The clipboard that
guards itself.
Copywarden is a local-first clipboard manager for macOS 14+ that encrypts every entry with AES-256-GCM — keys wrapped by the Secure Enclave on supported Macs, Keychain-guarded otherwise. Your clipboard history never leaves your Mac.
Private beta — macOS 14+. No credit card, no newsletter.
Most clipboard managers are plaintext loggers of your most sensitive data.
Passwords, tokens, card numbers, PHI — copied all day, stored unencrypted, visible on every screen share, and increasingly piped straight into AI assistants. Copywarden treats your clipboard like the credential store it actually is.
Let an AI agent read your clipboard. Just not your secrets.
Shortcuts, Spotlight and App Intents pass through AgentAccessGuard — one audit-logged chokepoint that redacts everything an agent sees, and logs every access. MCP support is in development behind the same guard. The opposite of clipboard-to-cloud "AI memory."
Your context, not your credentials.
AI tools are hungry for clipboard context — and most will happily forward a live API key or password to a model provider. Copywarden lets agents use the useful parts of your clipboard while the guard redacts anything it detects as a secret from what agents see, records what was accessed (never the content), and can be killed entirely by Local-Only mode or an admin policy (MDM support rolling out).
Encrypted before it touches disk. Verifiable to the last line at beta launch.
We publish exactly what we do — and only claim what we can prove. No hollow buzzwords, no borrowed jargon — here's the real cryptography.
AES-256-GCM, per-item keys
Every clip is authenticated-encrypted with a unique nonce and salt, using HKDF-SHA256 keys derived per item from a random 256-bit master key.
Secure Enclave key wrapping
On Macs with a Secure Enclave, your master key is wrapped by non-extractable hardware. Keychain-only, device-local, unlock-gated fallback otherwise.
100% on-device
Secret detection, semantic search and OCR run locally through Apple's frameworks. No telemetry, no analytics, no ads, nothing sold.
Touch ID to unlock
Biometric user-presence is enforced at unlock, so your history is sealed to your fingerprint, not just your login.
Tamper-evident audit log
An HMAC + hash-chained log records access events (never content) and exports to JSON or CSV for your compliance workflows.
Accountable by design
Coordinated disclosure with a published security.txt and a single-shot incident policy, a published threat model, and an external security audit planned before sync ships.
Powerful for daily driving. Paranoid where it counts.
Screen-share aware
The moment Copywarden detects a recording or share, your history and any detected secrets are redacted from view. Detecting video-call shares uses the optional Screen Recording permission.
Instant recall
Cmd-Shift-V for the popup, Cmd-Shift-1–9 to paste your last nine. Live search and rich previews for images, code and links.
Secret detection
API keys, passwords, SSNs and card numbers are recognized on-device, redacted, auto-expired, and cleared after paste.
Local-first syncCOMING
Everything works with sync off. Encrypted sync — Copywarden Account, self-hosted WebDAV, and peer-to-peer — is in development, all carrying the same encrypted envelope. Local-Only mode keeps it air-gapped.
Data-handling profiles
GDPR, HIPAA and Banking profiles tighten retention and classification. Configurable controls that support your workflows — not a certification.
Encrypted iCloud syncCOMING
End-to-end encrypted sync and shared team pinboards, carrying the same encrypted envelope across all your Apple devices.
What a guarded clipboard looks like.
The only one built security-first.
| Capability | Copywarden | Maccy | Paste | Raycast |
|---|---|---|---|---|
| Clipboard history & search | ● | ● | ● | ● |
| AES-256-GCM encryption at rest | ● | — | — | — |
| On-device secret detection & redaction | ● | — | — | — |
| Screen-share detection & redaction | ● | — | — | — |
| AI-agent access guard | ● | — | — | — |
| Secure Enclave keys (capable Macs) | ● | — | — | — |
| Tamper-evident audit log | ● | — | — | — |
| Published threat model & disclosure policy | ● | — | — | — |
Compared against each app's published feature and pricing pages, July 2026. "—" means the capability isn't advertised there — not a claim about unpublished internals.
Deep dives: vs Paste · vs Maccy · vs Raycast · vs Alfred
Free to start. Fair to scale.
The encrypted core — capture, encryption, storage and search — is free forever. That's a commitment, not a teaser. Compliance profiles, AI search, sync and team controls fund the work.
Free
$0
Free forever. Encrypted history, hotkeys, secret redaction, screen-share privacy, local-only.
Pro
$2.50 /mo billed annually
$29.99/yr · or $3.99 month-to-month
Everything in Free, plus compliance profiles, on-device AI search, sync (in development), and advanced biometrics.
Enterprise
from $7 /seat/mo
SSO/SAML, RBAC, SCIM provisioning, admin dashboard, audit export, MDM deployment, BAA template.
Your clipboard deserves the same security as your passwords.
Signed, notarized universal build for Apple Silicon and Intel — in private beta ahead of public launch. Free tier included. No account required.
Get the betaRead the security architecture