GrapheneOS just fixed one of Android's sneakiest privacy problems

After announcing the feature earlier this month, GrapheneOS has now merged “Secure Paste.” The privacy feature is designed to stop apps from reading clipboard contents copied from other apps.

As the platform’s developers note, the clipboard can contain all sorts of sensitive information, including passwords, authentication codes, private messages, and such. While Android already restricts which apps can access the clipboard and shows a warning when an app reads content copied by another app, GrapheneOS says that warning can sometimes come too late.

Secure Paste takes a different approach to how cliboard data is handled. Instead of allowing apps to use the traditional clipboard API to read whatever is currently stored, GrapheneOS will let users take away that access and use a dedicated paste function instead.

The feature is integrated into Android’s usual text-selection toolbar, input methods, accessibility services, and keyboard shortcuts. This means that you’ll still paste content into an app like usual without giving that app broad access to everything copied on your clipboard.

There’s an important exception, though. Apps will still be able to read clipboard contents that they put there themselves. Secure Paste primarily blocks apps from accessing clipboard data that was copied from somewhere else, which GrapheneOS says preserves much of the existing functionality while removing the most problematic part of clipboard access.

GrapheneOS also says it has taken into account apps that use their own text selection interfaces. Some apps, including those built with Flutter, don’t use Android’s standard selection toolbar, so the project has added a Paste button to the default keyboard as a workaround. The platform also notes that it’ll be replacing the AOSP keyboard with a much better keyboard, and will carry over this feature to the new one too.

Secure Paste is now merged into GrapheneOS. The project says more privacy-focused features are planned, similar to its existing Contact Scopes and Storage Scopes.