Automatically clear clipboard after X seconds when using copy functions

app:desktop
app:mobile

#1

A background task should clear the device’s clipboard after X seconds whenever the clipboard text still matches the value that was originally copied.

NOTE: I’m not sure if this is possible to do in the browser extensions due to clipboard API restrictions in the browser. Therefore I have not tagged it for this feature request.

GitHub issue: https://github.com/bitwarden/browser/issues/82


Don't store password in Windows 10 Clipboard History / Cloud Clipboard
#2

About your question, yes, that’s possible. At least in Chrome. LastPass works that way. Not so sure what API they are using, but it’s certainly possible. Or else you could just attach a binary in order to complement that.

Don’t forget to make the countdown timer customizable, ok? :stuck_out_tongue:


#3

Maybe simply filling the clipboard with blanks would work, or writing another randomized string there , or simply “clearedbybitwarden” , of course on Desktops like KDE/Plasma you’d need to disable the clipboard history in that case


#4

I thought to do it also, but if done this way, it will cause other undesired consequence: overwrite another new clipboard content the user just put there after using the password.

So, the bitwarden app/extension must check the clipboard content before overwriting it.


#5

If this is ever chosen to be implemented, I would like to see it as an option, and not required.


#6

This is a good idea, but it’s probably not possible to do this atomically - this means there’ll be a small race condition where very occasionally this will still clear new clipboard content.

Looking at https://developer.android.com/guide/topics/text/copy-paste#ClipClasses I see you can store an intent instead of text. I don’t know the details of how intents work but perhaps it’s possible to use an intent instead of plain text and do something cleverer like storing a reference to the password and timing out its access.


#7

Yes Yes and Yes ! This is highly needed to avoid any mis-paste password.

Desktop requirement suggested

  • At timer’s end :
  • Check content of clipboard or salt of it (if that is something the API does)
  • If Clipboard ID (or content) is from bitwarden -> replace by a random String (not to just clean it as this could be an indicator when spoofing clipboard data and not easy to diagnose if people come with a “bug” that clipboard is empty when pasting :)/ pasting do not work !)
  • If clipboard ID (or content) is not from bitwarden. -> Write in debug that clipboard as been replaced.

Options suggested

  • Customization time before clearing
  • Activate or deactivate such feature - Per app / extensions
  • A general master Switch in the Web App to force on or off on ALL other app/extensions (important for enterprise :))

Tips :
No idea on other systems but on Windows there was the GetClipboardSequenceNumber() method that give you a Number and hat is auto-incremental. checking this is WAY MORE efficient than checking the content :slight_smile:

Concerns :
Possible issue when checking content instead of Clipboard ID is that people sometimes copy-paste the same content - not ideal behavior but people do it. As the clipbaord have been replaced (even if the content is exactly the same) that should not be cleared as it falls out of Bitwarden app responsibility :smiley:


#8

I’d love to see that Features on all platforms as well.

What I do on Windows 7 (at work):


#9

This should be implemented. Keepass does it as well.


#10

just signed up to vote this.


#11

+1 That´s what i miss most.


#12

1 password has something similar with totp codes, where they get automatically put into your clipboard when you autofill & submit a password, and then restore your clipboard contents after a timer.


#13

I also signed up for the sole purpose to vote this. Hope we see this feature sometime soon(ish)!


#14

KeePass offers this and I also request this feature!


#15

This tops my wish list.
Please add this, it can be optional in the settings.


#16

I need this option as well.
I think its a nr 1 requirement for a password manager cause its basically a security issue.

Please add this one, customizable in settings.


#17

Oh yeah! Would really appreciate this feature. As mentioned before, this should be a default option for any password manager.


#18

Yes, would like to see this security-feature too.


#19

Please add this feature. It’s still highly required for security purposes.


#20

+1 from me, i can see all the clipboard items on my clipboard history List.