weak password category.
  2. Review affected records.
  3. Check the reused password category.
  4. Identify which passwords need to be changed.

Step 4: Update the Passwords

For each account you are authorized to manage:

  1. Open the legitimate website.
  2. Change the password to a new, unique value.
  3. Update Keeper.
  4. Test the new credentials.

Note: Android application layouts may vary by Keeper version.

How to Use Security Audit With BreachWatch

Security Audit and BreachWatch help identify different types of risk.

Security AuditBreachWatch
Finds weak passwordsDetects passwords associated with known breaches
Identifies reused passwordsFlags potentially compromised credentials
Helps improve password strengthHelps prioritize exposed-password replacement
Included in supported vault interfacesRequires applicable BreachWatch access

Recommended Workflow

  1. Open BreachWatch if available.
  2. Address known compromised passwords promptly.
  3. Open Security Audit.
  4. Replace weak passwords.
  5. Replace reused passwords with unique values.
  6. Review your updated results.

Important: If any affected record belongs to a centrally managed or shared account, coordinate the changes with True Synergy Networks.

Best Practices for Improving Your Security Score

To improve your Keeper Vault’s password security:

  • Generate long, random passwords.
  • Use a unique password for every account.
  • Replace passwords identified as weak.
  • Resolve reused passwords.
  • Address known compromised passwords.
  • Keep saved website addresses accurate.
  • Enable multifactor authentication on supported accounts.
  • Avoid saving business credentials in unauthorized locations.
  • Use approved shared folders for organization-managed credentials.

Important: Do not focus only on the displayed score. Protecting your actual accounts is more important than achieving a particular percentage.

Troubleshooting

I Cannot Find Security Audit

If Security Audit is missing:

  1. Confirm that you are signed into the correct Keeper account.
  2. Review the available vault navigation.
  3. Confirm that you are using an approved Keeper application version.
  4. Try the Web Vault or desktop application.
  5. Contact True Synergy Networks if the feature remains unavailable.

My Security Score Is Low

If your score is lower than expected:

  1. Open Security Audit.
  2. Review weak passwords.
  3. Review medium-strength passwords.
  4. Check for reused passwords.
  5. Identify which accounts you are authorized to update.
  6. Begin replacing weak and reused credentials.

Note: Improving several passwords may increase your score, but the score is only one measure of account security.

I Changed My Password, but the Score Did Not Improve

  1. Confirm that you changed the password on the actual website.
  2. Open the matching Keeper record.
  3. Verify that the new password was saved.
  4. Confirm that the new password is unique.
  5. Reopen Security Audit.
  6. Allow time for the results to update.

If the issue continues, contact True Synergy Networks.

Keeper Says My Password Is Reused, but I Only Have One Account

If multiple Keeper records reference the same account:

  1. Review the affected records.
  2. Compare their website addresses and usernames.
  3. Confirm whether they represent the same underlying account.
  4. Determine whether duplicate records are necessary.

Important: Do not delete records until you verify that they are duplicates and that deleting them will not affect other authorized users.

A Shared Password Is Marked as Weak

If the record belongs to a shared company service:

  1. Identify the affected account.
  2. Notify the authorized account owner.
  3. Contact True Synergy Networks when required.
  4. Follow the approved password rotation process.
  5. Confirm that the shared Keeper record is updated.

Important: Changing a shared password without coordination can interrupt access for coworkers or integrated business systems.

The Website Will Not Accept My Generated Password

If the new password is rejected:

  1. Review the website’s password requirements.
  2. Check the allowed password length.
  3. Review the permitted special characters.
  4. Adjust the Keeper generator settings to comply.
  5. Generate a new password.
  6. Complete the website’s password change procedure.

Important: Use the strongest unique password the website supports while following your organization’s policies.

I Cannot Change an Account Password

If you do not have permission to update an account:

  1. Do not attempt to bypass access restrictions.
  2. Identify the affected record.
  3. Notify the appropriate account owner.
  4. Contact True Synergy Networks for organization-managed credentials.

Note: Some applications require administrator assistance when changing account passwords.

I Updated Keeper, but My Website Login No Longer Works

  1. Verify that you are visiting the legitimate website.
  2. Confirm the saved username.
  3. Check whether the website accepted the password change.
  4. Review the Keeper record for the current password.
  5. Contact True Synergy Networks if the account is organization-managed.

Important: Do not repeatedly attempt incorrect passwords if the account may be locked.

Security Audit Shows a Risk After I Updated the Record

  1. Confirm that the correct Keeper record was updated.
  2. Check whether the record still uses a password saved elsewhere.
  3. Verify that the generated password is strong.
  4. Refresh the Security Audit view.
  5. Contact True Synergy Networks if the issue persists.

My Security Audit Looks Different on My Phone and Computer

  1. Confirm that both devices use the same Keeper account.
  2. Check your internet connection.
  3. Verify that the affected records have synchronized.
  4. Refresh or reopen the application.
  5. Review whether both devices are running approved versions.

If results remain inconsistent, contact True Synergy Networks.

Security Audit Shows No Weak Passwords, but I Received a Breach Notice

Security Audit and BreachWatch evaluate different risks.

If you receive a legitimate breach notice:

  1. Identify the affected account.
  2. Open the legitimate website.
  3. Change the password if appropriate.
  4. Update Keeper.
  5. Review BreachWatch if available.

Important: A strong password can still become compromised through a data breach.

Additional Information

  • Keeper Security Audit evaluates password strength and reuse within your vault.
  • The dashboard displays an overall password security score.
  • Passwords may be categorized as strong, medium, or weak.
  • Reused passwords are identified separately.
  • The Keeper password generator helps create stronger replacements.
  • Changing a password in Keeper does not automatically change it on the website.
  • Security Audit and BreachWatch provide complementary security information.
  • Organization-level Security Audit reports may incorporate additional account security factors.
  • Shared or centrally managed credentials may require coordinated changes.
  • True Synergy Networks manages enterprise security policies and advanced troubleshooting.

Security Reminder: Always use strong, unique passwords and never reuse credentials across unrelated services. Change weak or compromised passwords through the legitimate website and update the corresponding Keeper record. Do not modify shared company credentials without authorization. Never send passwords through email or text messages. If Security Audit identifies problems involving privileged, shared, or organization-managed accounts, contact True Synergy Networks for assistance.