In short: Keeper Password Manager is a zero-knowledge business vault for passwords, passkeys and two-factor codes. Business Starter suits small teams; Business adds shared team folders, delegated admin and a free Family Plan per user; Enterprise adds SSO, SCIM, AD/LDAP provisioning and role-based access. All are licensed per user, with BreachWatch, ARAM and other add-ons on top.
What Keeper Password Manager is
Keeper Password Manager gives each member of staff an encrypted vault for passwords, passkeys, payment cards, two-factor (TOTP) codes and confidential files, with KeeperFill to autofill them in the browser and in apps. Everything is encrypted on the device before it is synced, so Keeper holds only ciphertext.
Admins manage the organisation from the Keeper Admin Console: create teams and nodes (for departments or sites), push enforcement policies such as master password strength and two-factor requirements, share folders with the right people and review an activity log. Records can be shared with colleagues at different permission levels, and One-Time Share sends a single record to someone outside the organisation through a time-limited link, without them needing a Keeper account.
Editions compared
| Edition | Who it is for | Main features |
|---|---|---|
| Keeper Business Starter | Sole traders and small teams | Encrypted vault per user, admin console, credential sharing and autofill |
| Keeper Business | Most small and mid-sized organisations | Everything in Business Starter plus shared team folders, delegated administration, organisational structure and integrations, and a free Family Plan for each user |
| Keeper Enterprise | Organisations with an identity provider or compliance requirements | Everything in Business plus advanced provisioning (SSO via SAML 2.0, SCIM and AD/LDAP), advanced two-factor authentication, role-based access control and developer APIs |
Business Starter is aimed at teams of up to ten; Keeper moves an account to Business automatically once it grows beyond that. If you use Microsoft Entra ID, Okta or Google Workspace for sign-in, Enterprise is usually the right base, because SSO and automatic user provisioning save admin time every time someone joins or leaves.
Add-ons
Add-ons sit on top of Business or Enterprise and are added for the organisation or the users who need them.
| Add-on | What it does |
|---|---|
| BreachWatch (dark web monitoring) | Checks credentials in the vault against known breach data from the dark web and prompts users to change exposed passwords, with an admin dashboard |
| Advanced Reporting & Alerts (ARAM) | Real-time event monitoring, custom reports, alerts and audit trails; also required for SIEM integration and links to ITSM tools such as ServiceNow and Jira |
| Compliance Reporting | On-demand reports on who can access which records, for access reviews, audits and offboarding |
| KeeperChat | Encrypted messaging for staff |
| Secure file storage | Encrypted storage for files kept in the vault, pooled across the organisation's users |
| Support plans | Higher levels of support from Keeper beyond the standard service |
For privileged accounts and machine credentials, see KeeperPAM and Keeper Secrets Manager.
How it is licensed
Each person with a vault needs a user licence on the base edition. Add-ons are added on top, except storage, which is a pooled amount for the whole organisation rather than an allowance per person. You can add users during the term, and Business Starter and Business customers can upgrade to Enterprise from the admin console without starting again.
Keeper bills its published business plans annually. Through Forever Systems we confirm the term for each line on your quote, keep your renewal date in our calendar and handle changes in between. Prices depend on edition, quantity and add-ons, so ask us for a quote. See licence true-up for how mid-term additions are usually handled.
Requirements and deployment
Keeper runs in the browser through the Web Vault and extensions for Chrome, Edge, Firefox, Safari, Opera and Brave, with desktop apps for Windows, macOS and Linux and mobile apps for iOS and Android. Nothing needs to be installed on a server for the core product; on-premises directory sync through Keeper Bridge is only needed for some Enterprise set-ups that still rely on Active Directory or LDAP.
A typical rollout: connect your identity provider, set policies, create shared folders for teams, import passwords from browsers or a previous password manager, then invite users in waves.
Who it suits and how we help
Keeper Business suits small and mid-sized organisations that want shared credentials under control quickly. Enterprise suits organisations with an identity provider, several departments or a compliance obligation to show access reviews. We size the edition, set up SSO and policies, migrate existing vaults and look after licence changes. Compare with other password managers, or see threat exposure and dark web monitoring if BreachWatch is the main driver.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is Keeper Business Starter?
Business Starter is Keeper's entry plan for sole traders and small teams of up to ten users, with an encrypted vault, admin console, sharing and autofill. Once you pass ten users the account moves to Keeper Business, which adds shared team folders, delegated administration and a free Family Plan for each user.
Do Keeper business users get a personal vault?
Yes. Keeper Business and Enterprise include a free Family Plan for each user, kept separate from the work vault.
Does Keeper support single sign-on?
Yes, on Enterprise. It supports SAML 2.0 SSO with identity providers such as Microsoft Entra ID, Okta and Google Workspace, plus SCIM provisioning.
Can we migrate from another password manager?
Yes. Keeper imports from browsers and from common password managers via its import tools. We can plan the migration and timing so nobody loses access.