In short
NordPass vs Keeper for business: NordPass encrypts vaults with xChaCha20 and includes its Data Breach Scanner on Business and Enterprise, while Keeper uses AES-256 GCM and sells BreachWatch dark web monitoring as an add-on. Both put Entra ID and Okta single sign-on and provisioning on Enterprise; NordPass also includes Google Workspace SSO on every business plan.
Want an impartial recommendation?
Tell us about your users, systems and priorities and we will tell you which option fits, and why.
NordPass vs Keeper at a glance
| NordPass | Keeper | |
|---|---|---|
| Made by | Nord Security, the team behind NordVPN | Keeper Security, Inc., headquartered in Chicago |
| Vault encryption | xChaCha20-encrypted vault, zero-knowledge architecture | AES-256 GCM, encrypted and decrypted on your device (zero knowledge) |
| Unlocking the vault | Master password, biometrics and multi-factor authentication; single sign-on on the business plans | Master password (key derived on the device with PBKDF2), biometrics, or SAML 2.0 single sign-on on Enterprise |
| Business plans | Teams (10-user pack), Business (from 5 users), Enterprise (from 5 users) | Business Starter (5 to 10 seats), Business (minimum 5 seats), Enterprise; KeeperMSP for IT providers |
| Single sign-on and provisioning | Google Workspace SSO on every business plan; Entra ID, Microsoft ADFS and Okta SSO, plus provisioning with Entra ID and Okta, on Enterprise | Enterprise: SAML 2.0 SSO, SCIM provisioning, AD and LDAP sync; Entra ID, Okta, Google Workspace and Ping |
| SIEM | Microsoft Sentinel and Splunk integrations on Enterprise | SIEM integration add-on (requires Advanced Reporting & Alerts) |
| Breach and password monitoring | Data Breach Scanner on Business (1 domain) and Enterprise (up to 10 domains) | BreachWatch dark web monitoring, an add-on |
| Business trials | 14-day free business trial, no credit card | Free trials of Business and Enterprise |
| Certifications named | ISO 27001 and SOC 2 Type 2 | ISO 27001, 27017 and 27018; SOC 2 Type 2; FIPS 140-3 validated encryption |
Sources: NordPass Business (opens in a new tab), NordPass plans for business (opens in a new tab), Keeper Enterprise (opens in a new tab) and Keeper security (opens in a new tab). The sections below explain what the differences mean in use.
Still not sure which way to go? Ask us
Tell us what matters most to you and we will recommend one, with the trade-offs explained.
Security model
Both encrypt your vault on your own device, with zero-knowledge designs.
NordPass describes an "xChaCha20-encrypted vault" and a "zero-knowledge architecture", and names ISO 27001 and SOC 2 Type 2 certifications.
Keeper says vault data "is encrypted on the user's device locally using AES-256 GCM", with the decryption key derived on the device from your master password with PBKDF2, and data in transit protected by "TLS 1.3 with an additional layer of encryption in the payload". Keeper lists ISO 27001, 27017 and 27018, SOC 2 Type 2, and "FIPS 140-3 validated encryption" under NIST certificate #4743, and lets organisations host their tenant in a Europe (EU) region (Keeper security (opens in a new tab)).
See are password managers safe? for what these designs protect against.
Business plans, single sign-on and admin
| NordPass | Keeper | |
|---|---|---|
| Plans and seats | Teams (10-user pack), Business (from 5 users), Enterprise (from 5 users) | Business Starter (5 to 10 seats), Business (minimum 5 seats), Enterprise; KeeperMSP for IT providers |
| Sign-in and provisioning | Google Workspace SSO on every business plan; Entra ID, Microsoft ADFS and Okta SSO, plus provisioning with Entra ID and Okta, on Enterprise | Enterprise: SAML 2.0 SSO, SCIM provisioning, AD and LDAP sync; Entra ID, Okta, Google Workspace and Ping |
| Sharing | Secure sharing on every plan; group and folder sharing on Business; shared subfolders and the Sharing Hub on Enterprise | Shared team folders on Business and Enterprise; one-time sharing with people who have no Keeper account; time-limited access |
| Policies and admin | Password Policy, granular policies, activity log and item transfer on every plan; group management on Business and Enterprise | Policy engine by user, role or team; delegated administration on Business; vault transfer when someone leaves |
| Reporting and SIEM | Microsoft Sentinel and Splunk integrations on Enterprise | SIEM integration add-on (requires Advanced Reporting & Alerts) |
| Breach monitoring | Data Breach Scanner on Business (1 domain) and Enterprise (up to 10 domains) | BreachWatch dark web monitoring, an add-on |
| Family benefit for staff | A 'Free Premium plan for all users' row on Business and Enterprise | Free Family Plan for every user on Business and Enterprise, for up to 5 family members |
| Trial | 14-day free business trial, no credit card | Free trials of Business and Enterprise |
Breach monitoring. NordPass includes the Data Breach Scanner on Business, for one company domain, and on Enterprise, for up to 10: "Admins can add company domains to the Data Breach Scanner to monitor for breaches involving work email addresses" (NordPass (opens in a new tab)). Keeper sells BreachWatch (opens in a new tab) as an add-on, which "continuously monitors the dark web for exposed credentials across your organisation while preserving Keeper's zero-knowledge architecture".
