skillfed

keepercommander

Keeper Commander for Python 3

keepercommander v18.1.1 78.6K downloads/30d#14,425 on PyPI245
Permissive license MIT Active released

What it is and what it does

Keeper Commander is a Python-based interface to Keeper's password management and privileged access management (PAM) platform. It provides both an interactive command-line shell and a full terminal UI (supershell) for vault operations, administrative functions, and programmatic access through a REST API in service mode.

The tool is designed for teams and enterprises that need to manage credentials, rotate passwords, control access to privileged resources, and integrate credential management into CI/CD pipelines and developer workflows. It handles vault access, user and team administration, SSO configuration, device approvals, data import/export, and biometric authentication on supported platforms. The package includes a large set of cryptographic and platform-specific dependencies to support these features across Windows, macOS, and Linux.

Use it for:

  • Automate password rotation and credential lifecycle management in infrastructure and application environments.
  • Integrate Keeper vault access into CI/CD pipelines and developer tools to eliminate hardcoded secrets.
  • Manage privileged access and administrative approvals for infrastructure teams via command-line workflows.
  • Run Keeper as a REST service for programmatic vault queries and credential retrieval from other applications.
  • Set up persistent login sessions and biometric authentication for secure, hands-free vault access on supported devices.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Keeper Commander is a command-line and terminal UI tool for managing Keeper Password Manager and KeeperPAM vaults, supporting vault access, administrative tasks, password rotation, session management, and REST service deployment.

Yes, if you use Keeper Password Manager or KeeperPAM and need command-line automation or administrative control. The active maintenance, permissive license, and broad Python version support make it production-ready. The large dependency footprint is justified by its feature scope, but verify compatibility in your target environment before deployment.

Install

keepercommander on PyPI

pip

pip install keepercommander

uv

uv add keepercommander

poetry

poetry add keepercommander

Installing keepercommander

Before you install

Low install friction with a pure-Python wheel. Active maintenance as of 2026-08-14 with recent commits. Supports Python 3.8 through 3.14. Large dependency surface (33 runtime packages including cryptography, flask, and platform-specific libraries) is typical for a full-featured credential management tool.

License in practice

MIT license (permissive) allows commercial and private use with minimal restrictions, making it suitable for enterprise deployment and integration scenarios.

Quickstart

pip install keepercommander
keeper help
keeper shell

Requires Python 3.8 or later. Some features (biometric authentication, PAM integration) depend on platform-specific libraries (pyobjc-framework-LocalAuthentication on macOS, winrt-* on Windows).

Verify before relying

  • Whether the 33 runtime dependencies can be cleanly installed in all target environments without version conflicts.
  • Performance characteristics and resource usage when managing large vaults or running in service mode.
  • Specific administrative capabilities and their prerequisites (SSO setup, device approval workflows, etc.).

Package facts

License MIT (permissive)
Python support supports the current Python release (>=3.8)
Install friction low — pure-Python wheel
Runtime dependencies 33 — asciitree, bcrypt, zxcvbn, colorama, cryptography, fido2, flask, flask-limiter, keeper-secrets-manager-core, prompt_toolkit, protobuf, googleapis-common-protos, psutil, pycryptodomex, pyngrok, pyperclip, python-dotenv, keyring, platformdirs, requests, tabulate, websockets, keeper_pam_webrtc_rs, pydantic, fpdf2, tzlocal, cbor2, pyobjc-framework-LocalAuthentication, winrt-runtime, winrt-Windows.Foundation
Maintenance actively maintained — 0 days since the last release
Last repo commit
First released
Downloads 78,584/month — #14,425 on PyPI (30-day window, as of 2026-08-14)
Known vulnerabilities none known (OSV.dev, checked 2026-08-14)

Evidence: keepercommander-18.1.1-py3-none-any.whl

Keywords: security, password

Development Status :: 4 - BetaEnvironment :: ConsoleLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9Topic :: Security

Tags

password manager clikeeper vault command lineprivileged access management toolpassword rotation automationkeeper pam commandervault administration clisecrets management terminal
credential-managementcli-toolprivileged-access

More Security packages

SecretStorage

Provides Python bindings to the FreeDesktop.org…

permissive · top 1,000 on PyPI

msal

MSAL for Python handles OAuth2 and OpenID…

permissive · top 1,000 on PyPI

joserfc

joserfc implements JOSE standards (JWS, JWE,…

permissive · top 1,000 on PyPI

Authlib

Authlib provides a complete implementation of…

permissive · top 1,000 on PyPI

argon2-cffi-bindings

Provides low-level CFFI bindings to the…

permissive · top 1,000 on PyPI

adal

ADAL for Python authenticates applications with…

permissive · top 1,000 on PyPI

keeper-secrets-manager-core

Python SDK for Keeper Secrets Manager that…

permissive · top 15,000 on PyPI

robocorp-vault

Provides read and write access to secrets…

permissive · top 15,000 on PyPI

azure-keyvault-keys

Manages cryptographic keys in Azure Key…

unclear · top 1,000 on PyPI

azure-keyvault-secrets

Securely store, retrieve, and manage secrets…

permissive · top 1,000 on PyPI

onepassword

Wrapper around the 1Password CLI that lets you…

permissive · top 15,000 on PyPI

azure-keyvault-certificates

Manages SSL/TLS certificates stored in Azure…

permissive · top 5,000 on PyPI

azure-keyvault-administration

Manages role-based access control, backup,…

permissive · top 5,000 on PyPI

bitwarden-sdk

Provides a Python client library to interact…

unclear · top 15,000 on PyPI

ansible-vault

Reads and writes Ansible vault-encrypted YAML…

copyleft · top 15,000 on PyPI

onepassword-sdk

Programmatic Python interface to read and…

permissive · top 5,000 on PyPI