Press ⌃⌘V in any app to search what you copied, then press Return to paste it. You can pin items, and change the shortcut and how long history is kept in Settings → History.
When you copy something that looks like a secret, ClipAudit rewrites it on the clipboard within milliseconds and adds the nspasteboard.org Concealed marker. Clipboard managers such as Raycast, Alfred, Paste and Maccy honor that marker and don't save the item. You can still paste it as usual, and the clipboard clears itself after 90 seconds. For your terminal, a small hook keeps commands with secrets out of shell history. An app that ignores the marker, or reads the clipboard in the first few milliseconds, can still see it; the Leaks view shows any app that did.
Only on your Mac, in one file encrypted with a key kept in your login Keychain. Passwords and API keys stay masked, like ghp_••••. Revealing or pasting one asks for Touch ID, and they paste back hidden from other clipboard managers.
To press ⌘V for you after you pick an item. It's optional: without it, picking an item copies it and you paste it yourself.
Yes. ClipAudit hides secrets from them, so they never store your passwords and keys. Maccy, Copy 'Em and any other app that follows the nspasteboard.org convention skip them too. The Leaks view shows any tool that read a hidden item anyway.
It streams the pasteboard daemon's own log, which names the process behind every clipboard change and every read. When that log is off it falls back to the frontmost app.
Yes. At launch it applies a kernel sandbox profile to itself that denies every socket; Settings → Privacy has a button that tries to connect and shows the refusal.
Over 700 kinds: every secret type GitHub secret scanning covers that has a public format, plus private keys, wallet keys, JWTs, database URLs with passwords, Authorization headers, .env and config assignments, and a high-entropy fallback. Anything copied from a password manager is treated as a secret regardless.
Hooks for zsh, bash, fish, nushell, PowerShell and xonsh keep commands that look like secrets out of history. A scanner finds secrets already sitting in 19 history files and scrubs them, with a backup.
No. It is included with every purchase under the ClipAudit Source License: use and modify it on your own Macs, no redistribution.
Yes, within 30 days. Write to support with your receipt.
macOS 14 Sonoma and later, Apple Silicon and Intel. Daemon-log attribution is verified on macOS 26; older versions may fall back to frontmost-app attribution.
