{"id":784,"date":"2018-05-17T18:20:00","date_gmt":"2018-05-17T18:20:00","guid":{"rendered":"http:\/\/18c9f4a2-da41-47d4-8ccd-5efd10ac5791"},"modified":"2018-05-17T18:20:00","modified_gmt":"2018-05-17T18:20:00","slug":"a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/","title":{"rendered":"A bug in Keeper password manager leads to sparring over &#8220;zero-knowledge&#8221; claim"},"content":{"rendered":"<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/r\/2017\/01\/23\/19aa19e8-2649-43f0-8561-608e7387f42e\/resize\/770xauto\/d0a02c371012c2944a0ebecb9479cfa7\/password-social.jpg\" class=\"\" alt=\"\" height=\"auto\" width=\"770\"\/><\/span><\/p>\n<p><span class=\"caption\">(Image: file photo)<\/span><\/p>\n<p>Keeper, a password manager maker that recently and controversially <a href=\"https:\/\/www.zdnet.com\/article\/security-firm-keeper-sues-news-reporter-over-vulnerability-story\/\" target=\"_blank\">sued a reporter<\/a>, has fixed a bug that a security researcher claimed could have allowed access to a user&#8217;s private data.<\/p>\n<p>The bug &#8212; which the company confirmed and has since fixed &#8212; filed anonymously to <a href=\"http:\/\/seclists.org\/fulldisclosure\/2018\/May\/41\" target=\"_blank\">a public security disclosure list<\/a>, detailed how anyone controlling Keeper&#8217;s API server could gain access to the decryption key to a user&#8217;s vault of passwords and other sensitive information.<\/p>\n<p>The researcher found the issue in the company&#8217;s Python-powered script called <a href=\"https:\/\/github.com\/Keeper-Security\/Commander\" target=\"_blank\">Keeper Commander<\/a>, which allows users to rotate passwords, eliminating the need for hardcoded passwords in software and systems.<\/p>\n<p><strong>Read also: <a href=\"https:\/\/www.zdnet.com\/article\/simple-security-step-by-step-guide\/\">Security 101: Here&#8217;s how to keep your data private, step by step<\/a><\/strong><\/p>\n<p>According to the write-up, the researcher said it&#8217;s possible that someone in control of Keeper&#8217;s API &#8212; such as employees at the company &#8212; could unlock an account, because the API server stores the information used to produce an intermediary decryption key.<\/p>\n<p>&#8220;What seems to appear in the code of Keeper Commander from November 2015 to today is blind trust of the API server,&#8221; said the researcher.<\/p>\n<p>&#8220;If this disclosure is correct, the API server can induce Keeper Commander during login to reveal how to decrypt the vault. This would mean a security breach of the API server or a court order may result in an user&#8217;s vault information being compromised,&#8221; they added.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>The potential security implications of the bug aside, the researcher questioned <a href=\"https:\/\/keepersecurity.com\/resources\/zero-knowledge-for-ultimate-password-security.html\" target=\"_blank\">the company&#8217;s claim<\/a> that Keeper <a href=\"https:\/\/keepersecurity.com\/faq.html\" target=\"_blank\">has &#8220;zero knowledge&#8221; of user data<\/a>. The company insists that employees have no way to access customer data, for example, to satisfy a search warrant or a court order.<\/p>\n<p>The researcher said, citing his bug report, that Keeper&#8217;s zero-knowledge claim is &#8220;incorrect.&#8221;<\/p>\n<p>Keeper chief technology officer Craig Lurey confirmed the bug in an email.<\/p>\n<p>&#8220;After evaluation of the report, we decided to further bolster our authentication process to address the researcher&#8217;s concerns,&#8221; said Lurey, confirming the bug Wednesday. &#8220;We have implemented an additional layer of hashing to the API authentication process to ensure that client applications, under the scenario the researcher presented, cannot be exploited in an internal threat situation,&#8221; he said.<\/p>\n<p>We asked Keeper about the researcher&#8217;s claims about the company&#8217;s zero-knowledge policy.<\/p>\n<p>&#8220;We are zero-knowledge,&#8221; said Lurey, following the bug report.<\/p>\n<p>&#8220;The researcher&#8217;s report was a theoretical scenario which never occurred and more importantly, one that would have required internal collusion,&#8221; he said. Lurey said it would be &#8220;both improper and unprofessional&#8221; to take that position, he added.<\/p>\n<p>Unlike other companies, Keeper has not to date published a transparency report detailing how many lawful access requests the company has received.<\/p>\n<p>It&#8217;s not the first bug Keeper has fixed in the past few weeks either.