winget install --id KeeperSecurity.CommanderAbout Keeper Commander
Keeper Commander is a command-line and SDK interface to Keeper® Password Manager. Commander can be used to access and control your Keeper vault, perform administrative functions (such as end-user onboarding and data import/export), launch remote sessions, rotate passwords, eliminate hardcoded passwords and more. Keeper Commander is an open source project with contributions from Keeper's engineering team and partners.
What's new in 18.0.1
Keeper Commander 18.0.1 Breaking changes - Dropped Python 3.7 support. Minimum supported Python is now 3.8 New commands & features SSO / Identity - New sso-cloud command suite for managing Keeper SSO Connect Cloud configurations. Cloud Secrets - New cloud secrets import commands for importing secrets from external cloud providers. KeeperPAM - New pam connection jit command for managing Just-In-Time (JIT) settings on PAM resource records. - New --proxy flag for pam tunnel start to enable KeeperDB Proxy mode. - New saas profile option for pam rotation edit. - pam launch now available from SuperShell. - pam tunnel diagnose gains TURN/STUN end-to-end probes and per-test flags; log noise reduced. - pam project import / extend now supports defining workflows. Enterprise policy - Implemented enforcement of Record Password and Record Types policies. - shared-manager role label renamed to share-manager. Other - Password strength now graded via zxcvbn. - PAM Workflow improvements and workflow-window session hard close. - Rotation skip feature added (cp-rotation-skip-feat). - KeeperDrive search command updated. Fixes & Improvements - Tunnel: SO_REUSEADDR disabled on tunnel start (prevents binding conflicts). - PAM record update: added validations on update path. - KeeperDrive: fixed role labels, kd-shortcut titles, removed kd-rndir inherit flags. - Service mode: legacy service-config record titles handled gracefully on startup. - Login UX: correct login --server hint shown for batch vs. shell mode.
Version history
| Version | Updated | Notes |
|---|---|---|
| 18.0.1 | Unknown | Keeper Commander 18.0.1 Breaking changes - Dropped Python 3.7 support. Minimum supported Python is now 3.8 New commands & features SSO / Identity - New sso-cloud command suite for managing Keeper SSO Connect Cloud config... |
| 18.0.0 | Unknown | Keeper Commander 18.0.0 — Release Notes This is a major release headlined by KeeperDrive — a brand-new command suite for managing folders, records, sharing, and permissions through the Keeper API. It also adds KCM/Guacam... |
| 17.2.15 | Unknown | Keeper Commander 17.2.15 — Release Notes PAM bug fixes - Added proper error message when Workflow blocks connection - Increased WebRTC connect timeout to accomodate for ephemeral accounts - Added JIT / Ephemeral suport t... |
| 17.2.13 | Unknown | Keeper Commander release version v17.2.13 PAM Fixes - Fix rotation settings linking to PAM Configuration instead of PAM Directory when directory_uid is provided - Skip email delivery gracefully when email.config_name is... |
| 17.2.12 | Unknown | Release Notes — v17.2.12 New Features - Bulk Legacy Record Conversion — Added convert-all command for converting legacy records in bulk - Secrets Manager Client Revoke — Added command for quick device revocation in secre... |
| 17.2.11 | Unknown | Release Notes — v17.2.11 (April 1, 2026) New Features - Atlassian Onboarding: Added AD user creation via Gateway with support for username templates. - Domain Alias Commands — New commands for managing domain aliases. -... |
| 17.2.10 | Unknown | Keeper Commander release version v17.2.10 New Features - CSPM Integration Type — Added CSPM as a supported integration type for public-api-key - pam action debug command — New pam action debug command that dumps all reco... |
| 17.2.9 | Unknown | Keeper Commander release version v17.2.9 New Features - Implemented teams-app-setup command for Microsoft Teams integration - Added launch_credentials support to pam project import and pam project extend commands - Added... |
| 17.2.8 | Unknown | Keeper Commander release version v17.2.8 New Features - Added --aging flag to compliance report with record aging data (created, last_modified, last_rotation, last_pw_change) - Added --username and --team filters to all... |
| 17.2.7 | Unknown | Keeper Commander release version v17.2.7 New Features - Added JIT (Just-In-Time) and AI features to PAM project import Improvements - Improved Gateway lookup - when missing or not shared, fallback to pam/get_configuratio... |
| 17.2.6 | Unknown | Keeper Commander release version v17.2.6 New Features - supershell: claude-code-like interface for executing commands - CLI search: token-based matching by default (tokens can appear in any order) - Service mode: --self-... |
| 17.2.5 | Unknown | Keeper Commander release version v17.2.5 Improvements - Discovery: bug fixes and improvements - msp update: improvements - pam launch: establish ssh sessions with ssh key credentials only - Automate Docker-Service Mode &... |
| 17.2.4 | Unknown | Keeper Commander release version v17.2.4 Improvements - Batch Mode: do not write help information to stdout Full Changelog: v17.2.3...v17.2.4 |
| 17.2.3 | Unknown | Keeper Commander release version v17.2.3 Improvements - Service mode bug fixes Full Changelog: v17.2.2...v17.2.3 |
| 17.2.2 | Unknown | Keeper Commander release version v17.2.2 New Features - SuperShell: a full screen TUI vault browser - pam launch command: launches a connection to a PAM resource - Reset password during login flow Improvements - complian... |
| 17.2.1 | Unknown | Keeper Commander release version v17.2.1 New Features - QRC implementation using MLKEM - Added healthcheck support in service mode Improvements - KEPM addon support for MSPs - record-history command: JSON output - pedm s... |
| 17.2.0 | Unknown | Keeper Commander release version v17.2.0 New Features - pedm scim command: populates KEPM collections with Azure and AD users and groups - Gateway scaling Improvements - Graph endpoints refactoring Full Changelog: v17.1.... |
| 17.1.18 | Unknown | Keeper Commander release version v17.1.18 Improvements - Update enforcement policy definitions Full Changelog: v17.1.17...v17.1.18 |
| 17.1.17 | Unknown | Keeper Commander release version v17.1.17 New Features - this-device 2fa_expiration: added sub-command to change 2FA expiration. Bug Fixes - risk management: command help - Session resumption bug fix Full Changelog: v17.... |
| 17.1.16 | Unknown | Keeper Commander release version v17.1.16 New Features - Enterprise Domain Management commands Full Changelog: v17.1.15...v17.1.16 |