How to Auto-Clear the Clipboard After Pasting a Password

Automatic clipboard clearing is a good habit with a famous hole. The password manager empties the live clipboard after 10 or 30 seconds. Windows clipboard history, if it is on, may already have stored the same string as a Win+V card. Ctrl+V looks clean. Win+V still shows the password.

Configure both layers or the timer is theater.

Microsoft does not offer a “clear after 30 seconds” switch on Settings > System > Clipboard. Official controls are Clear clipboard data, Win+V > Clear all, per-item Delete, restart wipe of unpinned items, and the 25-item cap. Anything that looks like a countdown belongs to the vault or a third-party command.

Layer A — the live clipboard

This is what Ctrl+V pastes. One item. Password managers can overwrite or empty it after a delay.

Bitwarden desktop

Bitwarden’s official FAQ, “Can I prevent my credentials from being saved to the clipboard?”, lists three places:

• Desktop: Settings, Preferences section, Clear clipboard, any value other than Never.
• Browser extension: Settings > Autofill > Clear clipboard.
• Mobile: Settings > Other > Clear clipboard.

The historical default is Never. Choose the shortest interval that still allows a paste — 10 seconds or 20–30 seconds if the login form is slow.

After the timer, paste into Notepad. It should not be the password.

This does not delete Win+V items. Bitwarden community threads have said the same for years: the client clears the current clipboard, not clipboard history.

Set the desktop app and the browser extension. They are separate clients with separate defaults.

KeePass

KeePass documents timed clipboard clearing as a product feature. Official FAQ notes:

• Options live under Tools > Options.
• They apply to main-window commands such as Copy User Name and Copy Password, not necessarily to Ctrl+C inside an edit dialog.
• The clipboard is cleared only if it still contains the last data copied by KeePass. If something else was copied first, KeePass will not wipe the new item.
• There is also a clear-on-exit option.

KeePass 2.x can set Use Clipboard Viewer Ignore clipboard format so some managers skip the copy. Test Win+V after enabling it; some older Office builds were historically confused by that format.

Prefer Auto-Type so the general clipboard is never used. Is Copying a Password Ever a Good Idea?.

KeePassXC

KeePassXC exposes Clear clipboard after under Tools > Settings > Security. Community reports are consistent on two points that matter for testing:

• Use the dedicated toolbar copy actions. Copying from a revealed field in the entry editor may not start the timer.
• The timer, like Bitwarden’s, targets the live clipboard. A third-party history tool can still have stored the string.

Keep Auto-Type (Ctrl+Shift+V in the official shortcut table) as the default login method.

1Password

1Password Support documents an automatic removal of copied information. On Windows desktop: Settings > Security, and the control is labeled Remove copied information and authentication codes after 90 seconds. Leave that on unless there is a documented reason to turn it off.

90 seconds is longer than Bitwarden’s 10-second option. Compensate with autofill and with history off or a manual Win+V delete.

On Windows, Type in window can avoid a copy entirely. Use it when the destination has no integration.

Bitwarden, 1Password, and KeePass Clipboard Best Settings.

Layer B — Windows clipboard history

Microsoft’s history is off until enabled. If it is on:

• A text password under 4 MB can occupy one of 25 slots.
• Unpinned items clear on restart or Clear all.
• Pinned items survive Clear and restart.

There is no official “clear after 30 seconds” switch in Settings.

After each sensitive paste

1. Press Windows logo key + V.
2. Open … on the password card.
3. Choose Delete.

Or, if nothing else in the list matters: Clear all, or Settings > System > Clipboard > Clear clipboard data. Unpin first if a pin exists.

Better: do not record the copy

• Leave Clipboard history Off on jump boxes.
• Use a vault copy button that sets ExcludeClipboardContentFromMonitorProcessing so Win+V never stores the item. Test this. Passwords in Clipboard History: How They Get There.
• Keep Automatically sync text that I copy Off. A timer on PC A does not unsync PC B. How to Disable Windows Clipboard Cloud Sync.

Layer C — third-party managers

If Ditto, CopyQ, or a shelf is running, the vault timer does not wipe those databases.

CopyQ’s security page points at a Clear Clipboard After Interval command for restricting access after a long time. That is a live-clipboard hygiene tool, same class as Bitwarden’s timer.

KeePass’s FAQ names Ditto’s exclude field (KeePass.exe under Accepted Copy Applications) as the way to stop Ditto from saving vault copies. Set that before relying on any timer.

How to Stop Clipboard Managers From Saving Secrets.

