Keeper Security Lab

A hands-on Keeper Security lab following new hire Jamie Chen through her first week at Meridian Financial. You'll store credentials with KeeperFill, block phishing with Verify Mode, add TOTP two-factor, share records securely, and use KeeperPAM to broker RDP and SSH sessions—covering Remote Browser Isolation, encrypted tunnels, and just-in-time ephemeral accounts—all enforcing least privilege and Zero Trust.

• Store a password with KeeperFill — capture live login credentials into a vault record (and store a non-login record like a payment card).
• Defend against phishing with Verify Mode — set a protection level and trigger a warning when a saved password is pasted into a look-alike site.
• Add two-factor authentication (TOTP) — capture a site's QR code into a record and sign in with password plus a rotating one-time code.
• Share securely and use Remote Browser Isolation — share a record with set permissions, then open a sensitive web console via RBI and confirm copy/paste/downloads are blocked.
• Use privileged access with KeeperPAM — connect to a Windows server over RDP through a shared record with hidden credentials, start an encrypted tunnel, and run pre-migration checks.
• Apply just-in-time ephemeral accounts — connect to a Linux server over SSH using a Keeper-provisioned ephemeral account, verify its elevated rights, and confirm it's destroyed at disconnect.

Hardware

• Keeper Gateway (WWT Lab Gateway)
• Windows Jump Server
• Linux FTP / File Server
• Sentinel NGFW (next-generation firewall)
• VYOS virtual router

Software

• Keeper Web Vault
• Keeper Desktop App
• KeeperFill browser extension
• KeeperPAM (Privileged Access Manager)