v0.9.1 signed & notarized · auto-updating

The clipboard that
guards itself.

Copywarden is a local-first clipboard manager for macOS that encrypts every copy with AES-256-GCM before it touches disk. On-device. No telemetry.

Public beta opens in days — macOS 14+. The list gets launch pricing first.

Clipboard History 🔒 AES-256
1
sk_live_ ································ a9Rk
just now · from Terminal
API Key
2
https://developer.apple.com/documentation/cryptokit
just now · from Safari
3
let sealed = try AES.GCM.seal(data, using: key)
2 min. ago · from Xcode
Swift
4
Meet at 12:30 — bring the demo Mac
9 min. ago · from Messages
5
Screenshot — release dashboard.png
14 min. ago · from Preview
↑↓ navigate1–9 quick select paste close preview⌘P pin / unpin

A live simulation of the real popup — click it and use your keyboard.

The problem

Most clipboard managers are plaintext loggers of your most sensitive data.

Passwords, tokens, card numbers — copied all day, stored unencrypted, readable by any app. Copywarden treats your clipboard like the credential store it actually is.

In the app

Press ⌘⇧V anywhere. Your history appears without stealing focus.

Live keyword search across your decrypted history, rich previews, pins with ⌥⌘1–9 paste slots — plus on-device semantic search on Pro.

Copywarden history popup on macOS showing encrypted clipboard items with live search
⌘⇧V — your history appears without stealing focus. Live search, rich previews.
Copywarden history popup with a detected API key shown redacted
A detected API key, concealed the moment it lands — on every surface.
Copywarden Security Settings pane showing hardware key wrapping and compliance controls
Touch ID can gate the history itself. Hardware key wrapping on supported Macs.
Copywarden Account and Sync settings pane showing observable sync status
Optional encrypted sync — sealed on-device before upload. We never hold the key.
Browser-extension passwords

Copy a password from your password manager's browser extension. Copywarden catches it.

Browser extensions can't mark a copy as concealed, so the signal a clipboard manager normally relies on simply isn't there. Copywarden detects the copy across nine browsers and conceals it automatically.

github.com/login
Password manager extension
github.com · ed@example.com
Copywarden 🔒 AES-256
https://github.com/settings/keys
1 min. ago · from Safari
When it matters

Sharing your screen? Your history already knows.

The moment a recording or share is detected, your history and any detected secrets are hidden from view. Detect-and-redact — automatic, reversible, honest about its limits.

Copywarden ENCRYPTED
🔗
developer.apple.com/documentation
Link · 14m agoHidden while screen sharing
LINK
Ship the release notes by Friday.
Text · 21m agoHidden while screen sharing
TEXT
not shared
AI-safe by design

Let AI read your clipboard. Just not your secrets.

Shortcuts, Spotlight and App Intents pass through AgentAccessGuard — one audit-logged chokepoint that redacts everything an agent sees, and logs every access.

Shortcuts · Copywarden App Intent
shortcut> Search Clipboard — “release notes”
→ AgentAccessGuard evaluating 4 items…
developer.apple.com/documentation
"Ship the release notes by Friday."
Stripe secret key → masked
Password → masked
AgentAccessGuard · secrets_redacted=2 · surface=app_intent · tool=searchClipboard · items_served=4 · content never logged
And on your side of the guard

Organized by on-device intelligence.

Clips sort themselves into Prompts, Code, Links, Addresses and more — inference runs on your Mac, and clips containing a detected secret are never sent to the model. Secrets don't get organized. They get protected.

Agent-visible results are always redacted Tamper-evident audit trail Local-Only blocks all agent access
Security architecture

Encrypted before it touches disk. Verifiable to the last line.

We publish exactly what we do — and only claim what we can prove.

AES-256-GCM, per-item keys

Every clip is authenticated-encrypted with a unique key derived per item (HKDF-SHA256) from a random 256-bit master key.

Secure Enclave key wrapping

The master key is wrapped by non-extractable hardware on supported Macs — Keychain-guarded, device-only otherwise.

Touch ID, if you want it

Two optional toggles — both off by default — can ask for Touch ID before an item is revealed and before the history popup opens. They gate the app's interface, not your data: every clip is encrypted either way.

Tamper-evident audit log

An HMAC + hash-chained log records access events (never content) and exports to JSON or CSV.

Read the full security architecture →  ·  Built security-first, and compared honestly — vs Paste, vs Maccy, vs Raycast, vs Alfred.

Pricing

Free forever for the full security feature set.

Everything is free during the public beta — no card, no trial clock. Pro will be $29.99/yr when billing opens at launch, published now so there are no surprises.

Free

$0 forever

The complete security set: encrypted history, secret concealment, screen-share redaction, hotkeys, Local-Only mode. No account required.

Join the launch list

Pro

$2.50 /mo billed annually · at launch

Included free during the beta

Data-handling profiles, on-device AI search, encrypted iCloud sync (in development), advanced biometrics.

See launch pricing
Get Copywarden

Your clipboard deserves the same security as your passwords.

Signed, notarized universal build for Apple Silicon and Intel. Free tier included, no account required.

Get launch pricing firstAll install options
$ brew install --cask copywardenat launch
macOS 14+ · Direct download with Sparkle auto-updates · Coming to the Mac App Store & Homebrew