Changelog

What's shipped.

The running log of what Copywarden can do. We list only capabilities that are live in the app.

Beta

v0.9.7 — one switch per job

October 10, 2026
  • Local-Only Mode is replaced by separate switches: sync (Copywarden Account, iCloud or Off), Allow Shortcuts and AI agents, and Automatically check for updates. If you used Local-Only Mode, all three are now off, and so are usage data and crash reports.
  • If you used Local-Only Mode while signed in to a Copywarden account, opening Account & Sync or Subscription now checks your account with our server; sign out to stop that.
  • Copywarden no longer pauses while a password manager or banking app is in front. It skips just the copies made in those apps, and everything you copy elsewhere is saved with no pause and no delay.
  • Excluded Applications and Pause While Using These Apps are now one list in Settings › Privacy: Don't Save Copies from These Apps. Every entry from both lists is still there, and each has its own switch, so you can turn one off without removing it. If you had turned off Pause capture in sensitive apps, the entries from that list start switched off.
  • Save clipboard history, in Settings › General, replaces Monitor the clipboard and the menu's Pause Monitoring. The menu's Don't Save New Copies › Until I Turn Saving Back On sets the same switch, and the menu-bar icon shows whenever saving is off, wherever you turned it off.
  • Settings is rebuilt from Apple's own components (the sidebar and its search field, Back and Forward in the toolbar, and the system's grouped form in every pane), so it follows the look of the macOS you run. The Enterprise pane appears only on a Mac with an admin policy or for an Enterprise account, and the Show Enterprise settings switch is gone.
  • With a long history, work that used to hold up the app now runs in the background: saving and checking each copy, reading the text in a copied image, checking popup rows for secrets as you type a search, and sorting your history by type at the first ⌘⇧V after launch. A row still being checked shows a placeholder until the check finishes. Loading your history at launch now builds each clip's preview and reads each stored clip in the background too, and the popup no longer animates its list while it is closed.
  • The hourly cleanup that applies your retention settings keeps running after you paste or copy a clip from history; before, that stopped it until the next launch. It now checks for expired secrets in the background, and in HIPAA and Banking modes its extra pass updates your history in one step instead of one clip at a time.
  • A copy made right after pasting from history is no longer lost, a plain-text paste from the popup is no longer recorded as a fresh copy, a copy still being saved when you clear history no longer comes back, and a clip's source app is the app you copied it in, even if you switched apps straight away. A copied photo is stored as the JPEG it is, without the far larger TIFF macOS makes from it.
  • The popup keeps up with your history: clips removed by Clear History, on another Mac or in Settings no longer stay listed until your next copy, clip ages count from when you open the popup rather than from when the app launched, and an edited snippet's sensitivity badge follows its new text.
  • A long category name no longer pushes the popup's header off the panel when the category row collapses into a menu: the menu shows a shortened name, and choosing it still filters by the full name.
  • Detected secrets stay masked in more places: the paste stack's banner, a card number written with its CVV or expiry beside it, a clip another Mac flagged as a secret, and a password copied in a browser just before you switch apps, which used to be saved unmasked under the next app's name. Edit as Snippet is offered on a secret only after you reveal it, and the paste stack's shortcut won't type a secret; it tells you instead.
  • Share now refuses a detected secret when you choose it, including a clip Copywarden flagged when you copied it, and the popup says secrets can't be shared.
  • Transforming a detected secret from the popup or Quick Actions, such as upper-casing or Base64-encoding it, and pasting one as plain text, now marks the result concealed and clears it on the same timer as any other secret, even when the scan can't recognise the result as one.
  • A password copied in a browser, or a snippet you marked sensitive, now keeps its mask however many other secrets are flagged in one run; before, once 4,096 were flagged, the oldest lost its mask until the next launch.
  • In Shortcuts, Search Clipboard no longer matches text it shows masked, Paste Last Clip checks every part of a clip for a secret before it pastes, images and PDFs included, and Show Clipboard History follows the Allow Shortcuts and AI agents switch. Every request from a Shortcut or an agent now goes in the audit log, refusals included.
  • If you sync with a Copywarden Account, sync now resumes at launch on its own: the account key is kept in this Mac's keychain, sealed by the Secure Enclave on Macs that have one. Unlock once after this update; while sync waits, the menu-bar icon shows a badge and its menu offers Unlock to Resume Sync…, and Sign Out, Delete Account and your list of devices work without unlocking.
  • A Copywarden Account created in this version with GitHub or Google sign-in and no master password keeps a copy of its account key in your iCloud Keychain by default. With iCloud Keychain on in System Settings, another Mac signed in to your Apple Account, or a reinstall, opens your account without your Emergency Kit.
  • Apple end-to-end encrypts iCloud Keychain and the copy never reaches our servers; copywarden.com/threat-model says who else can read it and what the risks are. Settings › Account & Sync says when your account isn't backed up, as it does for an account with a master password or one created before this version.
  • Copywarden tells you once the first time a Mac saves the copy, and Settings › Account & Sync has a switch for it, Back up your account key to iCloud Keychain. Turning it off, adding a master password or deleting your account deletes the copy; signing out and Clear all stored data leave it in place.
  • Your Emergency Kit still opens your account on any Mac. Copywarden never holds it, so if no Mac or iCloud Keychain of yours has the key and you have neither the kit nor a master password, nobody can decrypt the clips you synced through your account, including us.
  • With Copywarden Account sync, Clear History, Clear all stored data and clips that expire under your retention settings are now deleted on your other Macs too when they next sync, and the confirmations say so. With iCloud sync, your other Macs keep their copies.
  • With sync on and your history at Maximum items, an older clip from another Mac that has no room in your history is no longer downloaded, opened and thrown away over and over, which could stall the app.
  • The Emergency Kit and the sign-in sheet now ask macOS to leave them out of screen captures, as the Settings window around them already did, and printing the kit no longer shows a preview. Settings also says a new kit can be saved or printed anywhere, iCloud Drive included, and the save panel reminds you a kit is only as private as the place you keep it.
  • An update found while Copywarden is running now shows as a badge on the menu-bar icon, with the update at the top of its right-click menu, instead of opening behind your other apps. Report a Problem… opens the same window as Send Feedback…, set up for a problem.
  • Crash reports reach our error-reporting service through our own relay, which doesn't pass on your network address, and a report you chose to send that couldn't go out is tried again at later launches. Copywarden registers with Apple's push service only when iCloud is your sync choice.
Beta

