Passwords pasted to clipboard?  [Solved]

For questions regarding system and application security
Message
Author
LinnitXa
Posts: 80
Joined: Tue Mar 24, 2020 1:07 pm

Re: Passwords pasted to clipboard?

#11 Post by LinnitXa »

I've added that to Keyboard as you've shown, but ctrl+delete still doesnt clear the clipb.

Charlie Brown

Re: Passwords pasted to clipboard?

#12 Post by Charlie Brown »

Also try

Code: Select all

xsel -c
or

Code: Select all

xsel -pc
(Which are actually the same, as "primary" is the default one)

in case you're using the primary. (middle button when pasting etc..)

User avatar
fehlix
Developer
Posts: 12767
Joined: Wed Apr 11, 2018 5:09 pm

Re: Passwords pasted to clipboard?

#13 Post by fehlix »

LinnitXa wrote: Thu Feb 01, 2024 4:25 pm MX23, Desktop pc

If it's true that apps have access to the clipboard, is it not unsafe to use a password manager which pastes the passwords to the clipboard first?
The "Clipboard Manger" Clipman in Xcfe does handle both "buffers" the clipboard copy/paste buffer and the "selection" buffer.
The later is populated every time you select with mouse (or keyboard) text.
When Clipman is running it copies (and remembers) anything what is copied to the clipboard.
Trying to clean/clear the clipboard buffer won't help, b/c it's already copied to Clipman.

The default setting in MX-23.2 Xfce is to ignore the "Mouse" selection buffer and put those not into the history.
So in order to not get sensible text like password copied to Clipman and remembered,
would be not to use copy/paste but highlight/select and insert-"paste" from "selection" buffer using middle mouse.
E.g. in KeePassXC one can click view password and with the shown password select e.g with Ctrl+a or highlight manually.
The next "selection" would replace the selection buffer.

Charlie Brown

Re: Passwords pasted to clipboard?

#14 Post by Charlie Brown »

That's it (and my way) :)

txm0523
Posts: 159
Joined: Sat Oct 06, 2018 5:34 pm

Re: Passwords pasted to clipboard?

#15 Post by txm0523 »

As far as clearing contents from the clipboard, I use the KDE app Sweeper. I copied that app to my desktop. Whenever I need to, I just double click on that icon, I then click Clean Up, Click OK and it's cleaned. Simple. You can find the Sweeper app under Utilities in the KDE menu. Also of note, whenever I copy anything and paste it somewhere else, like documents and spreadsheet items, KDE puts an icon in your system tray. You can click on that and clear / delete each thing listed on the clipboard. Hope that helps.

You might check and see if you can install that app through Synaptic Package Manager if you're running XFCE desktop.

User avatar
CharlesV
Global Moderator
Posts: 7640
Joined: Sun Jul 07, 2019 5:11 pm

Re: Passwords pasted to clipboard?

#16 Post by CharlesV »

txm0523 wrote: Fri Feb 16, 2024 3:22 pm As far as clearing contents from the clipboard, I use the KDE app Sweeper. I copied that app to my desktop. Whenever I need to, I just double click on that icon, I then click Clean Up, Click OK and it's cleaned. Simple. You can find the Sweeper app under Utilities in the KDE menu. Also of note, whenever I copy anything and paste it somewhere else, like documents and spreadsheet items, KDE puts an icon in your system tray. You can click on that and clear / delete each thing listed on the clipboard. Hope that helps.

You might check and see if you can install that app through Synaptic Package Manager if you're running XFCE desktop.
You dont need this if your using keepassxc as it clears any entry it makes to the clipboard. And, I would not recommend adding this utility to an xfce install. As I recall it adds a lot of stuff.
*QSI = Quick System Info from menu (Copy for Forum)
*MXPI = MX Package Installer
*Please check the solved checkbox on the post that solved it.
*Linux -This is the way!

txm0523
Posts: 159
Joined: Sat Oct 06, 2018 5:34 pm

Re: Passwords pasted to clipboard?

#17 Post by txm0523 »

@CharlesV Good info to know. Yes, those gosh darn dependencies.
Thanks.

MXRobo
Posts: 1835
Joined: Thu Nov 14, 2019 12:09 pm

Re: Passwords pasted to clipboard?

#18 Post by MXRobo »

fehlix wrote: Fri Feb 16, 2024 1:41 pm
LinnitXa wrote: Thu Feb 01, 2024 4:25 pm MX23, Desktop pc

If it's true that apps have access to the clipboard, is it not unsafe to use a password manager which pastes the passwords to the clipboard first?
The "Clipboard Manger" Clipman in Xcfe does handle both "buffers" the clipboard copy/paste buffer and the "selection" buffer.
The later is populated every time you select with mouse (or keyboard) text.
When Clipman is running it copies (and remembers) anything what is copied to the clipboard.
Trying to clean/clear the clipboard buffer won't help, b/c it's already copied to Clipman.

The default setting in MX-23.2 Xfce is to ignore the "Mouse" selection buffer and put those not into the history.
So in order to not get sensible text like password copied to Clipman and remembered,
would be not to use copy/paste but highlight/select and insert-"paste" from "selection" buffer using middle mouse.
E.g. in KeePassXC one can click view password and with the shown password select e.g with Ctrl+a or highlight manually.
The next "selection" would replace the selection buffer.
Can this be done in MX-21.3 Xfce?
I'm having difficulty doing this as I cannot find an insert - paste selection, but I also do not have a middle mouse button on my touchpad or my mouse.

=======================================================
And I just tried KeePassXC's Auto-type for the first time today - nice.
I may not want the browser extension - I didn't originally anyway.

Cheers!

Charlie Brown

Re: Passwords pasted to clipboard?

#19 Post by Charlie Brown »

I don't even use a mouse since years , just tick the option to behave as middle mouse when both buttons are pressed, in mouse&t.p. settings.(Or it can already be so by default as I can't see that option now)

Shortly, just highlight something (anything, anywhere) then press both buttons on somewhere (say in the address bar or terminal or in a text file to test).

MXRobo
Posts: 1835
Joined: Thu Nov 14, 2019 12:09 pm

Re: Passwords pasted to clipboard?

#20 Post by MXRobo »

I don't use a mouse either, I pulled this two button plus scroll mouse out of the closet just to test.
I tried everything that you suggested before I posted – highlighting (anything, anywhere - - text, file, web, KeePassXC)
Still not available.
I do not have two physical buttons on the touchpad, maybe two underneath at bottom corners, still not available.

Maybe I have synclient/synaptic running instead of libinput.

In MX-Tweak → Other (MX-21.3 Xfce) I don't have this checked:
Use lipinput driver for touchpad instead of synaptics touchpad driver.

BUT in my home folder, I have a file named:
30-touchpad.conf.202303111107
that contains: Driver "libinput"

So I did try something at one time, maybe unchecked, or Timeshifted?? - if relevant.

I'm getting of the topic of this post and this isn't really important – but I am security conscious.

Thanks – Have a good day/night….

Post Reply

Return to “Security”