I use a wonderful program called AceText which captures and keeps a history of what passes through the clipboard. This is extremely useful. I added bitwarden to the exclusion list and it didn’t copy anything from Bitwarden. So, When I logged into bitwarden with a username and password, those didn’t go into the clipboard history.
Now they do. What changed within the last few weeks? How can we fix it?
Acetext say there are parameters you can add that it checks to exclude items from the clipboard history. Did Bitwarden remove those?
Where are you copying the Bitwarden username and password from?
Disregarding the fact that this is not a good idea security-wise, if there is an issue with the metadata for the clipboard entries, the problem would be with the app where you are copying the credentials, not with the Bitwarden login form (where you are pasting the credentials).
OK, here’s a report on what I’m getting (or not getting) in AceText.
Situation, Acetext open on screen 1
Firefox open on screen 2 Using its extension
If I log in using Bitwarden to my amazon account, I get the Time based one time password, appearing in my clipboard list. Weird but no problem.
Situation 2
Firefox Bitwarden extension on screen 2, Acetext on screen1
If I copy a password or username by hitting the copy button rather than the automatic login, then they appear in Ace Text. It might not be possible to deal with this without stopping all Acetext copying from Firefox, which I use too often.
Situation 3
A remote computer on screen 2, using Firefox to login to one of their accounts
ActText on Screen 1
Windows Bitwarden on screen one - I have to copy from notes for that particular remote computer.
I copy their username and password for the remote computer From Desktop Bitwarden to login to the remote computer’s online account.
Acetext gets everything. - This is the problem. the way it is supposed to work, is that if I tell AceText to not work at all grabbing things from the Windows Bitwarden, then it should not be recording those entries. This worked until recently, perhaps a few weeks. I’m checking also with the AceText forums.
The best solution (short of not using the clipboard at all) would be for Bitwarden to add the ExcludeClipboardContentFromMonitorProcessing flag to the clipboard. Then AceText, the clipboard history built into Windows, and any other clipboard manager that respects this flag would immediately stop capturing text copied by Bitwarden. This should be fairly easy to implement in a desktop application.
I’m not concerned about the clipboard because the clipboard can and is cleaned. Mine is cleaned every 1 minute. My problem is the clipboard manager that maintains a history of clips.