How to Use Keeper BreachWatch to Identify Compromised Passwords

Applies to: Windows 10/11, macOS, iPhone, iPad, Android, and Supported Web Browsers
Difficulty: Beginner
Estimated Time: 5–10 minutes

Overview

Keeper BreachWatch is a password security monitoring feature that helps identify credentials that may have been exposed in known data breaches. BreachWatch checks passwords saved in your Keeper Vault against known compromised credential data, including information discovered through dark web monitoring. If a password is identified as potentially compromised, Keeper alerts you so you can take steps to secure the affected account. This guide explains how to activate BreachWatch, scan your saved passwords, understand security alerts, and safely resolve compromised credentials.

Before You Begin:

  • Make sure your Keeper account is active.
  • Sign in using your organization’s approved authentication method.
  • Confirm that your device is connected to the internet.
  • Verify that BreachWatch is available for your Keeper account.
  • Have access to the websites or applications associated with your saved credentials.

Important: BreachWatch is a licensed feature and may be managed by your organization. If BreachWatch does not appear in your vault, contact True Synergy Networks.

Note: A BreachWatch alert indicates that a password is at risk. It does not necessarily prove that someone accessed your account.

Understanding Keeper BreachWatch

Data breaches occur when unauthorized individuals gain access to information stored by a website, company, or service.

Exposed information can include:

  • Email addresses.
  • Usernames.
  • Passwords.
  • Account identifiers.
  • Other sensitive information.

Attackers may try to use exposed passwords to sign in to unrelated websites, particularly when people reuse the same credentials.

Keeper BreachWatch helps identify saved passwords that may have appeared in known breach data.

Example

Suppose you use the same password for two websites.

One of those websites experiences a data breach.

If the password becomes known to attackers, they may try using it to access your other accounts.

BreachWatch may identify the exposed password and warn you about the risk.

Important: Even if you have not noticed unauthorized activity, a compromised password should be changed promptly.

Understanding BreachWatch vs. Security Audit

Keeper provides two related security features.

BreachWatch

BreachWatch helps identify passwords associated with known compromised credential data.

It focuses on exposure to known breaches.

Security Audit

Security Audit evaluates the overall strength and reuse of passwords stored in your vault.

It can help identify:

  • Weak passwords.
  • Reused passwords.
  • Other password hygiene concerns.

What’s the Difference?

FeaturePrimary Purpose
BreachWatchIdentify passwords exposed in known breach data
Security AuditIdentify weak or reused passwords
Password GeneratorCreate strong, unique replacement passwords

Recommendation: Use BreachWatch and Security Audit together when both are available.

Note: A strong password can still become compromised if it is exposed in a breach. A weak password does not necessarily mean it has appeared in known breach data.

Windows or Mac — Open BreachWatch

Step 1: Open Keeper

  1. Open the Keeper desktop application or Web Vault.
  2. Sign in using your assigned Keeper account.
  3. Complete any required authentication.
  4. Wait for your vault to load.

Step 2: Locate BreachWatch

  1. Look at the left navigation menu.
  2. Select BreachWatch.
  3. Review the displayed information.

If BreachWatch has not been activated, Keeper may display an introduction or setup screen.

Step 3: Start BreachWatch

  1. Select Let’s Begin, if displayed.
  2. Follow the on-screen instructions.
  3. Start the initial scan.
  4. Wait for Keeper to review your saved credentials.

Note: BreachWatch availability and activation may depend on your organization’s subscription and security policies.

How to Review BreachWatch Scan Results

After scanning, Keeper displays the results associated with your saved credentials.

Step 1: Review the Dashboard

  1. Open BreachWatch.
  2. Review the detected risks.
  3. Identify records flagged as potentially compromised.

Step 2: Select an At-Risk Record

  1. Click a flagged record.
  2. Review its title and website address.
  3. Confirm which account is affected.
  4. Review Keeper’s available remediation instructions.

