Guides / What your clipboard gives away

What your clipboard gives away

Short answerWhatever you copied last is waiting on your clipboard, until you copy something else. That can be a password, a login code or a card number. Your iPhone now asks before an app reads what another app copied, but it's still best to avoid copying private details, and to copy something harmless afterward.

What the clipboard is

When you tap Copy, your iPhone holds that text, picture or file ready to paste. Apple's Universal Clipboard page says copied content stays "briefly, or until you replace it" by copying something else, and its pages don't say how long "briefly" is. The risk is that you copy something private, like a one-time code or a password, then forget it's there.

Your other devices can get it too

Apple's Universal Clipboard sends what you copy on one device to your other nearby Apple devices, so you can paste it there. It works when each device is signed in with the same Apple Account, with Bluetooth, Wi-Fi and Handoff turned on, and near each other. Apple says Handoff is on by default. The content can be text, images, photos, videos and files, and Apple says it stays on the other device briefly, or until something else is copied.

So if an iPad or Mac nearby is signed in to your Apple Account, a code you copied could land there. Apple's page doesn't give a way to switch Universal Clipboard off, so the safest step is not to copy what you can't share.

Apps and the clipboard

In 2022, with iOS 16, Apple changed how apps read what another app copied. Apple told developers that the system now confirms intent: if an app reads the clipboard directly, instead of through the Paste command, the system shows a prompt. Pasting yourself, with the Paste option or a paste button, doesn't trigger that prompt. So if a prompt asks to allow paste and you didn't just try to paste, it's worth pausing. Apple's session doesn't describe the wording or whether your answer is remembered, so we don't either.

Safer habits

  1. Let AutoFill do it. With AutoFill Passwords and Passkeys turned on, your iPhone can fill in saved passwords for you, so there's nothing to copy.
  2. Don't copy recovery phrases or card numbers. Write a recovery phrase on paper. Paste only what you must.
  3. Copy something harmless afterward. Copying a single word replaces whatever was on the clipboard. This is our advice, and it follows from Apple saying copied content is replaced when you copy something else.
  4. Share a Wi-Fi password without typing it. Apple says you can share it from your iPhone to someone else's without revealing it.

How FirstHour helps

FirstHour doesn't read your clipboard. In the Vault's recovery phrase screen there's no Copy button, and it warns you not to take a screenshot of it. The one place FirstHour copies something is the phone check-in setup, where tapping Copy puts your secret code on the clipboard, and opening the picture-by-picture steps copies it too, so it's ready to paste. Like anything copied, it can reach your other devices through Universal Clipboard until you copy something else.

Notes you write in the Vault are plain text, so anything you paste in is stored sealed, but it's still on the clipboard until you copy something else. FirstHour can't clear your clipboard for you.

Questions

Does the clipboard keep a history?

Apple's page says copied content stays "briefly, or until you replace it" by copying something else. Its pages don't describe a history of past copies.

Is a screenshot the same as the clipboard?

No. A screenshot is saved as a picture in Photos, which is a bigger problem. Here's what else a camera roll gives away.

Sources

All guides