<\/p>\n<p><strong>Read also: <a href=\"https:\/\/www.zdnet.com\/article\/password-manager-maker-keeper-hit-by-another-security-snafu\/\">Password manager maker Keeper hit by another security snafu<\/a><\/strong><\/p>\n<p>The company was <a href=\"https:\/\/www.zdnet.com\/article\/security-firm-keeper-sues-news-reporter-over-vulnerability-story\/\" target=\"_blank\">criticized by the security community<\/a> after it sued a reporter for alleged defamation &#8212; the case was later settled out of court &#8212; after the company rejected parts of the reporter&#8217;s write-up. Weeks later, a coalition of over 50 security researchers, experts, and journalists (disclosure: this reporter included) <a href=\"https:\/\/cdt.org\/insight\/experts-letter-on-the-importance-of-security-research\/\">signed a letter<\/a> rejecting legal threats from companies, including Keeper.<\/p>\n<p>The company also <a href=\"https:\/\/www.zdnet.com\/article\/password-manager-maker-keeper-hit-by-another-security-snafu\/\" target=\"_blank\">left an Amazon S3 storage server exposed<\/a> without a password, allowing anyone &#8220;full control&#8221; over its contents, including reading, replacing, and deleting files.<\/p>\n<div class=\"relatedContent alignNone\" readability=\"7.7336683417085\">\n<p class=\"title\"><a href=\"https:\/\/medium.com\/@zackwhittaker\/how-to-contact-me-securely-38dc5c5bc756\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\">Contact me securely<\/a><\/p>\n<p class=\"dek\">Zack Whittaker can be reached securely on Signal and WhatsApp at 646-755\u20138849, and his PGP fingerprint for email is: 4D0E 92F2 E36A EC51 DAAE 5D97 CB8C 15FA EB6C EEA5.<\/p>\n<p class=\"read-more\"><a href=\"https:\/\/medium.com\/@zackwhittaker\/how-to-contact-me-securely-38dc5c5bc756\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\">Read More<\/a><\/p>\n<\/div>\n<div class=\"relatedContent alignNone\">\n<h3 class=\"heading\"><span class=\"int\">ZDNET INVESTIGATIONS<\/span><\/h3>\n<\/div>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/keeper-password-manager-flaw-zero-knowledge\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The company says it has &#8220;zero knowledge&#8221; of user data. But a security researcher claimed otherwise.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":785,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-784","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>A bug in Keeper password manager leads to sparring over &quot;zero-knowledge&quot; claim 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A bug in Keeper password manager leads to sparring over &quot;zero-knowledge&quot; claim 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-17T18:20:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"556\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"A bug in Keeper password manager leads to sparring over &#8220;zero-knowledge&#8221; claim\",\"datePublished\":\"2018-05-17T18:20:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/\"},\"wordCount\":621,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/\",\"name\":\"A bug in Keeper password manager leads to sparring over \\\"zero-knowledge\\\" claim 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg\",\"datePublished\":\"2018-05-17T18:20:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg\",\"width\":770,\"height\":556},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A bug in Keeper password manager leads to sparring over &#8220;zero-knowledge&#8221; claim\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A bug in Keeper password manager leads to sparring over \"zero-knowledge\" claim 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/","og_locale":"en_US","og_type":"article","og_title":"A bug in Keeper password manager leads to sparring over \"zero-knowledge\" claim 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-05-17T18:20:00+00:00","og_image":[{"width":770,"height":556,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"A bug in Keeper password manager leads to sparring over &#8220;zero-knowledge&#8221; claim","datePublished":"2018-05-17T18:20:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/"},"wordCount":621,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/","url":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/","name":"A bug in Keeper password manager leads to sparring over \"zero-knowledge\" claim 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg","datePublished":"2018-05-17T18:20:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/05\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim.jpg","width":770,"height":556},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/a-bug-in-keeper-password-manager-leads-to-sparring-over-zero-knowledge-claim\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"A bug in Keeper password manager leads to sparring over &#8220;zero-knowledge&#8221; claim"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/784","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=784"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/784\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/785"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=784"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=784"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=784"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}