Clipboard history

[Higorineth Ancalimae]

I discovered that my brand new galaxy note (android 2.3.5) keeps an
history of each clipboard usage including user/password from
KeePassDroid.

Any workaround ?

[adw...@lsm-studios.com]

Same here on Samsung Galaxy S4... :(

[dickco...@gmail.com]

Use the Samsung keyboard after use and it has a clear keyboard key to the left of the space bar. Î will delete the clipboard history.

[davi...@gmail.com]

I'd like to see an option to disable copying the password to the clipboard entirely, to avoid clipboard sniffing by other apps, e.g.:

http://arstechnica.com/security/2014/11/using-a-password-manager-on-android-it-may-be-wide-open-to-sniffing-attacks/

Even a "0" option in the clipboard timeout that would disable copying it there in the first place (so the devs don't have to add an extra menu option) would be great.

Yes, I understand some users store practically un-typable passwords, and this would not be an acceptable workaround to them.  I don't, and I'd like to have the option to simply visually check my password and manually type it in, without automatically exposing that password to any app on my device.

And yes, I run anti-virus, as well as a firewall, which only allows trusted apps network access, but better to not have those passwords floating around in the clipboard anyway.

[Brian Pellin]

KeePassDroid never copies to the clipboard unless you click on the notification or one of the copy menu options. You can avoid having it use the clipboard.

I'm open to adding a setting in the future to disable those options from appearing in the UI.

--

You received this message because you are subscribed to the Google Groups "KeePassDroid" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keepassdroid-dis...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[davi...@gmail.com]

That's excellent!  I was simply mis-reading the notification as "Copied to clipboard" rather than a clickable action to actually copy the username/password to the clipboard.  Rather than disabling those options, maybe just some mention of how that function works in the clipboard timeout options menu, so you don't get more misinformed assumptions like mine?  I can't think of a succinct way to reword the notification to indicate that any better than the current wording, but that would be another option.

[peterl...@gmail.com]

Yes- use Keepass2Android -- avoids this issue by using virtual KB.  Nothing goes to the clipboard.
https://play.google.com/store/apps/details?id=keepass2android.keepass2android&hl=en