A configuration that actually works

1. Autofill when the site allows it. Skip the clipboard.
2. Bitwarden/KeePass Clear clipboard = 10–30 seconds. Leave 1Password’s 90-second removal on.
3. Windows Clipboard history either Off, or On with sync Off and a habit of deleting the card.
4. Exactly one third-party monitor, with the vault on the ignore list.
5. Dummy-password test weekly after updates.

What auto-clear does not do

• It does not stop clipper malware from reading the password in the first 10 seconds. Clipboard Hijacking.
• It does not clear a pin.
• It does not clear a cloud item that already synced.
• It does not clear a screenshot of the password. Bitmaps in history are a separate card.
• It does not clear a Ditto or CopyQ row that was written at copy time.
• It does not unsync Phone Link or a keyboard cloud clipboard. Those are other processes.

Phone Link Clipboard Access Privacy Checklist.

Optional PowerShell is not a product

Scripts exist that call Windows clipboard empty APIs on a schedule. They have the same hole as Bitwarden: they touch the live clipboard, not Win+V, unless they also automate the history UI. Prefer vendor timers and the official Clear button over a home-grown scheduled task.

Windows 10 had the same history and the same hole. Support ended October 14, 2025. Move the vault to Windows 11, then set the timer.

Timing: how short is too short

10 seconds fails when the user copies, Alt-Tabs through three windows, and only then clicks the field. They recopy, and the password spends more total time on the clipboard.

Never fails in the opposite direction: the password sits until the next copy, which might be tomorrow.

20–30 seconds is the usual compromise. Combine with autofill so the timer is rarely needed.

If the login form blocks paste, do not lengthen the timer and fight the field. Use the vault’s autofill or a documented Auto-Type. Why Paste Fails in Password Fields.

TOTP codes expire on their own. Copying them still creates a history card. Prefer the vault’s display or Auto-Type {TOTP} rather than a long clear delay.

Team jump boxes

A shared admin workstation should not rely on each person’s Bitwarden timer. Set:

• Windows history Off.
• No third-party manager.
• Auto-logoff or reboot between users.
• A written rule: no copy-paste of production secrets; break-glass via the PAM tool.

A 10-second clear on one account does not help if the previous admin pinned a password in Win+V.

Should You Disable Clipboard History on a Work Laptop?.

Verify after a vault update

Clients change defaults. After updating Bitwarden, 1Password, or KeePassXC:

1. Confirm Clear clipboard is still not Never (Bitwarden) and that 1Password’s 90-second removal is still on.
2. Copy a dummy entry with the official copy control — not a revealed-field select-all.
3. Wait the interval. Ctrl+V should fail to paste the dummy password.
4. Win+V should be empty of that string if history is off or exclusion works; otherwise delete the card.
5. Search the third-party manager. Zero hits.

If step 3 fails, the copy path was not the one the timer watches. KeePass’s FAQ is explicit: options apply to primary copy commands.

Layer D — screenshots and pins

A Snipping Tool capture of a password dialog can sit in history as a bitmap under 4 MB. No vault timer will erase that card. Delete it, or keep history off on machines that reveal secrets on screen.

Never pin a password “for this afternoon.” Pins survive Clear and restart. How to Pin Items in Windows Clipboard History is a productivity feature, not a vault.

Windows has no password-aware history timer. Exclusion formats are all-or-nothing per copy. The 25-item cap and restart wipe are the only built-in expiry. Anyone promising an official OS “password paste timer” is describing a third-party tool. PowerToys Advanced Paste is a formatter, not a vault timer.

Related reading

• Local-First Clipboard: What the Phrase Should Mean
• Does a Local Clipboard App Need Encryption at Rest?
• Does Windows Clipboard Sync Upload What You Copy?
• Why You Cannot Drag Old Clipboard Files Into Explorer

Sources

• Using the clipboard (Microsoft Support) — Clear all, pins, restart, no per-item timer.
• Clipboard formats (Microsoft Learn) — exclusion formats that skip history entirely.
• CopyQ security — secret ignore and clear-after-interval command.
• Bitwarden Password Manager FAQs — official Clear clipboard paths for desktop, extension, and mobile.
• Copy and fill passwords (1Password Support) — Windows 90-second removal; Type in window.
• KeePass Additional FAQ — clipboard — own-content clear; which commands the timer covers.
• KeePass features — timed clipboard clearing as a documented feature.
• KeePassXC User Guide — Auto-Type shortcut and security-oriented copy workflow.

Copy. Stack. Drop.

Transform your clipboard into an interactive edge shelf. Stack, pin, and drag assets into any app with zero friction.

Download for Windows Get from Microsoft Store

How to Install Guide · First 10 Minutes Guide · Drag & Drop Guide · Edge-Drop vs Win+V · Support