Terms of Service

These terms govern your use of KeeperPass. Please read them together with the Privacy Policy, which explains what data moves where.

1. Who these terms are with

KeeperPass is provided by Vironautics, registered at Sousse, Tunisia — "we", "us", "our". "You" means the person using KeeperPass.

These terms cover the website at keeperpass.com, the web app at vault.keeperpass.com, and the KeeperPass browser extension (together, the "Service").

2. Accepting these terms

By using the Service, you accept these terms. If you do not accept them, please do not use it. You must be at least 16 years old to use KeeperPass.

3. What KeeperPass is

KeeperPass is a password manager that runs entirely in your browser. It is free of charge: there is no subscription, no paid tier, and no payment of any kind.

There is no KeeperPass account and no KeeperPass server holding your data. Your vault is encrypted on your own device and stored as a single file in your own Google Drive, under your own Google account. We are not a custodian of your data — we never hold it.

You will need a Google account to use KeeperPass. Your use of Google Drive is governed by your own agreement with Google, which we are not party to and cannot alter.

4. Your master secret, and what we cannot do

Your vault is encrypted with a key derived from your master secret. That secret is never transmitted to us and is never stored anywhere outside your device. This has consequences you must accept before relying on the Service:

• We cannot recover your vault. If you forget your master secret, the contents of your vault cannot be decrypted by us, by Google, or by anyone else. The data is not locked away pending a support request — it is mathematically unavailable.
• There is no password reset in the usual sense. Resetting your secret does not recover anything. It moves your existing encrypted file aside, keeping it as a timestamped backup in your Drive in case you later remember the original secret, and starts a fresh, empty vault.
• Keeping your own copies is your responsibility. The app provides an export feature. We strongly recommend using it to keep your own backups, stored securely.
• Your Google account security is part of your vault's security. Anyone with access to both your Google session and your master secret can open your vault.

You accept sole responsibility for safeguarding your master secret and your Google account credentials.

5. Acceptable use

You agree not to:

• Use the Service to store or process data you have no legal right to hold.
• Use it for any unlawful purpose, or to store credentials obtained without authorisation.
• Interfere with the security of the Service, or with the Google authorisation flow, whether for yourself or for anyone else.
• Attempt to disrupt the Service or the third-party services it depends on, including by automated or excessive requests.
• Misrepresent the Service as your own, or use our name or branding in a way that suggests an endorsement or affiliation that does not exist.

Reporting a security vulnerability to us in good faith is not a breach of these terms, and we welcome it. Please write to contact@keeperpass.com rather than disclosing publicly.

6. Third-party services

KeeperPass depends on services we do not control, and it sends limited information to them as part of normal operation. Section 6 of the Privacy Policy sets out exactly what each one receives. In summary:

• Google — for sign-in and for storing your encrypted vault file.
• Have I Been Pwned — for checking your passwords against known breaches, using a method that never reveals the password.
• DuckDuckGo — for fetching website icons, which reveals to that service the hostnames stored in your items.

We are not responsible for these services, their availability, or their own terms and policies. If any of them changes or withdraws its service, features of KeeperPass that depend on it may stop working.

7. Availability and changes to the Service

We provide the Service on a best-efforts basis and do not guarantee that it will be available without interruption or free from errors. We may modify, suspend, or discontinue any part of it, including the hosted web app, at any time.

Because your vault lives in your own Google Drive rather than on our infrastructure, the discontinuation of the hosted app would not delete your data. Your encrypted file would remain in your Drive, and you would retain the ability to run the software yourself.

8. Source code

The KeeperPass source code is published at github.com/vironautics/keeperpass, where you can read it and verify the claims made in these documents. Your rights to use, modify, and redistribute that code are governed by the licence terms published in that repository, not by this document. Nothing in these terms grants you any right in our name, logo, or branding.

9. Disclaimer

To the fullest extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

We do not warrant that the Service will meet your requirements, that it will be uninterrupted or error-free, or that any defect will be corrected.

10. Limitation of liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, or consequential loss, nor for any loss of data, loss of profits, or loss of business, arising out of or in connection with your use of the Service.

In particular, and given the design described in section 4, we are not liable for the loss of vault data resulting from a forgotten master secret, from the loss, suspension, or compromise of your Google account, from your own deletion of the vault file, from any error or action on your part, or from any failure, change, or error on Google's part. Your Google Drive account is entirely your own to manage and secure. We have no access to it beyond the narrow scope described in the Privacy Policy, and no ability to back it up, recover it, or restore anything from it on your behalf — any data loss arising from how you manage, secure, or use your own Google account is your responsibility, not ours.

Nothing in these terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded or limited. Where our liability cannot be excluded but may be limited, it is limited to the maximum extent permitted by applicable law.

Since the Service is provided free of charge, no fees have been paid to us that could form the basis of a monetary claim.

11. Ending your use

You may stop using KeeperPass at any time. To remove it completely: delete the keeperpass folder from your Google Drive, revoke KeeperPass's access in your Google account permissions, uninstall the browser extension, and clear your browser's site data for vault.keeperpass.com.

We may suspend or withdraw access to the hosted Service where it is being used in breach of section 5, or where required by law. Because we hold no account and no data of yours, this does not affect the vault file in your Drive.

12. Changes to these terms

We may update these terms. When we do, the "last updated" date above changes, and the revised terms take effect when published on this page. Where a change materially affects your rights, we will make that clear rather than revising silently. Continuing to use the Service after a change means you accept the revised terms; if you do not accept them, please stop using it.

13. General

If any provision of these terms is found to be invalid or unenforceable, the remaining provisions stay in full effect. Our failure to enforce a provision is not a waiver of it. You may not transfer your rights under these terms to anyone else.

These terms, together with the Privacy Policy, are the entire agreement between you and us regarding the Service.

14. Contact

Questions about these terms can be sent to contact@keeperpass.com.