Directory integration. Both put full identity provider integration on Enterprise. NordPass Enterprise adds Entra ID, Microsoft ADFS and Okta single sign-on and provisioning with Entra ID and Okta, and every NordPass business plan has Google Workspace SSO. Keeper Enterprise adds SAML 2.0 single sign-on, SCIM provisioning and Active Directory and LDAP sync, with Entra ID, Okta, Google Workspace, Ping and AD FS among its identity providers (Keeper Enterprise (opens in a new tab)).
Weighing up the options?
We can compare them against your own requirements and recommend what fits.
Which suits you?
Match the facts to your situation:
- You want breach monitoring included in the plan: NordPass Business includes the Data Breach Scanner; with Keeper, BreachWatch is an add-on
- You are a team of 5 to 10: Keeper Business Starter is sized for 5 to 10 seats; NordPass Teams is a 10-user pack
- You are a small team on Google Workspace: NordPass Teams includes Google Workspace SSO
- You run Active Directory or LDAP on premises: Keeper Enterprise lists AD and LDAP sync
- You want personal accounts for staff, kept apart from the work vault: Keeper Business includes a Family Plan for every user; NordPass lists a free Premium plan on Business and Enterprise
- You need FIPS 140-3 validated encryption: Keeper publishes its NIST certificate number
Moving between NordPass and Keeper
Both import from other password managers. NordPass imports CSV files from other managers and reads Chrome and Firefox passwords directly (NordPass (opens in a new tab)). Keeper's documentation covers imports from other password managers, browsers and CSV files (Keeper import (opens in a new tab)).
Export on a trusted computer, import, check that everything arrived, and delete the export file afterwards. Our switching guide covers each step.
Buying NordPass or Keeper for your organisation
We can quote NordPass and Keeper for your business, so we can help you choose between them rather than steer you to one; the plan and terms are confirmed at quote. We can:
- Help you choose between NordPass and Keeper against your identity platform (Microsoft Entra ID, Google Workspace or Okta), your team size and how your teams share logins
- Set up single sign-on and user provisioning on the plans that include them, so accounts are created and removed from your directory
- Set policies and build shared folders or vaults for each team before staff are invited
- Import passwords from browsers, spreadsheets or the other password manager
- Keep licensing in one place: licences can be billed monthly, with terms confirmed at quote
See our NordPass and Keeper business pages for each plan in detail. Contact us for free advice on which fits, or a quote.
Frequently asked questions
Is NordPass or Keeper more secure?
Both encrypt your vault on your own device so the provider cannot read it. NordPass uses xChaCha20 and names ISO 27001 and SOC 2 Type 2; Keeper uses AES-256 GCM, holds ISO 27001, 27017 and 27018 and SOC 2 Type 2, and publishes a FIPS 140-3 validation certificate. See are password managers safe?.
Can we trial both?
Yes. NordPass offers a 14-day free business trial with no credit card, and Keeper offers free trials of Keeper Business and Enterprise. We can help you set up a pilot group on each.
Does Keeper include dark web monitoring?
Keeper's dark web monitoring is BreachWatch, sold as an add-on (Keeper (opens in a new tab)). NordPass includes its Data Breach Scanner on Business, for one company domain, and on Enterprise, for up to 10.
Do both give staff a personal account outside the work vault?
Keeper Business includes a Family Plan for every user, separate from the work vault. NordPass lists a "Free Premium plan for all users" on Business and Enterprise.
Do both support Microsoft Entra ID?
Yes, on their Enterprise plans. NordPass Enterprise adds Entra ID single sign-on and provisioning; Keeper Enterprise adds Entra ID with SAML 2.0 single sign-on and SCIM provisioning.
Still deciding?
Ask us and a member of our team will get back to you.
More password manager guides
KeeperKeeper Security's business plans and add-ons, and how we can quote and set up Keeper for your business.Compare password managersKeeper, 1Password, NordPass and LastPass business plans side by side on published facts.LastPass vs KeeperLastPass and Keeper business plans compared on security model, seats, sharing, SSO and admin.NordPass vs 1PasswordNordPass and 1Password business plans compared on security model, seats, sharing, SSO and admin.Switching password managerHow to move passwords between password managers and off browsers or spreadsheets, safely.