v0.9.6 — say something back

September 19, 2026
  • Send Feedback… — a box in the menu bar and in Settings › About that sends a message straight to us, with your email only if you add one. A person reads every message.
  • Usage data and crash reports can now be turned on in Settings › Privacy. Both are off until you turn them on, and neither carries anything you copied.
  • After you sign in by typing your password, the app offers Touch ID once instead of leaving you to find the setting.
  • The history popup narrows further before anything clips: the category row yields instead of cutting off, and the minimum width dropped by 140 points.
  • Right-clicking the menu bar icon opens the panel on the first click, instead of spending that click activating the app.
  • One support address, support@copywarden.com, and a contact form on copywarden.com/support for when you would rather not open a mail app.
Beta

v0.9.5 — the open beta build

September 17, 2026
  • Declining a keychain prompt no longer creates a new encryption key over the existing one, which could leave your stored history unreadable.
  • A save in the first moments after launch, before your history has finished loading, no longer drops your older clips from the history index.
  • Clear all stored data now removes the history index along with the clips.
  • Clear History in the menu bar keeps your pinned items and snippets, and asks before it clears. To remove everything, those included, use Settings › History & Storage › Clear all stored data.
  • The Wipe History Now… menu item and its keyboard shortcut are gone. If you had set that shortcut, it no longer does anything; Clear all stored data in Settings removes everything, after asking.
  • Turning on GDPR, HIPAA or Banking mode first tells you how many pinned or written clips it will delete, and lets you back out.
  • If macOS is blocking Copywarden from reading the clipboard, the popup now says so and opens the right pane in System Settings.
  • In the ⌘⇧V popup, ⌘⌫ deletes the highlighted clip, the filter control is always there, a count appears when you select several rows, and Tab moves between the controls.
  • Sort the popup by Most Used, which counts pastes as well as re-copies; your sort is remembered after a relaunch, and a search ranks every match rather than only the rows on screen.
  • Save a copied image to a file, or share a clip to another app, straight from the popup.
  • Copied files show a real thumbnail made on your Mac, and copied links show the page title your browser supplied, without fetching the page.
  • Add a private note to a clip. It is encrypted along with the clip.
  • A file you copied and then moved or renamed still pastes from its new location.
  • Retention rules by app and by content type — for example, keep what you copy from Terminal for only an hour.
  • A revealed secret hides itself again after a timeout, and clips a retention rule removes disappear from an open popup straight away instead of staying pasteable.
  • Sharing a clip no longer writes its decrypted contents to a temporary file, and the app no longer requests a copied link to build a preview.
  • On a display shorter than 800 points, the Settings window fits the screen and every pane scrolls, so the bottom rows are reachable.
  • A new mark — the hasp — on the app icon, in the menu bar and in onboarding.
Beta

