How Do Passwords End Up in Clipboard History?

Passwords end up in Windows clipboard history because, to Windows, a copied password is just text. If clipboard history is on and you select a password and press Ctrl+C, Win+V keeps it like any other copy, and automatic cloud sync can send it to your other devices. The exception is a copy that the app marks as excluded, which many password managers do with their own copy buttons.

So the same password can be skipped when you use the password manager's Copy button and saved when you copy it yourself from a web page, note or email.

The two ways a password reaches the clipboard

You copy it yourself

You reveal a password in a browser, open it in a notes app, or receive it in an email or chat, then select it and press Ctrl+C. The app places ordinary text on the clipboard with nothing to say it's secret.

With Clipboard history on, it appears in Win+V. If you pin it, it survives restarts. If Automatically sync text that I copy is on, it's uploaded to your other devices signed in to the same account. This is the most common way passwords end up in history, and it isn't a Windows bug.

The password manager copies it

When you use a password manager's own copy button, the app can add a marker that tells Windows to skip the copy. Microsoft documents three registered clipboard formats for this:

• ExcludeClipboardContentFromMonitorProcessing keeps the copy out of clipboard history and out of cloud sync.
• CanIncludeInClipboardHistory set to 0 keeps it out of history only.
• CanUploadToCloudClipboard set to 0 keeps it out of sync only.

Some apps also add an older marker called Clipboard Viewer Ignore, which many third-party clipboard managers recognise. It isn't one of the formats in Microsoft's clipboard history documentation.

Not every password manager documents whether it sets these markers. KeePass does: since version 2.41 it has an option, on by default, called Do not store data in the Windows clipboard history and the cloud clipboard, which covers its main-window copy commands such as Copy Password. For other apps, test it yourself with the steps below.

What Win+V does with a saved password

Microsoft documents that unpinned items are cleared on restart, that pinned items stay until you delete them, and that clearing leaves pinned items alone. Never pin a password. How long Windows keeps a copied password covers the timings in detail.

Clipboard timers don't clean Win+V

Many password managers can clear the clipboard after a set time, such as Bitwarden's Clear clipboard setting or 1Password's automatic removal after 90 seconds. That clears the current clipboard, the thing Ctrl+V pastes. If Win+V had already saved the password, the history item stays. How to auto-clear the clipboard after pasting a password covers both layers.

Test whether your password manager's copies reach Win+V

1. Make sure clipboard history is on and Clipboard history across your devices is off.
2. Create a dummy entry in your password manager with a made-up password.
3. Use the password manager's own Copy password button or shortcut. Don't reveal and select the text.
4. Press Windows logo key + V.
5. If the dummy password is listed, that copy path isn't excluded. Use autofill instead, and delete the item.
6. If it isn't listed, copy a word from Notepad and check that it appears, so you know history is working and the password was skipped.

Repeat the test after updating your password manager or Windows, and test the browser extension and the desktop app separately, because they're different programs.

How to keep passwords out of clipboard history

1. Use autofill. Browser extensions and KeePass-style Auto-Type fill the field without the system clipboard. Is copying a password ever a good idea? covers the exceptions.
2. Copy only with the password manager's copy button when you must copy, and only after it passes the test above.
3. Keep cloud sync off in Settings > System > Clipboard.
4. Turn on the password manager's clipboard timer so the current clipboard is cleared too.
5. Don't pin passwords, ever.
6. If you use a third-party clipboard manager, make it skip password-manager copies or add the password manager to its ignore list. How to stop clipboard managers from saving secrets shows how in each tool.
7. Turn history off on a PC used mainly for passwords, such as a shared admin workstation.

If a password is already in clipboard history

1. Press Win+V, select See more (...) next to the item, and choose Delete.
2. If several secrets landed there, select Clear all at the top of Win+V.
3. If automatic sync was on, do the same on each signed-in PC, then select Clear under Clear clipboard data in Settings > System > Clipboard, which clears unpinned items in the cloud too.
4. If anyone else could have seen the history, change the password.

Other ways credentials slip into history

• One-time codes you copy from an authenticator app are text too. They're valid only briefly, but the copied code stays in Win+V like anything else.
• Recovery codes and API keys don't expire quickly, which makes them worse to leave in history. Is an API key on the clipboard a security incident? covers keys and tokens.
• Screenshots of a password or recovery screen are saved in history as images, up to 4 MB each.
• Remote Desktop with clipboard sharing on can bring a password copied on the remote PC back to your local clipboard. Remote Desktop copy-paste not working explains how that redirection works.

FAQ

Does Windows clipboard history save passwords?

It saves any text you copy, including passwords, unless the app that copied it marked the copy to be excluded. Password managers often do this for their own copy buttons. Manual copies get no such mark.

Does Microsoft upload my copied passwords?

Only if Clipboard history across your devices is on. With automatic sync, copied text, passwords included, is sent to your other devices. With sync off, nothing is uploaded.

How do I remove a password from Win+V?

Press Win+V, select See more (...) next to the item, and choose Delete, or use Clear all. Pinned items need to be deleted individually.

Related reading

• How to Stop Clipboard Managers From Saving Secrets
• How to Auto-Clear the Clipboard After Pasting a Password
• Is It Safe to Copy and Paste Passwords?
• How Long Does Windows Keep a Copied Password?
• Is Windows Clipboard History Safe?

Sources

• Using the clipboard (Microsoft Support) — history formats, limits, pinning, restart, clearing and sync.
• Clipboard Formats (Microsoft Learn) — the three formats that keep a copy out of history and sync.
• KeePass 2.41 release notes — the option that keeps KeePass copies out of clipboard history and the cloud clipboard, on by default.
• Bitwarden Password Manager FAQs — the Clear clipboard setting.
• Copy and fill passwords (1Password Support) — automatic removal of copied information after 90 seconds.

Copy. Stack. Drop.

Transform your clipboard into an interactive edge shelf. Stack, pin, and drag assets into any app with zero friction.

Download for Windows Get from Microsoft Store

How to Install Guide · First 10 Minutes Guide · Drag & Drop Guide · Edge Drop vs Win+V · Support