You copied a password on iPhone: who can see your clipboard, and how to stop apps pasting from it

Anything you copy, whether text, a photo or a link, is held in one place that every app can ask for. Apple does not give you a setting to clear it after a few minutes. The copy normally stays until you copy something else.

That is convenient for pasting a code into a form, and it is the reason a copied password is worth treating carefully. An app you open next, or a person using your unlocked phone, could paste it.

Since iOS 14, iPhone shows a short banner when an app reads what you copied from another app or device. It is a privacy signal, not an error.

Since iOS 16, pasting from another app usually brings up an "Allow Paste" prompt. Tap Allow Paste to continue. If an app asks without you having tapped paste, treat that as a red flag and tap Don't Allow.

Pasting into an app by long pressing a field and choosing Paste is the normal route and is what the prompt is for.

On iOS 16.1 and later, each app that has asked for the clipboard gets its own setting:

1. 1Open Settings and scroll to the app, or find it under Apps on newer versions.
2. 2Tap Paste from Other Apps. The row only appears after the app has requested the clipboard at least once.
3. 3Choose Ask (prompt each time), Deny (never) or Allow (no prompt).

Ask is a good default. Deny blocks pasting into that app from other apps, so use it for apps that do not need it. Reports differ on whether Allow removes every prompt, so do not rely on it to silence them.

Yes, if Handoff is on. Universal Clipboard, part of Apple's Continuity features, lets you copy on one Apple device and paste on another that is signed in to the same Apple Account and nearby. Useful, but it also means a password copied on the iPhone can be pasted on a Mac that someone else is using.

To switch it off on the iPhone, go to Settings → General → AirPlay & Handoff and turn Handoff off (some versions label the page Continuity). On a Mac, Handoff is under System Settings → General → AirDrop & Handoff. Turning Handoff off also stops other Handoff features, not only the shared clipboard.

• Use AutoFill. Passwords from the Passwords app or a password manager can fill a login form without sitting on the clipboard. Prefer this to copy and paste when it works.
• Do not paste secrets into chats, email drafts or notes to "carry" them across. Those copies stay where you left them. See How to store passwords safely on your phone.
• Be careful with third-party keyboards. A keyboard that asks for Full Access can read what you type, so use the standard keyboard for passwords.
• After copying something sensitive, copy a harmless word to replace it. It is a free, instant way to "clear" the clipboard.
• Do not screenshot a code or password either, because it ends up in Photos. See How to handle sensitive screenshots on iPhone.

Lockboxy is an iPhone app that keeps photos, files, notes and a Wallet of passwords, cards and 2FA codes in an encrypted vault behind its own passcode.

In the Wallet, each Copy button puts the value on the clipboard and then clears it after 30 seconds. If you copy a second field in the meantime, the clearing follows the latest copy, so the earlier timer does nothing. It is a guard against forgetting, not a guarantee: anything that pastes during those 30 seconds still gets the value, and it does not stop Universal Clipboard from sharing a copy while it is there.

The Copy button is optional. You can also tap Show to read a value and type it. See How to store 2FA backup codes safely for codes you only need once.