Security Updated Oct 21, 2026 · 6 min read

Clipboard Leaking Passwords? Stop It with AutoFill and the Passwords App

Every app you open after copying a password can ask to read it, and Universal Clipboard can hand it to your Mac. Here is how to stop copying passwords, and what to do when you must.

Cracked clipboard pipe leaking masked password characters, a green wrench beside the burst joint

To stop your clipboard leaking passwords, stop copying them: turn on AutoFill in Settings > General > AutoFill & Passwords, and iPhone fills saved passwords from the Passwords app or your password manager straight into the login field, without putting them on the clipboard. When a copy cannot be avoided, paste it at once, then copy something harmless over it or let your password manager clear it on a timer.

Why a copied password is exposed

A password you copy stays on the clipboard until something replaces it, unless the app you copied it from set it to expire. While it sits there, four things can reach it:

  • The next app you open. Since iOS 16 an app has to ask before it reads something copied in another app, but one you have set to Allow under Paste from Other Apps reads it without asking.
  • Your other devices. With Handoff on, Universal Clipboard offers your latest copy to your Mac and iPad nearby on the same Apple Account.
  • A clipboard manager. If you save the copy to one, it stays in that app's history until you delete it.
  • Anyone looking at your screen. On iOS 27, Apple's keyboard previews your latest copy above the keys the next time a text field opens.

None of this needs a hacker. It is ordinary clipboard behavior meeting the one kind of text you never want shared, and the four ways the iPhone clipboard can expose a copy covers each one in depth.

Set up AutoFill and the Passwords app

Since iOS 18, Apple's own password manager is the Passwords app, which holds your passwords, passkeys and verification codes and keeps them up to date across your devices with iCloud Keychain. AutoFill is the part that keeps them off the clipboard:

  1. Open Settings > General > AutoFill & Passwords and turn on AutoFill Passwords and Passkeys.
  2. Choose where passwords come from: the Passwords app, a password manager such as 1Password or Bitwarden, or both. iPhone can fill from up to three password apps.
  3. On a sign-in screen, tap the account name field, then tap the account suggested near the top of the keyboard. The password is filled in, and nothing is copied.

Verification codes stored in the Passwords app fill the same way: when a site asks for one, tap the suggestion above the keyboard. If you are still deciding where to keep your passwords, iCloud Keychain, 1Password and Bitwarden compared sets out the differences.

When you have to copy a password

Some apps and sites do not work with AutoFill, and then copying is the only alternative to typing. Keep the window short:

  1. Copy the password right before you need it, and paste it straight away.
  2. Do not open other apps in between.
  3. Once it is pasted, copy something harmless over it; how to clear the clipboard on iPhone includes a one-tap shortcut for this.
  4. Turn on your password manager's clipboard timer, so a password you forget about still disappears.
Password appSetting on iPhoneWhat it does
1PasswordSettings > Security > Clear ClipboardRemoves copied passwords after 90 seconds; on by default
BitwardenSettings > Other > Clear clipboardClears copied values after the time you choose; Never turns it off
Apple PasswordsNo timer documentedCopy over the clipboard yourself after pasting

1Password also has a setting, Use Universal Clipboard to copy to other devices, that decides whether its copies reach your Mac and iPad at all. For a password copied from anywhere else, turning off Handoff in Settings > General > AirPlay & Continuity keeps it on the phone.

Clipboard managers and passwords

A clipboard manager stores what you give it, so it should never become a second password vault; clipboard manager vs password manager explains why you want both, each doing its own job. On iPhone, Clipboard AI saves a copy only when you open the app, switch to its keyboard, share to it or run its Save Clip To ClipboardAI shortcut, so a password you paste and copy over before doing any of those never reaches its history. If one does, the keyboard shows it as a padlock until you tap it, and deleting the clip erases it at once, with no trash and no undo. Typing is covered too: iOS always swaps in Apple's keyboard for password fields, so no third-party keyboard sees what you type there.

On a Mac, where Clipboard AI records copies automatically, it skips anything a password manager marks as concealed or transient, the markers 1Password and KeePassXC set on copied passwords. For a password app that does not set them, add it under Ignored Apps in Clipboard AI's settings, and nothing copied while that app is in front is saved. The privacy and data guide lists the rest of its controls, and the clipboard privacy guides cover the wider picture.

On either device, the shortest path is still the first one: let AutoFill do it.

Frequently Asked Questions

Does iPhone ever copy a password for you?

Yes, in one place. When a sign-up form asks you to confirm a new strong password, tapping Other Options, then Copy Strong Password puts it on the clipboard so you can paste it into the second field. Copy something harmless over it once the form is done.

Do passkeys keep passwords off the clipboard?

Yes. A passkey lets you sign in with Face ID or Touch ID instead of a password, so there is nothing to copy, paste or type, and nothing for another app to read. The Passwords app keeps passkeys alongside your passwords.

Can a Mac keep a copied password in its clipboard history?

Yes, it can. macOS 26 Tahoe added a clipboard history to Spotlight that keeps copies for 8 hours by default, and since macOS 26.1 you can choose 30 minutes, 8 hours or 7 days. If a password lands there, Clear Clipboard History in System Settings > Spotlight empties it.

Are verification codes safe to copy?

Yes, though you rarely need to. Since iOS 12, codes that arrive in Messages appear above the keyboard for one tap, and turning on Delete After Use under Verification Codes in Settings > General > AutoFill & Passwords deletes each code after AutoFill enters it.

Sources

Never lose a copy again

Try ClipboardAI free - the smart clipboard manager for iPhone, iPad, and Mac.

Download free
S

Sarah

Writer at ClipboardAI

Sarah writes about clipboard management, iPhone productivity, and getting more out of the small moments of your day.

The Field Notes

Get the next one in your inbox.

One short letter, one Friday a month.

Unsubscribe in one click. We never sell or share addresses.