How to Pause Clipboard Capture When You're Copying Secrets

Pause clipboard capture before you copy a secret. That is the reliable control. Autofill in a password manager is better still: the secret never becomes ordinary clipboard text. Win+V (25 items, 4 MB, text/HTML/bitmap) has no pause switch. Third-party tools do. Edge Drop ships incognito / pause — it stops recording new cards. It does not auto-block every secret format, every reveal-then-Ctrl+C, or a screenshot of a vault.

The long hardening guide is how to stop clipboard managers from saving secrets. This page is the secrets checklist you run in the two minutes before a break-glass paste. Edge Drop is a local Apache-2.0 hover shelf (hover or Alt+C, no cloud). It is not a vault. It is not Microsoft’s retired Edge Drop pane (Edge 152, 27 August 2026).

If the destination can be filled by the vault, do not copy. Is copying a password ever a good idea?.

Pause clipboard capture: secrets checklist

0. Prefer not to copy. Use the vault’s autofill, Universal Autofill, or Auto-Type. 1Password, Bitwarden, and KeePass exist so you do not highlight a revealed password. If the destination blocks paste, use the vault’s documented fill path — not a longer clipboard timer. Password managers vs clipboard monitors.

1. Pause every recorder you actually run.

• Edge Drop: turn Incognito on from the tray or settings. Capture polling stops. Old cards stay. Win+V is unrelated.
• Ditto / CopyQ / ClipboardFusion: use that app’s pause or ignore-window list.
• Confirm the badge or tray state. A pause you cannot see will stay on for a week or stay off during the paste.

2. Treat Win+V as a second recorder. Settings → System → Clipboard. Keep Clipboard history across your devices Off. After a sensitive paste, Win+V → … → Delete that card, or Clear clipboard data if the rest of the list can go. Never pin a secret. Pins survive restart. Unpinned wipe on reboot is not a policy.

3. Do not trust “the app ignores passwords” as complete. Well-behaved monitors honor Microsoft exclusion formats (ExcludeClipboardContentFromMonitorProcessing, CanIncludeInClipboardHistory = 0, CanUploadToCloudClipboard = 0, plus Clipboard Viewer Ignore). Vault Copy password buttons often set those. Reveal → Select all → Ctrl+C almost never does. Edge Drop ignores some concealed vault formats; that is not a promise that every OTP, recovery code, .env line, or connection string is skipped.

4. Screenshots are secrets too. A bitmap under 4 MB is a Win+V item. A snip of a vault, a QR seed, or a Slack DM with a token is history even if nobody pressed Copy on the text. Close the vault, then snip — or pause capture first.

5. Resume on purpose. Turn incognito off when the secret work is done. A shelf that stays paused is a dead product. A shelf that you forget to pause is a diary.

6. Expire residue. Delete the card. Use auto-delete timers on the third-party tool if you have them. Do not leave the string pinned “for later.”

Ordinary URLs, public docs, and meme images do not belong on this list. If everything is “secret,” pause becomes permanent and you will defeat it.

When Edge Drop fits — and when it does not

Fits when you already want a local hover shelf and you need a visible pause you can toggle before a break-glass paste. Incognito stops new cards. OLE drag-out and hover still apply to non-secret work.

Does not fit as a password manager, as a guarantee that every secret format is skipped while capture is on, or as a pause for Win+V. It does not pause Ditto or CopyQ. It does not encrypt extra just because incognito is on. If the machine mostly pastes passwords, leave third-party capture off and leave Win+V off. Autofill remains the correct tool.

Store listing 9P3JMHN9M4NR. Source github.com/Deepender25/Edge-Drop.

Edge Drop incognito, honestly

When incognito is on, Edge Drop stops adding new items. The shelf still replays what is already there. It does not:

• Erase history already on disk
• Pause Win+V
• Pause Ditto or CopyQ if those are also running
• Encrypt extra
• Guarantee every vault format is excluded while capture is on

How to toggle it: how to use incognito mode in Edge Drop. Two recorders at once is how a “paused” shelf still leaks into a tray DB.

