---
title: "Keeper review: pricing, pros and cons"
description: "The compliance-heavy US option with a UK price list: Business Starter at £2.00 a user, ISO 27001, SOC 2 Type 2 and FIPS 140-3, passkeys that unlock the vault, a TOTP authenticator, a Commander CLI, Terraform providers and a vendor-built MCP server, 24/7 phone support and an EU data region. The catches: SSO and SCIM are Enterprise-only at £5.00, reporting and secrets are paid add-ons at every tier, there is no free plan and no monthly billing, and the company once sued a journalist over a vulnerability report."
canonical: "https://saaskly.com/category/password-managers/keeper"
last-updated: "2026-09-08"
---

# Keeper review: pricing, pros and cons

> Saaskly verdict: **3.7/5**. The compliance-heavy US option with a UK price list: Business Starter at £2.00 a user, ISO 27001, SOC 2 Type 2 and FIPS 140-3, passkeys that unlock the vault, a TOTP authenticator, a Commander CLI, Terraform providers and a vendor-built MCP server, 24/7 phone support and an EU data region. The catches: SSO and SCIM are Enterprise-only at £5.00, reporting and secrets are paid add-ons at every tier, there is no free plan and no monthly billing, and the company once sued a journalist over a vulnerability report.

- Category: [Password Managers](https://saaskly.com/category/password-managers.md)
- Vendor website: https://www.keepersecurity.com/en_GB/
- Last updated: 2026-09-08

## Pros and cons

**Pros**

- ISO 27001, SOC 2 Type 2 and FIPS 140-3; passkeys unlock the vault; TOTP, YubiKey, One-Time Share and vault transfer on offboarding
- Pound pricing from £2.00 a user; EU data region; 24/7 phone, chat and email support
- Commander CLI, SDKs, Terraform providers and a vendor-built MCP server

**Cons**

- SSO and SCIM are Enterprise-only at £5.00; reporting, dark-web monitoring and Secrets Manager are paid add-ons even on Enterprise
- No free plan, no monthly billing, no money-back guarantee, VAT basis unclear on the page
- Sued Ars Technica over a 2017 vulnerability report (dropped 2018); Trustpilot 3.2 on 3,164 reviews with recent lockouts and renewal complaints

## Pricing

Month-to-month price first (what you pay without committing), then the annual-commit rate.

- **Personal**: £3.07/yr on an annual commitment; month-to-month price not published
  - Includes: £3.07/mo (£36.84/yr) on Keeper's UK site 8 Sep 2026; Family £7.36/mo for 5 with 10 GB storage. VAT basis unclear (template text). No free plan; BreachWatch £24.29/yr add-on.
- **Business Starter**: £2/yr on an annual commitment; month-to-month price not published
  - Includes: £2.00/user/mo billed annually, for 5 to 10 users; no shared team folders. Business £3.50 adds shared folders and delegated admin; Enterprise £5.00 adds SSO Connect, SCIM, AD/LDAP, RBAC. Reporting, compliance, dark web and Secrets Manager are add-ons at every tier. No monthly billing.

Minimum commitment: **£3.07** (£3.07/yr for the entry licence).

## Specification

| Attribute | Value |
| --- | --- |
| Business per user* | £2/user/mo annual only (Business Starter) |
| Individual | £3.07/mo annual only |
| Free tier | None |
| Seat minimum | 5 |
| Breach on record | No |
| Last audit | None published |
| Open source | No |
| Self-host | No |
| Passkeys | Store + unlock |
| TOTP codes | Yes |
| Hardware key | Yes |
| SSO | Extra cost |
| SCIM | Yes |
| Shared vaults | Yes |
| Secrets manager | Yes |
| CLI | Yes |
| MCP server | Yes |
| Owned in** | US-owned |
| Data location | US, EU (Ireland, Frankfurt), AU, CA or JP region; no UK region |
| Trustpilot (reviews) | 3.2 (3,164) |
| Family plan | £7.36/mo (5 seats) |
| Scored tier | Business Starter |
| Tier above | Enterprise (£5.00/user) |
| Money-back (days) | 0 |
| Encryption | AES-256-GCM; PBKDF2-HMAC-SHA256 1,000,000 rounds |
| Zero-knowledge | Yes |
| Breach note | Dec 2017: extension flaw found by Tavis Ormandy; Keeper sued Ars Technica over the report, dropped Mar 2018 |
| Bug bounty | Yes |
| Email aliases | No |
| Built-in VPN | No |
| Admin console | Yes |
| Role-based permissions | Yes |
| Password health reports | Yes |
| Dark-web monitoring | Yes |
| External sharing | Yes |
| Guest accounts | No |
| Emergency access | Yes |
| Audit logs | Yes |
| Browser extensions | Chrome, Firefox, Safari, Edge, Opera, Brave |
| Desktop apps | Yes |
| Linux | Yes |
| API | Yes |
| HQ | US |
| Owner | Keeper Security, Inc. |
| SOC 2 | Yes |
| ISO 27001 | Yes |
| Live chat | Yes |
| Phone support | Yes |
| Support channels | Phone 24/7 (EMEA number in Ireland), Live chat 24/7, Email |