v0.9.1 — fixes a tester hits in the first five minutes

September 2, 2026
  • The ⌘⇧V popup no longer crashes when the detail pane opens at the default width on a fresh install.
  • Opening or previewing a pinned clip that is older than your retention window no longer deletes it.
  • Retention set to unlimited stays unlimited: the Settings field no longer rewrites 0 into a one-day window, and it reads "0 = unlimited" like the rows beside it.
  • Onboarding's Security screen fits its window, and the headline stays in one place from screen to screen.
  • The menu-bar glyph is a single padlock drawn on the pixel grid, so it reads at menu-bar size.
  • The detail pane trusts the file type the source app declared before guessing from the text, so a copied file whose text looks like a link shows as a file.
  • Settings cards in light mode read as cards: the fill and border were retuned so they separate from the window the way the dark ones already did.
  • Destructive buttons in Settings — Reset to Defaults, Delete Selected, Sign Out, and Revoke on a device — are no longer drawn in the accent colour.
  • The popup's resize edge shows the resize cursor on hover, even while another app is frontmost.
  • On macOS 26 the detail column and the ⌘K sheet no longer stack glass on glass: the popup panel is the one Liquid Glass surface, and what is drawn inside it uses a standard material.
Beta

v0.9.0 — the popup grows up

August 31, 2026
  • The ⌘⇧V popup is resizable in both directions and remembers its size and position; at rest it shows the nine rows the footer promises. Rows are grouped, sortable, and — on macOS 26 — drawn in Liquid Glass, with Reduce Transparency respected.
  • Name a clip. Save a search as a smart category, or build one from rules. Filter by date with the date: facet. Categories show on rows, filter the list, and are yours to create, rename and delete.
  • Hover an image row to enlarge it; open a link you copied straight from the popup; Reveal and Copy are reachable from the keyboard. The detail pane gained an Information section and no longer shows what the rows hide.
  • Security fixes: the preview cache no longer writes decrypted content under ~/Library/Caches; clearing history is reachable from the menu bar; the walk-away re-lock fires on the default path; secrets found by heuristics stay masked across a relaunch.
  • Screen-capture detection matches app names exactly — an "OBS" substring match had been redacting every Obsidian user — and a video player is no longer mistaken for an active recording.
  • Auto-paste works when either the PostEvent or the Accessibility permission is granted, instead of requiring Accessibility alone. URL Encode encodes a parameter value. ⌘W no longer throws away the snippet you were composing.
  • Settings search lands you on the section, not the pane; retention has one home instead of four; every pane shares one control column. New app icon and menu-bar glyph, and jade as the default accent.
  • Pro gating is honest: five Pro features that declared a gate nothing enforced are now enforced, and locked content is no longer legible through the upgrade overlay.
Beta

v0.8.6 — durability, capture health, and a correct floor

August 14, 2026
  • Requires macOS 14 (Sonoma) or later. The 0.7.0 bundle advertised macOS 13 while needing 14; the requirement is now declared where Gatekeeper and Sparkle read it.
  • ⌘K action panel in the popup — the keyboard half of every row action. Text transforms on any item, multi-select delete, and a paste stack that tells you what it did.
  • Clipboard rules: strip tracking parameters from copied links, trim and normalise text before it is stored.
  • Capture health is visible: the menu-bar badge shows a stalled or degraded capture, the popup says so where you look, and the three settings that were silently dropping copies are exposed.
  • History durability: a relaunch no longer trims history to the 50 most recent clips; the 5,000-clip cap is actually reachable; a corrupt index is quarantined instead of overwritten; a failed write no longer loses the clip.
  • Screen-share redaction's second detection layer is wired — it had never run. Right-click actions open in an in-window panel, and the rotated audit-file inventory is sealed in the Keychain.
  • Onboarding offers Launch at Login; the welcome tour can be dismissed; first launch no longer claims ⌘⇧R system-wide; a second instance can no longer start and corrupt shared state.
  • Storage: see what is using disk, and decide what to do about it.
  • Settings › About › Export Diagnostics… builds a short report on your Mac for a support request: app and macOS versions, the app's capture, storage and sync health, and counts of the crashes and hangs macOS has reported to it. Copy or save it; it never includes what you copied, and nothing is sent unless you send it.
Beta

v0.7.0 — first notarized release, live update feed

July 30, 2026
  • AES-256-GCM encryption with per-item HKDF-SHA256 keys; on capable Macs the master key is wrapped by a non-extractable Secure Enclave key (Keychain-only, device-local fallback otherwise).
  • AgentAccessGuard — a single audit-logged chokepoint behind Shortcuts, Spotlight and App Intents that redacts everything an agent sees and logs every access.
  • On-device secret detection and redaction, clipboard auto-clear after a secret paste, and concealed paste-back that keeps secrets off Universal Clipboard best-effort (community convention).
  • History and detected secrets redacted while a screen recording or share is detected (video-call share detection uses the optional Screen Recording permission).
  • Live keyword search over decrypted content, free for everyone; on-device semantic relevance on Pro. Image text is read on-device via Apple's Vision framework — no cloud, no telemetry.
  • Local-Only mode, which turned off both cloud backends (replaced in 0.9.7 by separate switches). Optional end-to-end encrypted sync (beta, off by default) — sealed on-device before upload; we can't read it.
  • Tamper-evident, HMAC-chained audit log, exportable to JSON or CSV.