Clipboard Privacy: What to Avoid Copying to Cloud Services
Cloud clipboards are convenient, but some things should never go through them. A practical checklist.
Never send passwords, one-time codes, recovery codes, private keys, API tokens or full card numbers through any cloud clipboard. Use a password manager for credentials. For everything else, pick a service with opt-in capture, short retention, deletion controls and clear encryption claims.
Never sync
- Passwords and passphrases. Use a password manager's own autofill instead.
- One-time codes and recovery codes. They grant account access.
- Private keys and API tokens. Anyone with them can act as you.
- Payment card numbers and bank details.
- Identity documents and health information.
Fine to sync
- Links, addresses, short notes and code snippets without secrets.
- Text you would be comfortable storing in a notes app.
Settings that reduce risk
- Short retention. In MyClipCloud choose 1 day if you only need quick transfers.
- Pause when needed. Turn automatic sync off before working with sensitive text.
- Review devices. Remove any device you no longer use.
- Delete promptly. Remove items you no longer need, or clear your history.
How MyClipCloud helps (and where it can't)
MyClipCloud never captures password or payment fields and asks before syncing text that looks like a key, token, card number or short numeric code. Automatic detection can miss things, so treat it as a safety net, not a guarantee. Content is encrypted at rest on the server, but it is not end-to-end encrypted.
Want to try it? Open the online clipboard or create a free account to sync between your devices.