Step 3: Determine the Appropriate Action

For an account you personally manage, the usual next step is to change its password.

For a company-managed or shared account:

  1. Do not independently change a credential used by multiple employees unless authorized.
  2. Notify the appropriate account owner.
  3. Contact True Synergy Networks if assistance is required.

Important: Changing a shared password without coordinating with other authorized users can interrupt business operations.

How to Resolve a Compromised Password

If BreachWatch identifies a password as potentially compromised, you should replace it with a unique, strong password.

Step 1: Open the Legitimate Website

  1. Open the affected Keeper record.
  2. Review its website address.
  3. Navigate to the legitimate website or application.
  4. Sign in using your current approved method.

Important: If you are responding to a security notification, do not follow unfamiliar links in unexpected emails. Open the legitimate website directly or through your verified Keeper record.

Step 2: Open Password Settings

  1. Sign in to the affected website.
  2. Navigate to Account, Security, or Password Settings.
  3. Locate the option to change your password.

Step 3: Generate a Replacement Password

  1. Open Keeper’s password generator.
  2. Generate a strong, unique password.
  3. Use the password on the website’s password change form.
  4. Complete the website’s required verification.
  5. Save the password change.

Recommendation: Use a randomly generated password with at least 16 characters when the website permits it.

Important: Do not reuse the compromised password or choose a simple variation of it.

Step 4: Update Keeper

  1. Return to your Keeper Vault.
  2. Open the affected record.
  3. Select Edit.
  4. Replace the old password with the new password if KeeperFill has not already updated it.
  5. Save the record.

Step 5: Verify the New Password

  1. Confirm that the website accepted the password change.
  2. Sign out of the website when appropriate.
  3. Return to its legitimate login page.
  4. Use KeeperFill to sign in with the new password.
  5. Confirm that the login works.

Important: Updating the password in Keeper alone does not change the password on the actual website.

Both must be updated.

Step 6: Review BreachWatch

  1. Return to BreachWatch.
  2. Allow Keeper to process the updated record.
  3. Review whether the previous alert has been resolved.

Note: Alert status may not update immediately.

If Keeper continues to flag the new password, confirm that it is genuinely unique and that the old password is no longer saved in the affected record.

What to Do if You Reused the Compromised Password

If the compromised password was also used on another account:

  1. Identify other websites where you used the same password.
  2. Open each legitimate website separately.
  3. Change the password to a different, unique value.
  4. Update each corresponding Keeper record.
  5. Confirm that you can sign in with the new passwords.

Important: Changing one account’s password does not protect another account that still uses the same compromised password.

Use a different randomly generated password for every account.

Recommendation: Review Keeper’s Security Audit to identify additional reused passwords.

What to Do if Your Work Account Is Flagged

Some business accounts are centrally managed by your organization.

Examples include:

  • Microsoft 365.
  • Google Workspace.
  • Company administrator accounts.
  • Shared vendor portals.
  • Financial or accounting systems.
  • Other company-managed services.

If BreachWatch identifies one of these credentials:

  1. Verify the affected account.
  2. Do not send the password or a screenshot showing it to anyone.
  3. Notify True Synergy Networks or your authorized administrator.
  4. Follow the approved password change procedure.
  5. Complete any additional security verification required.

Important: Shared and privileged account passwords may require coordinated changes or additional investigation.

Do not change centrally managed service credentials without authorization.

Understanding BreachWatch Alerts

Keeper may display different states for monitored credentials.

At Risk

The record contains a password that Keeper has identified as potentially compromised.

Recommended Action: Change the password promptly.

Ignored

The user has chosen to ignore the risk.

Keeper may skip future BreachWatch alerts for that record until its password changes.

Important: Ignoring an alert does not make the password safe.

No Detected Risk

BreachWatch has not identified a known compromise for that monitored password.

Important: No detected breach does not guarantee that a password is secure or has never been exposed.

