Clipboard Protection
| Plan | Platforms | MASVS |
|---|---|---|
| Team | Android, iOS 10+ | MASVS-STORAGE-2, MASVS-PLATFORM-1 |
Overview
Clipboard Protection keeps sensitive app content from leaving the app through the system clipboard. It blocks the standard copy and cut affordances that users would otherwise use to lift protected text out of the app.
It is intended for screens and fields whose content should stay inside the app, such as credentials, OTPs, payment data, account details, identity records, and other confidential information.
When To Use It
Use this control for:
- Login, MFA, account recovery, payment, wallet, and approval screens.
- Healthcare, identity, banking, enterprise, government, and regulated data views.
- Confidential text fields, notes, and document viewers.
- Apps where casual copy-and-paste sharing would create privacy or compliance risk.
How It Works
The protected app suppresses copy and cut affordances on protected text surfaces, including embedded web content, so users cannot send protected text to the system clipboard through the standard UI. The control re-applies its protections as the app's UI changes.
How to Enable the Control
Navigate to Preventative Controls from the AppTego portal, and expand the Data Sharing Protection section. Under this section you will find the Clipboard Protection control. Click Enable to enable it for the next build or for it to be applied with a live push (if enabled).
API Configuration Example
{
"ClipboardProtectionPrevention": {
"protection": true
}
}| Field | Purpose |
|---|---|
protection | Enables clipboard copy/cut blocking on protected app content. |
Compatibility Notes
- Custom copy buttons or in-app share flows that intentionally write to the clipboard should be reviewed before enabling this control on those screens.
- The control does not modify clipboard content the user copied from other apps.
- Test text-selection workflows, in-app search, and accessibility tooling on real devices before enforcing broadly.
- Pair with Keyboard Cache Prevention and Third-Party Keyboard Detection for broader input-side protection.