Is it safe to copy passwords on Windows?

What gets recorded

CopyCalm does not try to detect secrets automatically; passwords, tokens and code are kept like ordinary text. Two things keep a copy out of history: the source app is on your exclusion list, or the app tags the clipboard data with the Windows format that asks clipboard monitors to skip it, as some password managers do.

Reduce exposure

1. Exclude your password manager and other sensitive apps in Settings, or from an entry's menu with Exclude this application.
2. Delete an entry that was recorded by mistake.
3. Keep secrets you paste repeatedly in the private vault instead of ordinary history.
4. Optionally turn on automatic clearing of private copies. It is off by default.

How the private vault works

The vault's own master password protects a random data key, and entries are encrypted locally with AES-256-GCM. It locks after five minutes without vault activity, and immediately when you lock Windows or the PC sleeps. A forgotten master password cannot be recovered.

Copies from the vault ask Windows to keep them out of clipboard history and cross-device sync, and they are not written back into ordinary history.

What it cannot do

No clipboard tool can stop another program in your session from reading the current clipboard, and a master password does not protect against malware that already controls your account. Ordinary history is stored unencrypted, and moving an entry into the vault does not guarantee that earlier copies are wiped from disk.

Sources

• Microsoft Learn: Clipboard formats (cloud clipboard and history formats)

Related guides

• When Windows clipboard history (Win+V) is not enough
• How to choose a clipboard manager for Windows
• Find a screenshot by the words inside it.
• How to paste frequently used text faster on Windows