Are Clipboard Managers Safe? What a Mac Clipboard History Can See

A clipboard manager sees everything you copy, including passwords and private messages. What can go wrong, the six things to check before you install one, and how to use one safely.

Are clipboard managers safe?

Quick answer

A clipboard manager is safe if it keeps your history only on your Mac, skips passwords and secrets, and comes from a developer you trust. The risks are a history file full of sensitive text, and apps that upload or sync what you copy. Before installing one, check that it stores data locally, skips items password managers mark as private, detects keys and card numbers, lets you pause capture and clear history, and is distributed through the Mac App Store or a notarized download.

A clipboard manager's whole job is to remember everything you copy. That's what makes it useful, and it's also why it's fair to ask whether you should trust one. Your clipboard sees passwords, two-factor codes, bank details, private messages, customer data and API keys, often several times a day.

Here's what can actually go wrong and how to choose and use one safely.

What a clipboard manager can see

Any app running on your Mac can read the current clipboard. A clipboard manager reads it every time it changes and saves a copy. So it sees:

  • Text, links, images and files you copy from any app.
  • Passwords and codes you copy out of a password manager or a message, unless it deliberately skips them.
  • Things copied on your iPhone or iPad that arrive through Universal Clipboard.

It doesn't see what you type (that's a different permission, which a clipboard manager shouldn't need), or anything you never copy.

The real risks

  1. A long-lived file of secrets. Without filtering, your history becomes a list of every password and key you've copied, sitting on disk.
  2. Upload and sync. Apps that sync your history to their servers, or send analytics, move that data off your Mac.
  3. Over-broad permissions. Features like "paste for me" or text expansion need Accessibility permission, which allows controlling other apps. That's legitimate for some features, but only grant it to apps you trust.
  4. Unknown downloads. An app from an unknown site that isn't notarized by Apple hasn't been checked for known malware.
  5. Shoulder surfing. A history window that opens with your last password visible, during a screen share.

Six things to check before you install one

CheckWhat good looks like
Where history is storedOn your Mac only; sync off by default or absent
Password-manager itemsSkipped (apps honour the org.nspasteboard.ConcealedType marker)
Secrets copied from elsewhereDetected and skipped: API keys, private keys, card numbers
Network accessNone needed; no analytics or account
Your controlsPause capture, delete items, clear history, automatic expiry
DistributionMac App Store (sandboxed and reviewed) or a notarized download

How to use a clipboard manager safely

  • Let your password manager do the copying. 1Password, Bitwarden, Apple's Passwords and others mark copied passwords as private, so a well-behaved clipboard manager never saves them.
  • Pause before sensitive work. Pause capture before opening a production console or online banking, then resume.
  • Set an expiry. A history that clears itself after a few weeks holds less, for less time.
  • Hide it when sharing your screen. Don't open your history during a screen share or presentation.
  • Clear it when you hand the Mac over. Clear history before selling, servicing or lending your Mac.

How EasyPaste handles your clipboard

We make EasyPaste, so here's exactly what it does, measured against the checklist:

  • Local only. Your history is stored in the app's own folder on your Mac. EasyPaste has no account, no sync, no analytics, and makes no network connections.
  • Password-manager items are skipped, along with transient items, and never written to disk.
  • Secrets are detected on their own: text that looks like a Stripe, OpenAI, GitHub, AWS, Google or Slack key, a PEM private key, or a number that passes a card checksum isn't saved.
  • Text recognition in images runs on your Mac, with Apple's Vision framework.
  • You're in control: pause capture with one click, delete any clip, reset the whole history, and have old clips clear themselves after a week, two weeks, a month (the default), three months, or never.
  • On the Mac App Store, it runs in Apple's app sandbox, and the App Store edition doesn't ask for Accessibility permission at all.

Read the full privacy policy.

Frequently asked questions

Can a clipboard manager steal passwords?

Any app can read what's on the clipboard, so a malicious one could. Reputable clipboard managers skip items that password managers mark as private and never upload your history. Install them from the Mac App Store or the developer's notarized download, and check that they work offline.

Is clipboard history stored on my Mac?

With local clipboard managers like EasyPaste and Maccy, yes: the history lives in a folder on your Mac. Apps that offer sync also send it to their servers or your iCloud account.

Should I clear my clipboard history?

Clear it before selling or lending your Mac, and consider an automatic expiry so old clips don't pile up. Delete individual items right away if you copied something sensitive by mistake.

Does a clipboard manager record what I type?

A clipboard manager only records what you copy. Features such as text expansion need to watch typing, which requires extra permission. The App Store edition of EasyPaste doesn't include them and doesn't watch what you type.