v0.9.7 signed & notarized · auto-updating

The clipboard that
guards itself.

Copywarden is a local-first clipboard manager for macOS that encrypts every copy with AES-256-GCM before it touches disk. On-device. Usage data is opt-in.

macOS 14+ · Universal · ~23 MB
Free public beta. No account, no card. Usage data is opt-in.

Clipboard History 🔒 AES-256
⌘1
sk_live_ ································ a9Rk
just now · from Terminal
API Key
⌘2
https://developer.apple.com/documentation/cryptokit
just now · from Safari
⌘3
let sealed = try AES.GCM.seal(data, using: key)
2 min. ago · from Xcode
Swift
⌘4
Meet at 12:30 — bring the demo Mac
9 min. ago · from Messages
⌘5
Screenshot — release dashboard.png
14 min. ago · from Preview
↑↓ navigate⌘1–9 quick paste⏎ paste⎋ close→ preview⌘P pin / unpin

A live simulation of the real popup — click it and use your keyboard.

The problem

Most clipboard managers are plaintext loggers of your most sensitive data.

Passwords, tokens, card numbers — copied all day, stored unencrypted, readable by any app. Copywarden treats your clipboard like the credential store it actually is.

In the app

Press ⌘⇧V anywhere. Your history appears without stealing focus.

Live keyword search across your decrypted history, rich previews, pins with ⌥⌘1–9 paste slots — plus on-device semantic search on Pro.

Copywarden history popup on macOS showing encrypted clipboard items with live search
⌘⇧V — your history appears without stealing focus. Live search, rich previews.
Copywarden history popup with a detected API key shown redacted
A detected API key, concealed the moment it lands — on every surface.
Copywarden Security Settings pane showing hardware key wrapping and compliance controls
Hardware key wrapping on supported Macs. Compliance modes when you need them.
Copywarden Account and Sync settings pane showing observable sync status
Optional encrypted sync — sealed on-device before upload. We can't read it.
Browser-extension passwords

Copy a password from your password manager's browser extension. Copywarden catches it.

Browser extensions can't mark a copy as concealed, so the signal a clipboard manager normally relies on simply isn't there. Copywarden detects the copy across nine browsers and conceals it automatically.

github.com/login
Password manager extension
github.com · ed@example.com
Copywarden 🔒 AES-256
https://github.com/settings/keys
1 min. ago · from Safari
When it matters

Sharing your screen? Your history already knows.

The moment a recording or share is detected, your history and any detected secrets are hidden from view. Detect-and-redact — automatic, reversible, honest about its limits.

Copywarden ENCRYPTED
🔗
developer.apple.com/documentation
Link · 14m agoHidden while screen sharing
LINK
Ship the release notes by Friday.
Text · 21m agoHidden while screen sharing
TEXT
not shared
AI-safe by design

Let AI read your clipboard. Just not your secrets.

Shortcuts, Spotlight and App Intents pass through AgentAccessGuard — one audit-logged chokepoint that redacts everything an agent sees, and logs every access.

Shortcuts · Copywarden App Intent
shortcut> Search Clipboard — “release notes”
→ AgentAccessGuard evaluating 4 items…
✓ developer.apple.com/documentation
✓ "Ship the release notes by Friday."
⊘ Stripe secret key → masked
⊘ Password → masked
AgentAccessGuard · secrets_redacted=2 · surface=app_intent · tool=searchClipboard · items_served=4 · content never logged
And on your side of the guard

Organized by on-device intelligence.

Clips sort themselves into Prompts, Code, Links, Addresses and more — inference runs on your Mac, and clips containing a detected secret are never sent to the model. Secrets don't get organized. They get protected.

Agent-visible results are always redacted Tamper-evident audit trail One switch turns off all agent access
Security architecture

Encrypted before it touches disk. Verifiable to the last line.

We publish exactly what we do — and only claim what we can prove.

AES-256-GCM, per-item keys

Every clip is authenticated-encrypted with a unique key derived per item (HKDF-SHA256) from a random 256-bit master key.

Secure Enclave key wrapping

The master key is wrapped by non-extractable hardware on supported Macs — Keychain-guarded, device-only otherwise.

No master password at every launch

A signed-in Copywarden Account stays unlocked across restarts, so sync carries on without its master password. Opening your clipboard asks for nothing unless HIPAA or Banking mode is on, which adds Touch ID after inactivity. Every clip is encrypted either way.

Tamper-evident audit log

An HMAC + hash-chained log records access events (never content) and exports to JSON or CSV.

Read the full security architecture →  ·  Built security-first, and compared honestly — vs Paste, vs Maccy, vs Raycast, vs Alfred.

Pricing

Free forever for the full security feature set.

Everything is free during the public beta — no card, no trial clock. Pro will be $2.50/mo billed annually when billing opens at launch, published now so there are no surprises.

Free

$0 forever

The complete security set: encrypted history, secret concealment, screen-share redaction, hotkeys, and off switches for sync and agents. No account required.

Download free

Pro

$2.50 /mo billed annually · at launch

Included free during the beta

Data-handling profiles, on-device AI search, end-to-end encrypted sync (beta, off by default).

See launch pricing
Get Copywarden

Your clipboard deserves the same security as your passwords.

Signed, notarized universal build for Apple Silicon and Intel. Free tier included, no account required.

Download for MacAll install options
macOS 14+ · Universal · ~23 MB · Direct download with Sparkle auto-updates · Homebrew cask and Mac App Store: after the beta.