Should You Ignore a BreachWatch Alert?

Keeper may provide an Ignore option for a flagged password.

However, ignoring an alert means the password may remain vulnerable.

When You Should Not Ignore an Alert

Do not dismiss an alert simply because:

  • You have used the password for years.
  • The website still allows you to sign in.
  • You have not noticed suspicious activity.
  • The password is long or complicated.
  • The account is rarely used.

Recommendation: Change a compromised password whenever possible rather than ignoring the warning.

If the account cannot be updated or is managed by your organization, contact True Synergy Networks for guidance.

Important: An ignored record may be excluded from future BreachWatch alerts until the password is reset.

iPhone or iPad — Use BreachWatch

Step 1: Open Keeper

  1. Open Keeper Password Manager.
  2. Sign in to your assigned account.
  3. Unlock your vault if required.

Step 2: Open BreachWatch

  1. Locate BreachWatch in the application’s navigation.
  2. Tap the option.
  3. Review the available scan information.

Step 3: Start a Scan

If BreachWatch is not active:

  1. Tap Let’s Begin.
  2. Select Scan.
  3. Wait for Keeper to review your saved credentials.

Step 4: Review Compromised Records

  1. Review the flagged records.
  2. Select the affected account.
  3. Read the risk information.
  4. Follow the approved password change procedure.

Note: Menu placement and appearance may vary between Keeper mobile application versions.

Android — Use BreachWatch

Step 1: Open Keeper

  1. Open the Keeper Password Manager application.
  2. Sign in using your assigned account.
  3. Unlock the vault.

Step 2: Locate BreachWatch

  1. Open the navigation menu or available security section.
  2. Select BreachWatch, if available.
  3. Review your monitoring status.

Step 3: Scan Your Vault

  1. Select the available activation or scan option.
  2. Allow Keeper to check your saved records.
  3. Review any detected risks.

Step 4: Resolve an Alert

  1. Select the flagged record.
  2. Identify the affected website.
  3. Change the password using the website’s approved procedure.
  4. Update the saved Keeper record.
  5. Review the alert status.

Note: Android menu locations may vary by Keeper application version.

How to Improve Your Overall Password Security

In addition to resolving BreachWatch alerts, you can improve your account security by following several practices.

Use Unique Passwords

Every website should have its own password.

Avoid using the same password for multiple business services.

Generate Strong Passwords

Use Keeper’s password generator rather than inventing passwords yourself.

Long, random passwords are generally more resistant to guessing attacks.

Enable Multifactor Authentication

Use MFA on supported accounts.

MFA can provide an additional barrier even when a password is compromised.

Important: Multifactor authentication is not a substitute for changing a known compromised password.

Review Unused Accounts

Identify accounts that are no longer needed.

Follow your organization’s approved procedures for closing or disabling them.

Do not simply delete the Keeper record while leaving an unnecessary account active.

Review Shared Credentials

If a shared password is flagged:

  1. Notify the appropriate account owner.
  2. Determine who uses the credential.
  3. Arrange an authorized password change.
  4. Update the approved shared Keeper record.
  5. Confirm that authorized users can continue accessing the service.

Important: Business-critical shared credentials should be changed in coordination with the people and systems that rely on them.

Troubleshooting

I Cannot Find BreachWatch

If the option is missing:

  1. Confirm that you are signed into the correct Keeper account.
  2. Check the application navigation.
  3. Verify that you are using an approved Keeper version.
  4. Contact True Synergy Networks.

Note: BreachWatch may require an additional license or may be unavailable under your organization’s policies.

BreachWatch Says My Password Is Compromised

If a password is flagged:

  1. Identify the affected website.
  2. Confirm whether the account is personally or centrally managed.
  3. Change the password through the legitimate website if authorized.
  4. Save the new password in Keeper.
  5. Review whether the alert clears.

Important: Do not ignore the warning simply because the account still works.

