keepercommander
Keeper Commander for Python 3
What it is and what it does
Keeper Commander is a Python-based interface to Keeper's password management and privileged access management (PAM) platform. It provides both an interactive command-line shell and a full terminal UI (supershell) for vault operations, administrative functions, and programmatic access through a REST API in service mode.
The tool is designed for teams and enterprises that need to manage credentials, rotate passwords, control access to privileged resources, and integrate credential management into CI/CD pipelines and developer workflows. It handles vault access, user and team administration, SSO configuration, device approvals, data import/export, and biometric authentication on supported platforms. The package includes a large set of cryptographic and platform-specific dependencies to support these features across Windows, macOS, and Linux.
Use it for:
- Automate password rotation and credential lifecycle management in infrastructure and application environments.
- Integrate Keeper vault access into CI/CD pipelines and developer tools to eliminate hardcoded secrets.
- Manage privileged access and administrative approvals for infrastructure teams via command-line workflows.
- Run Keeper as a REST service for programmatic vault queries and credential retrieval from other applications.
- Set up persistent login sessions and biometric authentication for secure, hands-free vault access on supported devices.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
Keeper Commander is a command-line and terminal UI tool for managing Keeper Password Manager and KeeperPAM vaults, supporting vault access, administrative tasks, password rotation, session management, and REST service deployment.
Yes, if you use Keeper Password Manager or KeeperPAM and need command-line automation or administrative control. The active maintenance, permissive license, and broad Python version support make it production-ready. The large dependency footprint is justified by its feature scope, but verify compatibility in your target environment before deployment.
Install
keepercommander on PyPI
pip
pip install keepercommanderuv
uv add keepercommanderpoetry
poetry add keepercommanderInstalling keepercommander
Before you install
Low install friction with a pure-Python wheel. Active maintenance as of 2026-08-14 with recent commits. Supports Python 3.8 through 3.14. Large dependency surface (33 runtime packages including cryptography, flask, and platform-specific libraries) is typical for a full-featured credential management tool.
License in practice
MIT license (permissive) allows commercial and private use with minimal restrictions, making it suitable for enterprise deployment and integration scenarios.
Quickstart
pip install keepercommander
keeper help
keeper shell
Requires Python 3.8 or later. Some features (biometric authentication, PAM integration) depend on platform-specific libraries (pyobjc-framework-LocalAuthentication on macOS, winrt-* on Windows).
Verify before relying
- Whether the 33 runtime dependencies can be cleanly installed in all target environments without version conflicts.
- Performance characteristics and resource usage when managing large vaults or running in service mode.
- Specific administrative capabilities and their prerequisites (SSO setup, device approval workflows, etc.).
Package facts
| License | MIT (permissive) |
| Python support | supports the current Python release (>=3.8) |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 33 — asciitree, bcrypt, zxcvbn, colorama, cryptography, fido2, flask, flask-limiter, keeper-secrets-manager-core, prompt_toolkit, protobuf, googleapis-common-protos, psutil, pycryptodomex, pyngrok, pyperclip, python-dotenv, keyring, platformdirs, requests, tabulate, websockets, keeper_pam_webrtc_rs, pydantic, fpdf2, tzlocal, cbor2, pyobjc-framework-LocalAuthentication, winrt-runtime, winrt-Windows.Foundation |
| Maintenance | actively maintained — 0 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 78,584/month — #14,425 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: keepercommander-18.1.1-py3-none-any.whl
Keywords: security, password
Tags
More Security packages
Provides Python bindings to the FreeDesktop.org…
permissive · top 1,000 on PyPI
msalMSAL for Python handles OAuth2 and OpenID…
permissive · top 1,000 on PyPI
joserfcjoserfc implements JOSE standards (JWS, JWE,…
permissive · top 1,000 on PyPI
AuthlibAuthlib provides a complete implementation of…
permissive · top 1,000 on PyPI
argon2-cffi-bindingsProvides low-level CFFI bindings to the…
permissive · top 1,000 on PyPI
adalADAL for Python authenticates applications with…
permissive · top 1,000 on PyPI
keeper-secrets-manager-corePython SDK for Keeper Secrets Manager that…
permissive · top 15,000 on PyPI
robocorp-vaultProvides read and write access to secrets…
permissive · top 15,000 on PyPI
azure-keyvault-keysManages cryptographic keys in Azure Key…
unclear · top 1,000 on PyPI
azure-keyvault-secretsSecurely store, retrieve, and manage secrets…
permissive · top 1,000 on PyPI
onepasswordWrapper around the 1Password CLI that lets you…
permissive · top 15,000 on PyPI
azure-keyvault-certificatesManages SSL/TLS certificates stored in Azure…
permissive · top 5,000 on PyPI
azure-keyvault-administrationManages role-based access control, backup,…
permissive · top 5,000 on PyPI
bitwarden-sdkProvides a Python client library to interact…
unclear · top 15,000 on PyPI
ansible-vaultReads and writes Ansible vault-encrypted YAML…
copyleft · top 15,000 on PyPI
onepassword-sdkProgrammatic Python interface to read and…
permissive · top 5,000 on PyPI