Technology Help Desk

Preus Library
Main Level
700 College Dr
Decorah, IA 52101

Spring Term Hours

M-Th: 7:30 a.m. – 9 p.m.
F: 7:30 a.m. – 5 p.m.
Sa.: 2:00 p.m. – 5 p.m.
Su.: Noon – 9 p.m.

Full Hours

Send Email

Phone: 563-387-1000

Keeper Password Manager

Luther uses Keeper as its password manager. Keeper helps protect Luther by giving us a safe way to generate, store, and share passwords.

Luther employees can request access to an institutional Keeper account for storing work-related passwords. If you previously used a different password manager, you can import your passwords into Keeper and then delete them from your old password manager.

Getting started

An email from Keeper Team, inviting the recipient to create an account.

Typical invite email from Keeper.

  • Check your email for a message from Keeper Team <noreply@keepersecurity.com>.
  • Click the “Set Up Your Account Now” link.
  • After you’re directed to your Keeper vault, accept the credential transfer consent pop-up.
  • Log in with your Luther email at keepersecurity.com/vault or in the Keeper App for your device
  • You’ll be directed through our Microsoft SSO process.
  • If you’re signing in from a new device, you’ll need to accept the login from another device where you’ve used Keeper.
  • To import passwords, you’ll need the Keeper App on at least one device. You can install the app on assigned Luther-owned workstations and on personally-owned devices, including mobile devices. If you’re only using the desktop app to import passwords, you can delete it after you’re done with the import
A google chrome window with the Extensions menu unfolded. The menu is denoted by a puzzle-piece icon in the upper right of the screen. The menu contains the Keeper extension, and a push-pin icon that toggles whether the extension is shown in the primary user interface at all times.

Pinning the Keeper extension in Chrome

  • For day to day use on a computer, install the Keeper browser extension. Pin the extension where you can find it:
    • Chrome and Edge: Show your extensions by clicking on the puzzle piece icon to the right of the address bar—click the push-pin icon next to the Keeper icon.
    • Firefox: Nothing to do here! Firefox does this step for you.
    • Safari: Install the Keeper App first, then enable “KeeperFill” in the “Extensions” section of Safari’s Preferences (Command+,).

Note: When you sign in, remember that you’ll need to go through the normal login process again, including accepting a notification in a previously used Keeper instance.

The settings window from the Keeper App. The "import" section is selected from the left side-bar, and the user has filled in their username and password in the "import from a password manager" section at right.

Importing from LastPass using the Keeper desktop app.

Note:If you’re importing into your personal, non-work Keeper account (i.e. your free Keeper Family License for Personal Use), clear out any work-related passwords from your original password manager before performing the import.

  • In the Keeper App, from the drop down menu behind your username in the upper right, choose “Settings”.
  • Find “Import” in the left sidebar of settings, and choose to import “From a password manager”.
  • Choose to import from another password manager or browser. After you choose a service, you’ll often need to supply the username and password you use for your other password manager.
  • After you’ve successfully authenticated, you’ll see a list of credentials that will be imported, but can’t change this list.

After transition, you’ll have some cleanup to do:

  • Spot check your passwords to make sure your import was successful.
  • If someone shared passwords with you through your previous password manager, ask them to re-share those records. Similarly, if you shared passwords with others, share them again, after they have created their Keeper account.
  • De-duplicate shared records and folders that were created by the import process.
  • Remove your old password manager from your devices (e.g. delete browser extension or clear passwords from your browser’s built-in password store).
  • Visit Keeper’s “BreachWatch” and “Security Audit” sections. Change passwords for any service marked as at-risk, reused, or weak.

Usage

A screenshot of a login window and the keeper-popup that helps fill relevant credentials. The username file has a black and yellow padlock icon that triggers the popup, which lists a matching record and option to "fill record"

Using Keeper to fill passwords on a login page

  • Sign in to the extension whenever you start working.
  • On sites that Keeper has saved, Keeper will often log you in automatically or, if multiple records exist, ask you to pick which set of credentials to use.
  • On sites that Keeper doesn’t know, Keeper will ask to save your credentials after you log in.
  • If Keeper isn’t filling credentials for a site you know it has saved, you might need to click the Keeper extension or click the lock icon at the right of the username or password field.
The Keeper password generation popup, with a dice button to generate a new random password, a slider to control length, and checkboxes to constrain by character type. There is a yellow "create new record" button at bottom.