*Business per user: the business or teams tier the score is set on, per user per month on annual billing and then month-to-month, in the currency the vendor shows a UK visitor on the research date; see each profile for the VAT basis, the seat minimum and what the tier above adds.

**Owned in: where the company that owns the provider answers to. A US-owned provider is subject to US law (including the CLOUD Act) wherever the vault is stored; with a zero-knowledge design the vendor cannot read the vault either way, so this column is about the company, not the encryption. "Data location" records where the encrypted vault is stored.

## Our review

Keeper Security, Inc. (Chicago, private) sells the widest compliance stack in this comparison: ISO 27001, 27017 and 27018, SOC 2 Type 2, FIPS 140-3 validated cryptography, PCI DSS, and a FedRAMP High authorisation that applies to its separate GovCloud product rather than the commercial plans a UK firm would buy. The vault uses AES-256-GCM with record-level keys and stretches the master password with a million rounds of PBKDF2; Keeper says NCC Group and CyberTest test it quarterly but publishes no report, and runs its bug bounty on Bugcrowd. The record has one episode a buyer should know: in December 2017 Google's Tavis Ormandy found a flaw in the browser extension that let a malicious site read passwords, Ars Technica reported it, and Keeper sued the publication and its reporter for defamation; the suit was dropped by March 2018. Keeper stood up its disclosure programme afterwards. Data can sit in a US, EU (Ireland and Frankfurt), Australian, Canadian or Japanese region; there is no UK region and no CLOUD Act statement.

Prices in pounds from Keeper's UK site on 8 September 2026, all billed annually with no monthly option; the page shows leftover "excl. VAT" and "includes GST" template text next to every figure, so the VAT basis is genuinely unclear. Personal is £3.07 a month and Family £7.36 for five. Business Starter, sized for five to ten users, is £2.00 a user a month with the vault, admin console and basic activity reporting; Business at £3.50 adds shared team folders and delegated administration; Enterprise at £5.00 is where SSO Connect (SAML with Entra ID, Okta, Google and any SAML provider), SCIM, AD and LDAP provisioning and role-based access live. Advanced Reporting and Alerts, compliance reports, BreachWatch dark-web monitoring and the Secrets Manager are paid add-ons on every tier, Enterprise included; Connection Manager is custom-priced. There is no free plan, trials are offered without a stated length, and no money-back guarantee was found.

The product itself is strong on credentials: passkeys are stored, filled and can unlock the vault, TOTP codes are generated inside it, YubiKeys and biometrics are supported, One-Time Share sends a record to anyone without an account, and departing staff have their vault transferred by an admin. Developers get the Python-based Commander CLI and SDK, SDKs for .NET, JavaScript and Python, Terraform providers, and a vendor-maintained MCP server for the Secrets Manager, which Keeper's own comparison table lists as an add-on. Support is 24/7 by email, live chat and phone with an EMEA number in Ireland. Trustpilot is 3.2 on 3,164 reviews: 77% are five-star, most of them older, and the recent unprompted ones about sync failures, an export refused after expiry and a cancellation link that moves before renewal weigh the score down.

*Not yet tested by Saaskly: assessed on published pricing, documentation, audit reports and third-party reviews.*

---

Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. See https://saaskly.com/ai-transparency.md and https://saaskly.com/editorial-policy.md.

Canonical HTML: https://saaskly.com/category/password-managers/keeper · Markdown index: https://saaskly.com/llms.txt