Respect for common password-manager privacy flags is a courtesy while capture is on. Reveal-and-copy, OTP strings, recovery codes, .env lines, and bitmaps of secrets are ordinary clipboard payloads unless you pause.

Thirty-second proof

1. Copy TEST-PAUSE-VISIBLE with capture on. Confirm it appears in the shelf and, if enabled, in Win+V.
2. Pause / incognito on.
3. Copy TEST-PAUSE-SECRET.
4. Confirm it is absent from the shelf.
5. Open Win+V. If the secret is there, you only paused the third-party tool.
6. Resume capture. Copy TEST-PAUSE-RESUME. Confirm recording works again.

Use fake strings. Do not test with a live password.

If step 5 fails, turn history off or delete the card every time. Optional Microsoft text sync makes a work laptop a second copy. Leave it off.

Vault clipboard timeout (Bitwarden, 1Password, KeePass) clears the *live* clipboard after a few seconds. It does not pause Win+V. It does not pause Edge Drop. A history card taken during those seconds stays until you delete it. Timeout is a live-clipboard hygiene tool. Pause is a historian hygiene tool. You want both if you must copy.

OTP apps and authenticator screens are ordinary text or bitmaps. There is no special “this is a TOTP” clipboard format you can rely on. Pause first. Do not pin last month’s backup codes “in case the phone dies.”

Shared machines and screen-share

A shelf on a shared family PC or a mod account is a billboard. Pause before secrets, clear after. Do not pin “the staging password so the next person is faster.” On a screen-share, hover itself can reveal cards you forgot. Close the blade. Pause capture. Shared family PC.

Healthcare and finance shops often forbid third-party clipboard tools. Policy wins. This checklist is not a HIPAA program. If the machine is imaged without clipboard managers, do not sideload Edge Drop to “add incognito.” Leave Win+V off and use the vault.

Soft CTA

Need a local Windows shelf with a visible pause? edgedrop.app is Apache-2.0, hover or Alt+C, no cloud. It is not a password manager. Keep the vault in charge of secrets.

FAQ

If I pause Edge Drop, is Win+V also paused? No. Turn history off, or delete the card, or leave history off on machines that mostly paste passwords.

Does Edge Drop block all secret formats automatically? No. Some concealed vault formats are ignored. Reveal-and-copy, screenshots, OTPs, recovery codes, and random text secrets are ordinary clipboard payloads unless you pause. Do not treat “respects password-manager flags” as a complete auto-block.

Is auto-delete enough instead of pause? It is a backstop, not a substitute. A token that sat in history for 50 minutes was still copyable during that window.

Should I copy a wallet seed into the shelf “just this once”? No. Never copy a seed into any clipboard, including Win+V. Paper or hardware. Pause does not make that copy a good idea.

Related reading

• How to Stop Clipboard Managers From Saving Secrets
• How to Use Incognito Mode in Edge-Drop
• Password Managers and Clipboard Monitors: Who Should Win?
• Is Copying a Password Ever a Good Idea?

Sources

• Using the clipboard (Microsoft Support) — history is text/HTML/bitmap; pins persist; sync is optional
• Clipboard formats (Microsoft Learn) — exclusion formats for history and cloud clipboard
• CopyQ documentation — ignore secret formats; window filters
• Edge-Drop GitHub — local shelf with incognito pause, Apache-2.0
• 1Password clipboard guidance — vault copy vs autofill; treat vendor docs as the fill path

Copy. Stack. Drop.

Transform your clipboard into an interactive edge shelf. Stack, pin, and drag assets into any app with zero friction.

Download for Windows Get from Microsoft Store

How to Install Guide · First 10 Minutes Guide · Drag & Drop Guide · Edge-Drop vs Win+V · Support