3 ms·

I've heard claims that using the clipboard to transfer passwords is not very secure because a lot of different pieces of software may be able to read the clipbo

I've heard claims that using the clipboard to transfer passwords is not very secure because a lot of different pieces of software may be able to read the clipboard. If so, then a browser plugin would seem to provide better security. So this might be a little too KISS. Does anyone have comments on how much of a concern it really is to have passwords travel by the clipboard?

dspillett 6y ago
> how much of a concern it really is to have passwords travel by the clipboard? As with many security matters, it will vary depending upon your threat model. I generally feel that if you have something installed watching your clipboard for nefarious reasons then you've already got a bigger problem, and I prefer that potential security issue over having all my credentials integrated into the browser via a plugin (a clipboard sniffer will catch one or two things passing by, a hacked browser with integrated or add-in based password store might reveal everything at once). If you use the clipboard for transfer, take the precaution of always clearing it soon after use. KeePass does this by default, as do some other similar tools.