Copy Codes with Universal Clipboard (Apple)

sethweber · June 19, 2024, 6:02pm

Currently cannot copy a code from an iPhone to Mac computer using Universal Clipboard like I can with the other authenticator apps I have used. So users would have to manually type in codes. Don’t think many Apple ecosystem users will want to switch authenticators to this one without that feature—I know I won’t.

snuff · July 5, 2024, 8:24am

This is a must-have feature for me as well.

Lia · July 11, 2024, 3:34pm

Bumping this… would love the ability to copy from iPhone to my Mac seamlessly

fee00000000 · March 10, 2025, 4:35pm

Hi. I just started using Bitwarden. My previous PM was LastPass. Bitwarden has one very annoying issue, which works perfectly in LastPass. Please consider fixing it.

When I copy the TOTP code in LastPass Authenticator, I can paste it on my Mac connected to the same Apple ID. It doesn’t work that way with Bitwarden Authenticator. I have to paste it somewhere on the phone and then copy it manually to make it work.

I can type the code from the keyboard all the time, sure. But you won’t believe how convenient it is when I can just copy it on the phone (one button click) and paste it on the laptop (one key-pair press).

DenBesten · March 10, 2025, 5:41pm

Welcome, @fee00000000 to the community!

To keep things together, I moved your post into an existing post on the same topic.

fee00000000 · March 10, 2025, 6:10pm

Thank you. It’s been open for more than a year… Does nobody on the Bitwarden team use Authenticator on iPhone? This issue is a productivity killer.

Also, I can not vote. I assume other newcomers can not vote, too, and this is the only reason this issue has zero votes.

DenBesten · March 10, 2025, 6:15pm

Spend 30 minutes or so browsing the community and you will earn the ability to cast votes.

fee00000000 · March 10, 2025, 6:54pm

Ok, I found the issue - it is intentional! Why?

github.com/bitwarden/ios

BitwardenShared/Core/Platform/Services/PasteboardService.swift

2c6101750


      
                          clearClipboardValue = .never
                      } catch {
                          self.errorReporter.log(error: error)
                      }
                  }
              }
          }
          
          // MARK: Methods
          
          func copy(_ string: String) {
              if clearClipboardValue == .never {
                  pasteboard.setItems(
                      [[UTType.utf8PlainText.identifier: string]],
                      options: [.localOnly: true]
                  )
              } else {
                  // Set the expiration date if the clear clipboard preference is not never.
                  let expirationDate = Date().addingTimeInterval(Double(clearClipboardValue.rawValue))
                  pasteboard.setItems(
                      [[UTType.utf8PlainText.identifier: string]],

It can be fixed by changing true to false in two places (or removing the .localOnly option).

@DenBesten, could somebody from the core team check why it was done and maybe reconsider the decision?

The Authenticator and the password manager share this code. I assume this is the primary concern, and passwords will be available for the sync. It is less of an issue for the password manager since it has a browser add-on. However, Authenticator lives on mobile only, and the codes, in many cases, are supposed to go to a laptop or desktop.

It may be configured in the application’s settings to allow Apple’s clipboard sync.

DenBesten · March 10, 2025, 7:27pm

I am not a Bitwarden employee. Employees have a badge (the Bitwarden logo) over their avatar.

My suspicion it is because the clipboard is not a great place for credentials because any app on a device can see the contents. The universal clipboard only makes this worse in that it extends the exposure to any app on any device. This is why with Password Manager we (we-all) advocate autofill instead of copy/paste for passwords themselves.

fee00000000 · March 10, 2025, 7:50pm

Thank you. I agree with all you said about a password app. I would still prefer to have control of this option (to enable it). However, this is a different story.

This seems to be different for the Authenticator app. The code is temporary and unique each time, so it’s hard to imagine a case where a TOTP code leak by intercepting the clipboard is dangerous. Just my opinion, anyway.

The most flexible solution seems to be a settings option per app (separately for the PM and Authenticator) that is off by default.

Anyway, I understand you can’t influence the product team. Thank you for assisting and commenting.