How to Stop Clipboard Managers From Saving Secrets
To stop a clipboard manager from saving passwords, do three things in this order. Use your password manager's autofill so the password never touches the clipboard. When you must copy, use the password manager's own copy button, which can mark the copy so clipboard history skips it, and make sure your clipboard manager respects that mark or ignores the password manager entirely. Then cover the gaps: pause recording around sensitive work, keep retention short, and delete anything that slips through.
The settings differ by tool, so each one is covered below, followed by a two-minute test that shows whether your setup works.
Who should win: the password manager
When a password manager and a clipboard manager disagree, the password manager should win. The order of controls, from most to least effective:
| Priority | Control | Set in |
|---|---|---|
| 1 | Don't put the password on the clipboard at all | Password manager: autofill or Auto-Type |
| 2 | Mark the copy so history and sync skip it | Password manager (copy button) |
| 3 | Skip marked copies, or ignore the password manager app | Clipboard manager |
| 4 | Pause recording during sensitive work | Clipboard manager |
| 5 | Keep history short and delete leftovers | Clipboard manager and Windows |
| 6 | Clear the current clipboard after a few seconds | Password manager timer |
The timer is last for a reason: it clears what Ctrl+V pastes, not what a history tool already saved. How to auto-clear the clipboard after pasting a password explains that gap.
How the "don't save this" marker works
Windows lets an app tag a copy with registered clipboard formats that tell history tools to skip it. Microsoft Learn documents three:
- ExcludeClipboardContentFromMonitorProcessing: keep the copy out of clipboard history and cloud sync.
- CanIncludeInClipboardHistory set to 0: keep it out of history only.
- CanUploadToCloudClipboard set to 0: keep it out of sync only.
Many tools also recognise an older marker, Clipboard Viewer Ignore. The password manager has to add these markers when it copies; you can't add them afterwards. A password you reveal, select and copy yourself is plain text with no marker. What sensitive formats should monitors ignore? lists them in more detail.
Set up your password manager first
- Use autofill or Auto-Type wherever it works. KeePass and KeePassXC can type a password into another window with Auto-Type (KeePassXC's shortcut is Ctrl+Shift+V), and 1Password on Windows has Type in window.
- KeePass: leave Do not store data in the Windows clipboard history and the cloud clipboard on. It's on by default since version 2.41. Use Clipboard Viewer Ignore clipboard format is in Tools > Options > Security and has been on by default since 2.44. KeePass warns that a few apps can be confused by that format.
- Bitwarden, 1Password and others: turn on the clipboard-clearing timer, then run the test below to see whether their copy buttons are skipped by Win+V. Test the desktop app and browser extension separately.
Is copying a password ever a good idea? covers the cases where copying is unavoidable.
Windows clipboard history (Win+V)
Win+V honours Microsoft's exclusion formats, so marked copies never appear. It has no list of apps to ignore, so manual copies are always saved.
- Open Settings > System > Clipboard.
- Keep Clipboard history on only if you use it.
- Set Clipboard history across your devices to Off.
- Never pin a secret. Pinned items survive restarts and Clear all.
- After a sensitive paste, press Win+V, select See more (...) on the item and choose Delete.
How to clear clipboard history on Windows 11 has every clearing option.
Ditto
Ditto's current source code skips copies marked Clipboard Viewer Ignore, and by default also skips copies marked ExcludeClipboardContentFromMonitorProcessing. For copies with no marker:
- Open Ditto's Options.
- In the Accepted Copy Applications section, add your password manager's program name to the Exclude field. The KeePass FAQ gives
KeePass.exeas the example. - Copy a dummy password and search Ditto for it to confirm it wasn't saved.
Older or portable Ditto builds may behave differently, so retest after installing or updating.
CopyQ
CopyQ is the most explicit about this. By default it ignores copies marked with Clipboard Viewer Ignore, ExcludeClipboardContentFromMonitorProcessing, or CanIncludeInClipboardHistory or CanUploadToCloudClipboard set to 0: they aren't stored, shown or processed by automatic commands.
- Leave the default secret handling alone. Overriding
onSecretClipboardChangedto store secrets defeats it. - Add a window-title filter to skip copies from your password manager's window even when no marker is present.
- Turn on encryption if sensitive items must be kept. CopyQ stores data unencrypted unless encryption is enabled.
- To see what a copy contains, use File > Show Clipboard Content (Ctrl+Shift+C by default) and look for the marker formats.
ClipboardFusion
ClipboardFusion's free edition includes Ignore Specified Applications. Add your password manager there before your first real login. Both free and Pro also have a Pause/Resume ClipboardFusion hotkey for sensitive sessions. If you use Pro's syncing, keep credentials off the synced clipboard entirely.
