Keeper Security adds anti-phishing functions to browser extension

Keeper Security, a zero trust and zero knowledge identity security and privileged access management platform provider, has released Verify Mode, a new anti-phishing capability available in version 17.8 of its browser extension.

Verify Mode monitors password paste activity in the browser and verifies that the destination site matches the corresponding record stored in the user’s Keeper Vault. If a mismatch is detected, users receive an immediate warning before credentials are submitted, with clear details and the option to proceed or cancel.

Verify Mode further bolsters Keeper’s unified identity security platform, which combines password management, secrets management, endpoint privilege management, AI-powered threat detection and privileged access controls into a single, cloud-based solution designed for modern enterprise environments.

“Phishing attacks succeed by targeting the moment that users enter their credentials,” said Darren Guccione, chief executive and co-founder of Keeper Security.

“Even well-trained employees can be deceived by convincing, malicious websites. Verify Mode changes that by validating credential use in real time, ensuring passwords are only entered on trusted domains. It shifts credential security from passive storage to active protection.”

Other features in Browser Extension release 17.8 include prompting users to disable the built-in browser password manager and support for custom fields.

Upon first login or installation of the KeeperFill Browser Extension, a prompt will appear asking users to set Keeper as their default password manager; this optional step prevents interference from the browser's native password manager.

Users can now also add custom fields directly to records from the browser extension, no longer requiring a switch to the web vault for editing. An unlimited number of custom fields can be added and easily reordered using drag-and-drop, similar to the existing feature on web and mobile vaults. These fields can store sensitive information, like security questions, PINs or private notes regarding logins, and are masked by default for privacy.