I Changed My Password, but the Alert Remains

If BreachWatch continues displaying a warning:

  1. Confirm that the password was changed successfully on the website.
  2. Verify that the Keeper record contains the new password.
  3. Confirm that you did not reuse a previously compromised password.
  4. Allow time for the alert to update.
  5. Contact True Synergy Networks if the issue continues.

Keeper Keeps Flagging My New Password

If the replacement password is also flagged:

  1. Confirm that the website accepted the new password.
  2. Generate a completely different password.
  3. Avoid reusing passwords or predictable variations.
  4. Change the password again if authorized.
  5. Update the Keeper record.

Recommendation: Use a new randomly generated password rather than modifying the previous one.

I Cannot Change the Password on the Website

If the website does not provide a working password change option:

  1. Check the website’s official account security settings.
  2. Verify that you are signed in to the correct account.
  3. Look for an approved account recovery or password change procedure.
  4. Contact True Synergy Networks if the account is managed by your organization.

Important: Do not share the compromised password with support representatives.

The Compromised Password Is in a Shared Folder

If a shared record is flagged:

  1. Identify the affected service.
  2. Notify the appropriate record owner.
  3. Avoid independently changing the credential if it is used by multiple employees or integrations.
  4. Contact True Synergy Networks for assistance.
  5. Follow the coordinated password rotation procedure.

Important: Shared credential changes may affect multiple employees or automated processes.

I Accidentally Ignored a BreachWatch Alert

If you selected Ignore:

  1. Locate the affected record in your Keeper Vault.
  2. Identify the website and account.
  3. Change the password through the legitimate website.
  4. Update the Keeper record.

Important: Ignoring the warning does not resolve the risk. Replacing the compromised password is the appropriate corrective action.

BreachWatch Shows No Risks, but I Received a Breach Notice

If a website or another security service reports a breach but Keeper shows no risk:

  1. Verify that the notification is legitimate.
  2. Determine whether your account was affected.
  3. Follow the website’s official security guidance.
  4. Change your password when appropriate.
  5. Update the Keeper record.
  6. Contact True Synergy Networks if a business account is involved.

Important: BreachWatch does not detect every breach or security incident.

I Received an Email Claiming My Keeper Vault Was Breached

If you receive an unexpected breach notification:

  1. Do not click suspicious links.
  2. Do not provide passwords or verification codes.
  3. Open Keeper directly through your approved application.
  4. Review your actual security alerts.
  5. Contact True Synergy Networks if you are unsure whether the notification is legitimate.

Important: Attackers may impersonate password manager providers or security teams to trick users into revealing credentials.

I Do Not Have Permission to Change a Flagged Password

If the credential belongs to a company-managed account:

  1. Do not attempt to bypass the restriction.
  2. Identify the affected record.
  3. Notify your authorized administrator or True Synergy Networks.
  4. Follow the approved remediation process.

Important: Your organization may need to rotate the credential and update multiple systems.

Additional Information

  • Keeper BreachWatch identifies passwords associated with known breach data.
  • BreachWatch can continuously monitor eligible vault records after activation.
  • BreachWatch and Security Audit evaluate different password risks.
  • BreachWatch alerts may identify passwords that should be changed.
  • Resolving a compromised credential requires changing the actual website password.
  • The corresponding Keeper record must also be updated.
  • Ignoring an alert does not remove the underlying security risk.
  • Shared business passwords may require coordinated password changes.
  • A clean BreachWatch report does not guarantee that every account is secure.
  • True Synergy Networks manages BreachWatch licensing, enterprise security policies, and advanced troubleshooting.

Security Reminder: Treat BreachWatch alerts seriously and replace compromised passwords promptly. Never reuse an exposed password, approve unexpected authentication requests, or follow suspicious password reset links. Always change passwords through the legitimate website and update the matching Keeper record. If a compromised credential belongs to a shared, privileged, or organization-managed account, contact True Synergy Networks immediately.