What Does Local-First Mean for Clipboard Apps?

“Local-first” is printed on every landing page that stores copies. The phrase should mean a contract, not a color palette. A clipboard tool is local-first if the default install keeps every copy on this PC, documents any network use, and treats cloud as an opt-in with a visible off switch.

Windows already almost meets that contract. History is off until enabled. Sync is a second toggle. Many Store apps fail it on day one by creating an account.

The research sense of local-first software is older than clipboard marketing. It means the app remains useful when the network is gone, the user owns the data file, and sync — if any — is a later, explicit layer. A clipboard product that cannot paste after the firewall blocks it is not local-first, no matter how many times the word “privacy” appears on the hero image.

A checklist, not a vibe

How to Audit Whether a Clipboard App Talks to the Network is how to verify the network row.

Local-first is also a retention story. An unlimited plaintext log that never leaves the disk is still a local leak on a shared or stolen-and-unlocked PC. The Case Against Unlimited Text History.

Windows clipboard history

Local part: Settings > System > Clipboard > Clipboard history. Win+V. 25 items, 4 MB, text/HTML/bitmap, unpinned wipe on restart. No extra account.

Not local-first the moment Automatically sync text that I copy is on. That is Microsoft’s documented upload of text to the account. The Settings label is honest. The user still has to read it.

Recommended local-first Windows setup: history On, devices toggle Off. How to Disable Windows Clipboard Cloud Sync.

Microsoft Support is explicit that sync is tied to the same Microsoft or work account. Does Windows Clipboard Sync Upload What You Copy?.

What Windows does not document is a consumer “AES for Win+V” checkbox. Local-first here means local-to-this-profile, not vault-grade. Is Windows Clipboard History Safe?.

Ditto

Ditto is the reference third-party local manager: SQLite (or similar) in the user profile, no login, optional network share only if configured. That optional share is the foot-gun. Leave it off.

Encryption of the DB has been evolving (SQLite multiple-ciphers work in recent releases). Until it is enabled and tested, assume plaintext at rest relative to the signed-in user.

Find the database path in Options and exclude it from OneDrive Known Folder Move if Documents is redirected. A “local” Ditto file that silently lives in a synced Documents folder is a consumer-cloud clipboard with extra steps.

Do not enable Friends / network features on a laptop that holds client data. Local-first is the default only while those remain off.

CopyQ

CopyQ’s security page is the gold-standard disclosure:

• Stores text/images automatically by default.
• Config directory, unencrypted unless encryption is enabled.
• Does not collect other data and does not send anything over the network.
• Honors Windows secret clipboard formats.
• Points at a FAQ for the config path so the files can be found and backed up on purpose.

That is local-first with an adult encryption story: optional, off until chosen, documented.

CopyQ can still be reckless. A script that sets onSecretClipboardChanged to the normal store function writes passwords into that local directory. Local is not the same as appropriate.

ClipboardFusion

Free tier is a local Windows app (history, pins, macros, ignore apps). Pro clipboard syncing is the opposite of default-local — it is the SKU. Using Free with ignore lists and no account is compatible with this definition. Signing into sync is a deliberate cloud product. Free vs Paid Clipboard Managers.

Binary Fortress is a named vendor with a compare chart that separates local features from cloud. That honesty is part of the contract. A Store clone that hides the same split is not.

Edge-Drop

Edge-Drop positions itself as a local hover shelf, not a sync product. That matches the phrase if the build in use does not phone home. Confirm with a firewall or Resource Monitor, same as any Electron app. It still does not win search or RAM. Local-first is not “best at everything.”

A shelf used for images and files is a narrower local store than a forever text log. That is often the better local-first choice for design work. When Built-In History Is the Correct Tool still applies when Win+V is enough.

