Skip to content

Latest commit

 

History

History
151 lines (124 loc) · 4.98 KB

clipboard-privacy.md

File metadata and controls

151 lines (124 loc) · 4.98 KB

Clipboard Privacy

Overview

CleverKeys includes privacy features for the clipboard history system, primarily automatic exclusion of clipboard entries from password managers. When enabled, CleverKeys detects when the foreground app is a password manager and skips storing clipboard content, preventing sensitive credentials from appearing in clipboard history.

Key Files

File Class/Function Purpose
src/main/kotlin/tribixbite/cleverkeys/Config.kt PASSWORD_MANAGER_PACKAGES Set of excluded package names
src/main/kotlin/tribixbite/cleverkeys/ClipboardHistoryService.kt getForegroundAppPackage() Detects current foreground app
src/main/kotlin/tribixbite/cleverkeys/ClipboardHistoryService.kt isPasswordManagerApp() Checks if package is excluded
src/main/kotlin/tribixbite/cleverkeys/ClipboardHistoryService.kt addCurrentClip() Skips storage if excluded app
src/main/kotlin/tribixbite/cleverkeys/SettingsActivity.kt Clipboard section UI toggle for feature

Architecture

Clipboard Change Event
       |
       v
+----------------------+
| ClipboardHistory     | -- System notifies of clipboard change
| Service              |
+----------------------+
       |
       v
+----------------------+
| getForegroundApp     | -- Detect which app copied
| Package()            |
+----------------------+
       |
       v
+----------------------+
| isPasswordManager    | -- Check against exclusion list
| App()                |
+----------------------+
       |
       v (if NOT excluded)
+----------------------+
| Store to clipboard   | -- Save to history database
| history              |
+----------------------+

Configuration

Key Type Default Description
clipboard_exclude_password_managers Boolean true Skip clipboard from password managers

Implementation Details

Supported Password Managers

Package names recognized (defined in Config.kt):

App Package Name
Bitwarden com.x8bit.bitwarden
1Password com.onepassword.android, com.agilebits.onepassword
LastPass com.lastpass.lpandroid
Dashlane com.dashlane
KeePass2Android keepass2android.keepass2android
KeePassDX com.kunzisoft.keepass.free, com.kunzisoft.keepass.pro
Enpass io.enpass.app
NordPass com.nordpass.android.app.password.manager
RoboForm com.siber.roboform
Keeper com.callpod.android_apps.keeper
Proton Pass proton.android.pass
SafeInCloud com.safeincloud
mSecure com.msecure
Zoho Vault com.zoho.vault
Sticky Password com.stickypassword.android

Foreground App Detection

Primary method uses UsageStatsManager (Android 5.1+):

private fun getForegroundAppPackage(): String? {
    val usageStatsManager = context.getSystemService(Context.USAGE_STATS_SERVICE)
        as UsageStatsManager
    val endTime = System.currentTimeMillis()
    val startTime = endTime - 1000 * 60  // Last minute

    val usageStats = usageStatsManager.queryUsageStats(
        UsageStatsManager.INTERVAL_DAILY, startTime, endTime
    )
    return usageStats.maxByOrNull { it.lastTimeUsed }?.packageName
}

Fallback uses ActivityManager (deprecated but still works):

private fun getForegroundAppPackageFallback(): String? {
    val activityManager = context.getSystemService(Context.ACTIVITY_SERVICE)
        as ActivityManager
    val runningTasks = activityManager.getRunningTasks(1)
    return runningTasks.firstOrNull()?.topActivity?.packageName
}

Exclusion Check

private fun isPasswordManagerApp(packageName: String?): Boolean {
    if (packageName == null) return false
    return PASSWORD_MANAGER_PACKAGES.contains(packageName)
}

private fun addCurrentClip() {
    if (config.clipboardExcludePasswordManagers) {
        val foregroundApp = getForegroundAppPackage()
        if (isPasswordManagerApp(foregroundApp)) {
            return  // Skip storage
        }
    }
    // Proceed with normal storage
    saveToHistory(clipboardManager.primaryClip)
}

Settings UI

SettingsSwitch(
    title = "Exclude Password Managers",
    description = "Don't store clipboard from Bitwarden, 1Password, LastPass, KeePass, etc.",
    checked = clipboardExcludePasswordManagers,
    onCheckedChange = {
        clipboardExcludePasswordManagers = it
        saveSetting("clipboard_exclude_password_managers", it)
    }
)

Security Considerations

  • Detection Timing: Foreground app checked at moment clipboard changes
  • False Positives: Very low - package names are specific
  • False Negatives: Apps not in list won't be excluded
  • Privacy: Detection is purely local, no data leaves device

Limitations

  • Requires UsageStats permission on some devices (optional, falls back to ActivityManager)
  • New password managers must be added to the package list manually
  • Does not analyze clipboard content - only checks source app