Clipboard Manager Privacy Settings: A Checklist

A clipboard manager is a diary of recent thought. The diary should be short, local unless chosen otherwise, and blind to vault copies. This checklist works for built-in Win+V and for Ditto, CopyQ, Edge-Drop, or anything else that watches the clipboard.

Windows facts that stay true regardless of the app: history is off until enabled; Win+V or Settings > System > Clipboard; 25 items; 4 MB; text / HTML / bitmap; unpinned items clear on restart; pins persist; optional account-tied text sync.

Tick every row. Unchecked items are how secrets travel.

1. Decide whether history is needed at all

If the PC only copies passwords, leave Windows history Off and do not install a manager. Should You Enable History If You Only Copy Passwords?.

If the PC is a clinical or teller workstation, start from Healthcare and Finance: Clipboard Rules of Thumb.

If the PC is a shared lab image, prefer history Off in the default profile. Student Lab PCs and Leftover Clipboard Data.

2. Turn Microsoft cloud text sync off (default)

Settings > System > Clipboard

• Clipboard history across your devices Off
• Automatically sync text that I copy not selected

How to Disable Windows Clipboard Cloud Sync. Revisit only if When Cloud Clipboard Sync Is Actually Fine applies.

3. Turn the other Microsoft pipes off unless named

• Phone Link Cross-device copy and paste Off. Phone Link Clipboard Access: Privacy Checklist.
• SwiftKey Sync clipboard history to the cloud Off. SwiftKey / Gboard Cloud Clipboard on Windows.
• Suggested actions Off on shared or regulated PCs. Turning Off Suggested Actions for Privacy.

4. Secrets: autofill, timers, ignore formats

Password managers:

• Bitwarden: Clear clipboard ≠ Never.
• 1Password: keep the 90-second removal On.
• KeePass: timer on; leave Do not store data in the Windows clipboard history and the cloud clipboard On.

Bitwarden, 1Password, and KeePass: Clipboard Best Settings.

Third-party manager:

• Honor ExcludeClipboardContentFromMonitorProcessing, CanIncludeInClipboardHistory = 0, CanUploadToCloudClipboard = 0, Clipboard Viewer Ignore. What Sensitive Formats Should Monitors Ignore?.
• Add the vault window to an application ignore list.
• After a test copy from KeePass, confirm the manager’s list did not grow.

5. Retention: a timer beats infinity

Windows already wipes unpinned items at restart and caps the list at 25. Third-party tools often keep thousands.

Set:

• A maximum item count or age.
• Automatic delete of unpinned text after a workday or less, if the product supports it. Auto-Delete Timers for Clipboard History.
• No pins (or no “favorite”) for secrets, PAN, PHI, or source contact data.

How Many Items Should a Clipboard Remember?.

6. Disk: encrypt the volume, do not invent DPAPI

Turn BitLocker on. Do not claim Win+V is “encrypted with DPAPI” unless Microsoft documents that for the build in hand — Support does not. Does DPAPI Protect Clipboard History From Other Users?.

Do not place the manager’s database inside a OneDrive or Dropbox folder. That is an upload.

7. Network: default deny

• No vendor account.
• No LAN sync unless both PCs are personal and the path is understood.
• After install, confirm the process is quiet. How to Audit Whether a Clipboard App Talks to the Network.
• Update only from the project’s own releases page.

Local Clipboard Apps That Do Not Upload.

8. People: accounts and chairs

• One Windows sign-in per person.
• Lock with Win+L.
• No shared Microsoft account for work or vault mail. Shared Microsoft Accounts and Clipboard Sync Leaks.
• End of shared session: Win+V > Clear all, delete pins, copy a throwaway word, sign out.

9. Images and files are not safer

Bitmaps ≤ 4 MB are a Windows history type. A screenshot of a chart is still the chart. Explorer files are not a Win+V type, but a third-party file-aware shelf will keep paths or copies. Treat those as records.

Do not pin ID scans.

10. Incident and offboarding

After an accidental secret copy:

1. Paste once if needed.
2. Overwrite the live clipboard.
3. Delete the card in Win+V and in the third-party list.
4. Confirm sync is still Off.

Before sale or return: How to Wipe Clipboard Data Before Selling a PC.

11. Know a manager from a clipper

A manager shows a UI and stores. A clipper silently swaps wallet addresses. Clipboard Malware vs a Clipboard Manager. Install from known publishers only.

One-page defaults

12. Suggested actions and Phone Link are part of the same review

A manager that is perfectly local still sits next to Windows features that read the last copy. Add to the install-day list:

• Suggested actions Off on shared and regulated PCs.
• Phone Link cross-device copy Off unless the phone is personal and the job is explicit.
• SwiftKey / Gboard cloud clipboards Off on work identities.

Re-run the unique-string test after those toggles change. The manager’s list should not suddenly appear on a phone.

13. Write down the intended state

A one-line note in the team wiki or a personal notebook beats memory:

Win+V on, device sync off, Ditto local only, 24-hour delete, KeePass ignored, BitLocker on.

When something feels “different after an update,” compare the PC to that sentence. Feature updates have been known to empty Win+V; they can also resurface a sync toggle. Confirm rather than assume.

14. Revisit after a Windows feature update

Unpinned Win+V items clearing after an update is normal enough to have its own article. Third-party databases usually survive. Sync toggles have reappeared as On in some upgrade stories — confirm they are still Off if that is the policy. Run the unique-string test once after each feature update.

15. Do not store the database in a backup that is more public than the PC

A Time Machine-style file history, a full-disk backup to an unencrypted USB, or a “sync this AppData folder” script can copy a plaintext clipboard database to a weaker location. If the manager’s store is under the user profile, the backup policy *is* the clipboard policy. Encrypt the backup or exclude the database. Selling the backup drive later is How to Wipe Clipboard Data Before Selling a PC all over again.

Optional: Edge-Drop

If the missing job is dragging a recent image or file into Explorer — something Win+V will not do — a local shelf such as Edge-Drop can be added after this checklist. It should still skip ignore formats, stay off cloud folders, and never become a password drawer.

Related reading

• When Cloud Clipboard Sync Is Actually Fine
• Does Windows Clipboard Sync Upload What You Copy?
• Why You Cannot Drag Old Clipboard Files Into Explorer
• How to Enable Clipboard History in Windows 11

Sources

• Using the clipboard (Microsoft Support) — official Windows history and Clear behavior.
• Clipboard formats (Microsoft Learn) — ignore formats a manager must honor.
• CopyQ security documentation — example of a vendor that documents those formats.
• Bitwarden FAQs / 1Password copy passwords / KeePass news — official vault clipboard settings.
• BitLocker overview (Microsoft Learn) — disk encryption control on this checklist.

Copy. Stack. Drop.

Transform your clipboard into an interactive edge shelf. Stack, pin, and drag assets into any app with zero friction.

Download for Windows Get from Microsoft Store

How to Install Guide · First 10 Minutes Guide · Drag & Drop Guide · Edge-Drop vs Win+V · Support