What is not local-first

• Keyboard cloud clipboards left on by accident. SwiftKey / Gboard Cloud Clipboard on Windows.
• Phone Link clipboard permission that was never reviewed. Phone Link Clipboard Access Privacy Checklist.
• A “local” app that phones home for update checks and uploads clip contents. Update checks alone are a smaller issue; they should be documented.
• Unlimited logs on a shared PC. Local can still be reckless.
• Account-gated history that will not show yesterday’s copies until the vendor’s API answers.

Local Clipboard Apps That Do Not Upload.

Encryption is a separate sentence

Local-first answers where the bytes go. Encryption at rest answers who can read them on disk. A stolen, unlocked, signed-in laptop loses both. BitLocker helps the powered-off theft case. App-level DB encryption helps another user or a naive file copy. Neither replaces autofill. Does a Local Clipboard App Need Encryption at Rest?.

Do not accept “military-grade local encryption” as a substitute for “we upload text to our SaaS.” Those are different axes. A product can encrypt on the server and still not be local-first.

Buying language to reject

• “Military-grade cloud clipboard” with no white paper.
• “Unlimited secure history” that requires an account before the first paste.
• “We never store your data” from an app whose job is storing copies. They store it *somewhere*. The question is whose disk.
• “End-to-end” without saying who holds the keys and whether the vendor can reset them.
• “Works offline” that actually means “shows a cached last item” while new copies vanish until login.

Windows 10 had the same local-vs-sync split. Support ended October 14, 2025. Local-first on an unsupported OS is still a local insecure OS.

A purchase script for the phrase

When a landing page says local-first, ask:

1. Can the app be used all day with the firewall blocking its exe outbound? If no, what breaks — updates only, or copy itself?
2. Where is the database path? Can it be excluded from OneDrive?
3. Is there an account? If yes, is it required for history or only for optional sync?
4. What is the default retention? Unlimited plus local-first is still a large local leak.
5. Does it document Microsoft’s secret clipboard formats?
6. Can the user export and delete the store without emailing support?
7. After a clean install, does Resource Monitor stay idle during ten Notepad copies?

If the answers are vague, the phrase is decoration.

How to Audit Whether a Clipboard App Talks to the Network is the lab version of questions 1 and 7.

Sync that is still local-first

Some teams sync a Ditto database or a phrase file via a self-hosted share they already trust. That can be local-first in spirit (data stays on company disks) and still be a terrible idea for passwords. The definition is about default vendor cloud, not about never crossing a network cable.

Microsoft’s own text sync is honest and not local-first once enabled. That is acceptable when the user wants it. It is not acceptable to leave it on by accident and call Win+V local-first.

When Cloud Clipboard Sync Is Actually Fine.

Self-hosted sync still needs ignore lists. A company file share full of copied tokens is a local-first incident, not a marketing win.

Default install matrix

Cloud Clipboard Apps Worth Using in 2026 is the other side of this table.

Local-first is also a retention choice. A 50,000-item plaintext Ditto file on an encrypted disk is local and still a bad idea. Pair the phrase with a cap or a daily Clear. Auto-Delete Timers for Clipboard History.

Related reading

• Does a Local Clipboard App Need Encryption at Rest?
• Windows Recall vs the Clipboard: What Stores What
• Does Windows Clipboard Sync Upload What You Copy?
• Why You Cannot Drag Old Clipboard Files Into Explorer

Sources

• Using the clipboard (Microsoft Support) — history vs optional account-tied text sync.
• CopyQ security — no network send; unencrypted unless enabled.
• Ditto — local database, no required account.
• ClipboardFusion compare — cloud reserved for Pro, local features on Free.
• How to use clipboard history in Windows 11 — consumer labels for history and cross-device sync.

Copy. Stack. Drop.

Transform your clipboard into an interactive edge shelf. Stack, pin, and drag assets into any app with zero friction.

Download for Windows Get from Microsoft Store

How to Install Guide · First 10 Minutes Guide · Drag & Drop Guide · Edge-Drop vs Win+V · Support