Keeper Security Extension Adds Local AI Phishing Filter
The new opt-in feature for browser users aims to curb credential theft by detecting spoofed websites on the local device.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Do you trust AI-based security tools to analyze your browsing activity while keeping your data private?
Keeper Security has released an AI-powered phishing protection feature for its browser extension. Now available in version 18.2.0, this opt-in tool identifies look-alike domains and spoofed websites directly on the user's device.
Why it matters
The feature addresses credential harvesting, an attack vector that accounted for nearly 40% of all breaches in the 2026 Verizon Data Breach Investigations Report. By processing data locally, it aims to block automated phishing attacks without transmitting user activity to external servers.
The feature is integrated into version 18.2.0 of the Keeper Browser Extension. It utilizes a local AI engine to scan for typosquatting, hidden login elements, and suspicious IP addresses, maintaining privacy by performing analysis on the device.
The players
Keeper Security
A cybersecurity firm that develops password management and digital credential storage software.
The details
The tool functions by evaluating web page structural patterns to detect fraudulent sites attempting to imitate legitimate brands. When the engine identifies a suspicious page, it triggers a warning prompt, allowing users to manually choose between blocking the site or ignoring the alert. Because the analysis happens locally, the extension does not need to send private browsing data to a cloud service for verification.
Timeline
The 2026 Verizon Data Breach Investigations Report was published in 2026.
The new phishing protection feature launched on October 30, 2026.
The Tech Race
This release positions Keeper Security within the growing trend of local-first AI security tools that prioritize user privacy over cloud-based verification. It follows industry findings from the 2026 Verizon Data Breach Investigations Report, which identified credential harvesting as a critical security vulnerability.
Users can enable this protection by updating their browser extension to version 18.2.0 and manually toggling the setting in the options menu. Once enabled, the extension will provide real-time warnings whenever it detects a spoofed login page or a suspicious domain.
The takeaway
The move reflects a shift toward on-device security processing to counter the persistent threat of credential-stealing phishing pages. Keepers users should update to version 18.2.0 to manually activate the optional phishing filter and test its sensitivity against known phishing lures.
Further reading
Learn more about the latest tools in Cybersecurity to protect against credential harvesting.
Source note: This article includes information reported by SecurityBrief Asia.
Live Poll
Do you trust AI-based security tools to analyze your browsing activity while keeping your data private?