PhraseExpress
If you use PhraseExpress only as a text expander, turn its clipboard manager off under Features > Clipboard Cache in the PhraseExpress settings. If you keep it, use its program restriction setting so it only records copies from the programs you choose. PhraseExpress vs Ditto explains how the two tools differ.
Edge Drop
Edge Drop skips any copy that carries the standard Windows exclusion formats, Clipboard Viewer Ignore, or the clipboard formats that known password managers use to flag concealed content. It has no per-app ignore list, so for manual copies use its other controls:
- Incognito mode (Settings > Behaviour, or Incognito (pause capture) in the tray menu) pauses recording. Anything copied while it's on isn't added later.
- Auto-delete timer (Settings > Behaviour) removes unpinned items after 1 hour, 6 hours, 24 hours or 7 days.
- Clear unpinned on restart wipes unpinned history every time the app starts.
What Edge Drop does with password manager copies and how to use incognito mode in Edge Drop cover these in detail.
Test your setup in two minutes
- Create a dummy entry in your password manager with a made-up password.
- Copy it with the password manager's Copy password button.
- Check Win+V and search your clipboard manager for it.
- If it appears anywhere, fix that tool's ignore setting or stop using that copy path.
- Copy a word from Notepad and confirm it does appear, so you know recording still works.
- If your password manager has a clipboard timer, wait for it, then press Ctrl+V in Notepad. The password shouldn't paste.
Repeat after updating Windows, your password manager or your clipboard manager. Settings and defaults change.
Run one clipboard history, not three
Win+V plus two third-party managers means three places to configure and three copies of every slip. Pick one tool, turn Win+V history off if another tool records, and leave cloud sync off unless you need it. Can you run two clipboard tools at once? explains the conflicts.
What counts as a secret
| Item | Safer path |
|---|---|
| Login password | Autofill or Auto-Type |
| One-time code | Autofill, or type it from the authenticator |
| Recovery or backup codes | Store in the password manager, not history |
| API key or access token | Copy only with a marked copy, then delete; rotate if exposed |
| Connection string with a password | Keep it in a secrets store, not a pin |
| Wallet seed phrase | Never copy it |
| Screenshot of a password screen | Don't capture it; delete it from history if you did |
If a secret was already saved
- Delete it in Win+V and in your clipboard manager.
- If you used Clear all, unpin and delete any pinned secrets separately.
- If Windows sync was on, repeat on every signed-in PC and select Clear under Clear clipboard data in Settings > System > Clipboard.
- Change the password, or revoke the key, if anyone else could have seen it.
- Fix the setting that let it through and run the test again.
FAQ
Do clipboard managers save passwords?
Yes, unless they're set not to. Most save any text you copy. Good ones skip copies that the password manager marks as secret, and many let you ignore specific apps.
Does a password manager's clipboard timer remove the password from history?
No. The timer clears the current clipboard. A copy already saved by Win+V or another clipboard manager stays until you delete it.
Which clipboard manager is safest for passwords?
One that skips marked copies by default, lets you ignore apps or pause recording, keeps history short, and doesn't sync unless you ask. CopyQ documents this most clearly; Ditto, ClipboardFusion and Edge Drop each cover part of it.
Related reading
- How Do Passwords End Up in Clipboard History?
- How to Auto-Clear the Clipboard After Pasting a Password
- ExcludeClipboardContentFromMonitorProcessing, Explained
- Clipboard Manager Privacy Settings: A Checklist
- How to Pause Clipboard Capture When You're Copying Secrets
Sources
- Clipboard Formats (Microsoft Learn) — the three exclusion formats and what each one skips.
- Using the clipboard (Microsoft Support) — Win+V pinning, deleting, clearing and sync.
- KeePass additional FAQ — Ditto's Exclude field example, Clipboard Viewer Ignore option and its warning.
- KeePass 2.41 release notes and KeePass 2.44 release notes — clipboard history option and default changes.
- Ditto ClipboardViewer.cpp (GitHub) — which marker formats Ditto skips.
- CopyQ security — secret formats, default handling, window filters, encryption.
- ClipboardFusion Free vs Pro — Ignore Specified Applications and the Pause/Resume hotkey.
- PhraseExpress Clipboard Manager — turning off the clipboard cache and restricting it to programs.
- KeePassXC User Guide — Auto-Type shortcut.
- Copy and fill passwords (1Password Support) — Type in window on Windows.
Mohit Sehrawat helps test Edge Drop, trying features on Windows and reporting bugs. A B.Tech Computer Science Engineering student focused on software testing and product quality, Mohit writes the troubleshooting and privacy guides.
GitHub · LinkedInCopy. Stack. Drop.
Transform your clipboard into an interactive edge shelf. Stack, pin, and drag assets into any app with zero friction.
Download for Windows Get from Microsoft Store
How to Install Guide · First 10 Minutes Guide · Drag & Drop Guide · Edge Drop vs Win+V · Support
Free · Lightweight · Privacy First