Generating a password with Keeper.

  • Visit the password reset page for the relevant service.
  • The Keeper browser extension should offer to help you reset your password, using a strong password that the extension generates. 
  • If Keeper doesn’t offer to help, you can generate a secure password directly from the extension icon. You can also use this method if you want to customize the random password, like by requiring capital letters, for example.
  • Keeper will offer to “save changes to your vault” after your new password is accepted by the website. If it doesn’t, find the record in your vault and manually update the password.
The unfolded "options" menu inside a Keeper record. The option button is in the upper right. The image highlights the "sharing" option within that dropdown menu.

Sharing from a Keeper record.

  • To share a single record, open that record within your vault, and choose “Sharing” from the “Options” drop-down menu.
  • Enter the email address of another Keeper user and choose their level of access to this single record.
  • Choose “Shared Folder” from the “Create New” menu in your vault.
  • Give your folder a name and decide where it should live within your own vault.
  • Set the “User Permissions”, which defines whether the people you invite can change, add or remove records and other users. 
  • Set the “Record Permissions”, which defines whether the records in the folder can be viewed, edited, or shared again by people with access to the folder.

Employees can sign up for a free Keeper Family License for Personal Use, and should use that account for personal credentials. Plans include 5 seats and can store up to 10gb. After their employment ends, former employees retain access to the personal Keeper account, but it becomes a paid service after 30 days.

  • In your vault, from the drop down menu behind your username in the upper right, choose “Account”.
  • In the “Subscription” section, enter your personal email address. Don’t put an @luther.edu address here.
  • Accept the verification email that was sent to your personal email address.

Common Issues

Find another device where you’ve logged in in the past and bring up your Keeper Vault on that device. On the second device where you’re trying to sign in, choose “try another way” and then choose to send the push notification again.

Importing is a blunt tool and you’ll need to do some cleanup afterwards. Think of it as an opportunity to audit your passwords!

Uninstall other password manager apps and browser extensions on your device and ask your browser not to offer to save passwords from the browser’s settings. We automatically disable any built-in browser password managers on Luther-owned workstations assigned to you when you are given an institutional license.

First make sure you have the extension installed and that you’re signed into it, then try refreshing the page. If Keeper still doesn’t recognize the site, manually fill in the credentials from the browser extension or your vault. This usually occurs if sites separate the username and password fields onto separate pages.

You’re signed into a different Microsoft account in the same browser session—This could be another Luther account or an account from a different institution. Clear your cookies from microsoftonline.com and try again. If this is a recurring issue, we recommend creating separate browser profiles for each of your personal and work identities.

FAQ

Keeper is one of the oldest, most trusted password managers, has a strong security record, and meets stringent government standards.

Keeper uses the same single sign-on process that some of our other sites use, like Norse Hub and KATIE. If you’ve already signed into one of those other services recently, you were already signed in to Keeper.

That’s a reasonable concern—we use a password manager because most of us have more passwords than we can safely store or remember. The passwords you store in Keeper are encrypted and can’t be exposed to other people without your consent, including ITS at Luther, Keeper employees, the government, or hackers. Your passwords get even stronger when you let Keeper generate them for you, and that’s one less password you have to remember, too.

Departing employees will lose access to their account when their employment ends. After their employment ends, employees retain access to the their Keeper Family account, but it becomes a paid service after 30 days.

Technology Help Desk

Preus Library
Main Level
700 College Dr
Decorah, IA 52101

Spring Term Hours

M-Th: 7:30 a.m. – 9 p.m.
F: 7:30 a.m. – 5 p.m.
Sa.: 2:00 p.m. – 5 p.m.
Su.: Noon – 9 p.m.

Full Hours

Send Email

Phone: 563-387-1000