Secure stuff lingering on the clipboard
I understand that 1Password clears the clipboard after a short period as long as it hasn't been dismissed from the task switcher. Is this true even when background refresh is turned off? It seems to be.
And in iOS, can any app read the clipboard at any time? Can it do so without being the active app? If I copy a password in 1Password, then go to the task switcher and slide immediately over to my target app to paste it, will other apps be able to read the clipboard along the way? Or in the background? Should I dismiss all other apps before copying and pasting a password?
I was thinking that the clipboard seems convenient but surprisingly insecure (by iOS standards, which tend to be high), but maybe iOS has mechanisms in place to help prevent abuse (?).
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Comments
-
Hello @sylocker, thanks for taking the time to write in. Your question is a great one and helps to bring to light an important fact: Anything you copy to the clipboard on iOS can be read by any other application. (There are private clipboards which are available only within a single app or a family of related apps, but those aren't what we're talking about here.)
Any running application can read the clipboard. It could do so without being the active app. If you copy a password out of 1Password and switch over to another app to paste it, it could, conceivably, be read from the clipboard along the way by another app. Dismissing all other apps before copying could mitigate the risk here.
0
