@Laice Apple's Passwords app already clears a copied password from the clipboard after 60 seconds, but EFKey's clipboard history was keeping its own copy. Fixed in the next App Store update: once the password expires from the clipboard, it's removed from the EFKey history too.
@Laice Proton Pass clears the clipboard after 2 minutes by default, so it works the same way there. Bitwarden only does it if you turn on Clear clipboard in its settings, it's set to Never by default. With that on, EFKey drops the password from its history once it expires. One catch: if you copy something else before it expires, the password stays in the history, and I don't have a way around that.
@Laice No, iOS doesn't tell a keyboard which app something was copied from, it only sees the text. The keyboard also only runs while it's on screen, so it can't watch the clipboard in the background. The expiry is the only hint a password manager leaves, which is why a newer copy that replaces the password in time slips through.
Laice
@Laice Apple's Passwords app already clears a copied password from the clipboard after 60 seconds, but EFKey's clipboard history was keeping its own copy. Fixed in the next App Store update: once the password expires from the clipboard, it's removed from the EFKey history too.
You don’t happen to know if it’s the same with apps like bitwarden and protonpass
@Laice Proton Pass clears the clipboard after 2 minutes by default, so it works the same way there. Bitwarden only does it if you turn on Clear clipboard in its settings, it's set to Never by default. With that on, EFKey drops the password from its history once it expires. One catch: if you copy something else before it expires, the password stays in the history, and I don't have a way around that.
Guess your app can’t see where it is from?
If it can you could have a internal list for the bigger pw manager apps and put stuff from it in a internal delete list.
@Laice No, iOS doesn't tell a keyboard which app something was copied from, it only sees the text. The keyboard also only runs while it's on screen, so it can't watch the clipboard in the background. The expiry is the only hint a password manager leaves, which is why a newer copy that replaces the password in time slips through.
I see, would have been to easy.