cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
New Contributor

Copy to clipboard is a security risk in Android

When I need a password I go to lastpass app, and I copy to clipboard.  I past it into the form field that I need.  This is a practice that I do usually when I'm generating a new password.  I don't usually do this, as I can just click the form field to have lastpass populate the password.

 

What the issue is: copy to clipboard leaves the password in the clipboard forever.

My suggestion:  when copy to clipboard is used, then check the clipboard for the password, and silently delete the password after 5 minutes, so it doesn't persist in the clipboard.

 

I know how to use LastPass.  I'm a software tester, so I'm very aware of computers and software works.  I'm very aware of the capabilities of LastPass, and I like this quirky little password manager, which is why I use it.  Do not give me advice on how to use it, because if you feel like doing that you're missing my point here completely.  Read my statement again if you're tempted to give me advice.

 

When "copy to clipboard" is used there does not appear to be any clipboard cleanup that occurs to make sure some other app doesn't read the clipboard and access a password.  

8 REPLIES 8
Highlighted
New Contributor

Re: Copy to clipboard is a security risk in Android

I guess Trump, Snowden, and Aliens are more important topics right now.

Highlighted
LogMeIn Manager

Re: Copy to clipboard is a security risk in Android

Hi mkendallm,

 

The LastPass Android app has built-in non configurable routine to clear the clipboard after 30 seconds. As you have tested this the routine must not be running, what version of Android does your device use?

 

Glenn is a member of the LogMeIn Community Care Team.

Was your question answered? Please mark it as an Accepted Solution.
Was a post helpful or informative? Give it a Kudo!
Highlighted
New Contributor

Re: Copy to clipboard is a security risk in Android

Hello, I recently encountered a possible bug with regards to automatically clear clipboard for the android app.

In my previous phone, a Galaxy Note 8, I could see in real time when it clears the clipboard after 30 secs. But when I upgraded to a Galaxy Note 10+, the feature doesn't seem to work anymore.

I tried clearing my cache, clearing the data, even reinstalled the app. The app wasn't able to clear my clipboard and I have to manually clear it everytime and I fear that if I forget to clear it asap it just sits there in the clipboard and can be seen or hacked.

Any idea why this happens in my Note 10+?
Highlighted
LogMeIn Contributor

Re: Copy to clipboard is a security risk in Android

Hello,

 

Just to be sure, could you double check in your LastPass app Settings > Security > Clear Clipboard that this setting set to anything other than "Never?" Could you try uninstalling the app, restarting your device, and then reinstalling and checking this settings to make sure it is working as expected?




RachelO is a member of the LogMeIn Community Care Team.

Was your question answered? Please mark it as an Accepted Solution.
Was a post helpful or informative? Give it a Kudos!
Highlighted
New Contributor

Re: Copy to clipboard is a security risk in Android

Yes I made sure that it is set as enabled in the android app. I don't even think there's an option to set it at never. I also did uninstalling, restarting, reintalling, clearing data, cache. and any other way.

 

I also did a side-by-side comparison with my previous device, a Galaxy Note 8, with the same settings and while looking at the clipboard real-time. My older device's clipboard does get cleared by the LastPass app but the new one on my Note 10+ does nothing.

Highlighted
New Contributor

Re: Copy to clipboard is a security risk in Android

Follow-up regarding my problem
Highlighted
New Contributor

Re: Copy to clipboard is a security risk in Android

Yes I made sure that it is set as enabled in the android app. I don't even think there's an option to set it at never. I also did uninstalling, restarting, reintalling, clearing data, cache. and any other way.

 

I also did a side-by-side comparison with my previous device, a Galaxy Note 8, with the same settings and while looking at the clipboard real-time. My older device's clipboard does get cleared by the LastPass app but the new one on my Note 10+ does nothing.

Highlighted
LogMeIn Contributor

Re: Copy to clipboard is a security risk in Android

Thanks for the update. If the clear clipboard setting is not working as expected on one device but working as it should on another, could you submit a bug report so that our development team can gather more information and hopefully resolve the issue? https://support.logmeininc.com/lastpass/help/how-do-i-report-a-bug-to-lastpass




RachelO is a member of the LogMeIn Community Care Team.

Was your question answered? Please mark it as an Accepted Solution.
Was a post helpful or informative? Give it a Kudos!