Overview Web Vault version 18.5.0 focuses on improving visibility and access across the vault. The headline features are the new Connection Dock, which centralizes management of active and recent PAM sessions directly in the Vault UI, and PAM Configurations now appearing as native Vault records — bringing them into the same sharing and organization workflows you already use for standard records.

Beyond the new features, this release includes a broad set of improvements across security, stability, and platform health: quantum-resistant crypto for the transmission layer, new ARAM audit events, expanded RBI connection support, Nested Shared Folder access refinements, and a range of dependency updates and code quality improvements.

Connection Dock The Keeper Vault now includes a Connection Dock that gives you visibility into your active and recently closed connections. From a single view, you can monitor connection status, relaunch recently closed sessions, or close active connections. Record details are also accessible directly from the log. The Connection Dock is located in the upper-right corner of the Vault, to the left of the notification bell. Use it to instantly switch between active sessions or quickly relaunch recently closed ones.

Active Connections PAM Configurations Now Viewable as Vault Records PAM Configurations are now accessible directly in the My Vault screen within your existing records list, giving them the full functionality of standard vault records — including sharing, organization, and management from a single, familiar interface.

PAM Configuration Detail View Improvements

• VAUL-7630: Quantum resistant crypto for the transmission layer
• VAUL-9013: Created new ARAM event when a user reveals a masked field
• KDE-2135: Created new ARAM event when a user reveals a masked field
• VAUL-8906: Improved code quality of login 2FA "duration" components
• VAUL-9051: Updated Discovery Job resource row status dark mode colors
• VAUL-9103: Updated external GitHub Actions versions (excluding Desktop)
• VAUL-9163: Updated protobuf dependency (SBOM)
• VAUL-9120: Improved error handling when uploading files
• VAUL-8784: Enabled BE deep link to Vault Settings page
• VAUL-5216: Bypass the "Next" button when deep link is provided in 3 scenarios
• VAUL-9028: Replaced functional programming utilities with the Effect library
• VAUL-9097: Changed default OS for new gateway to Docker
• VAUL-9107: Cleaned up deny record access for Nested Shared Folders
• VAUL-9091: Added 3 RBI connection parameters
• VAUL-9110: Added "connectionMethod" to ConnectPayloadInputs
• VAUL-9017: Added deep link support for the BreachWatch section
• KDE-2073: Resolved Keeper Vault Windows keeper-protocol argv CDP injection vulnerability
• KDE-2151: Updated desktop vault GitHub Actions versions
• KDE-2154: Fixed node-webauthn SSL library version mismatch

Bug Fixes

• VAUL-8969: Fixed notification open/close not navigating to the linked record or folder
• VAUL-8957: Aligned inconsistent KFFA & Vault masking behavior
• VAUL-8520: Fixed Wi-Fi Login record being created with a blank title using only spaces
• VAUL-6278: Fixed changing record type maintaining prior fields incorrectly (Passport/Membership)
• VAUL-7533: Fixed missing re-authentication when restoring to a previous revision
• VAUL-6700: Created missing translation for kfg_login_users
• VAUL-8673: Fixed biometric pop-up appearing before onboarding is completed
• VAUL-8198: Added error display when vault/records_unshare fails
• VAUL-6891: Fixed unexpected error message when closing masked password popup with X button
• VAUL-7613: Fixed re-auth not prompting when viewing TOTP code with role enforcement
• VAUL-7952: Fixed objects saving with a space in the title only
• VAUL-8868: Added UI validation to prevent running Discovery Job without rules
• VAUL-8563: Fixed Discovery ruleset Arabic and Hebrew spacing issues
• VAUL-8899: Fixed deleting a rule-published record causing an endless publishing loop
• VAUL-9009: Fixed inability to save changes to a KSM application
• VAUL-9018: Fixed 'Create Link' button disabled after closing One-Time Share error popup
• VAUL-8561: Fixed Bank Record showing incorrect information in title
• VAUL-8861: Fixed enterprise user bypassing re-authentication when changing record types via overflow menu
• VAUL-8896: Fixed Share Folder/Record discrepancy while sharing a record
• VAUL-9024: Fixed ability to link records while offline during record creation
• VAUL-6755: Fixed reordering a file attachment while uploading aborting the upload
• VAUL-9042: Fixed owner unable to view password of a deleted custom shared record in Deleted Items
• VAUL-6714: Fixed deleting user from shared folder not working after a permissions error
• VAUL-9073: Fixed sharee with view-only permissions being allowed to move a nested folder
• VAUL-7048: Fixed Create New menu modal overflowing the window
• VAUL-9056: Fixed Gateway creation modal "Docker Instructions" link returning 404
• VAUL-9094: Fixed missing Session Activity icon in record options dropdown
• VAUL-9096: Fixed Gateway operating system display issues
• VAUL-9111: Added scrollbar back to One Time Share History list
• VAUL-9122: Fixed incorrect links to 'native app autofill' in online documentation
• VAUL-7078: Fixed missing key_delete_user translation
• VAUL-4449: Fixed records dragged to team folder not receiving default record settings
• VAUL-8976: Fixed PAM Discovery Publish Item button not being centered
• VAUL-8796: Fixed attachment filename changes not being saved
• VAUL-9049: Fixed KeePass (.kdbx) import wizard blocking space character in password field
• VAUL-9159: Fixed inability to link payment card record after returning online with offline-created bank account
• VAUL-8628: Fixed device key decryption error requiring daily reset
• VAUL-8836: Fixed Discovery Rules creating Parent Record UID list incorrectly
• KDE-2074: Fixed inconsistent masking of PAM record in desktop app for Vault vs KFFA
• KDE-1767: Fixed inability to set up 2FA passkey on desktop (YubiKey library limitation)
• KDE-1925: Fixed KFFA no longer working for RDP Windows Security login
• KDE-2140: Fixed dark mode setting resetting to system default after logout on Mac
• KDE-1992: Fixed Help → Reset not responding after closing app via Ctrl+W or "X"
• KDE-2133: Removed bootstrap.exe UWP entry point causing security regression and 5.3s startup delay
• KDE-1654: Fixed hardened runtime not enabled for Mac App Store
• KDE-2147: Fixed 64-bit crashes on exit with Access Violation in Event Viewer
• KDE-2149: Resolved Microsoft Defender ASR blocking bootstrap executable from Microsoft Store
• KDE-2145: Fixed 64-bit failing to open on Windows 11 25H2 with blank white window

Web Vault Update Instructions

• To ensure you're using the latest Web Vault, simply reload the vault login page (or Shift+Ctrl/Cmd+R to force refresh)

Desktop Update Instructions

• If you installed Keeper Desktop directly from the Keeper website, download the latest version from: https://www.keepersecurity.com/download.html?t=d
• If you installed Keeper Desktop from the Mac App Store or Microsoft Store, visit the store to perform the update.