GrapheneOS merges Secure Paste to limit clipboard access

GrapheneOS has merged Secure Paste, a privacy feature first announced earlier this month that’s designed to stop apps from reading clipboard contents copied by other apps.

Why GrapheneOS built it

The platform’s developers note that the clipboard can hold sensitive information such as passwords, authentication codes, and private messages. Android already limits which apps can access the clipboard and shows a warning when an app reads content copied elsewhere, but GrapheneOS says that warning can sometimes arrive too late.

Secure Paste changes how clipboard data is handled at a more fundamental level. Rather than letting apps use the standard clipboard API to read whatever is currently stored, GrapheneOS lets users remove that access entirely and rely on a dedicated paste function instead. That function is built into Android’s usual text-selection toolbar, input methods, accessibility services, and keyboard shortcuts, so pasting into an app still works as expected without handing that app broad access to everything sitting on the clipboard.

There’s one notable exception: apps can still read clipboard content that they placed there themselves. Secure Paste is aimed specifically at blocking apps from reading clipboard data copied somewhere else, which GrapheneOS says keeps most existing functionality intact while removing what it considers the most problematic part of clipboard access.

Handling apps with custom text selection

GrapheneOS says it also accounted for apps that use their own text-selection interfaces instead of Android’s standard toolbar. Some apps, including those built with Flutter, fall into that category, so the project added a Paste button to the default keyboard as a workaround. GrapheneOS also notes that it plans to replace the AOSP keyboard with an improved one and will carry the Paste button feature over to that replacement.

Secure Paste is now merged into GrapheneOS, and the project says additional privacy-focused features are in the works, similar to its existing Contact Scopes and Storage Scopes.