The three keyboard shortcuts you need
Ctrl+C (Windows and Linux) or Cmd+C (Mac) copies selected text or files to your clipboard. Ctrl+V (Windows and Linux) or Cmd+V (Mac) pastes what you copied. Ctrl+X (Windows and Linux) or Cmd+X (Mac) cuts — it copies and then deletes the original.
These three shortcuts work in almost every program: email, word processors, web browsers, messaging apps, file managers. You select what you want, press the keys, and it moves to or from your clipboard. The clipboard is temporary storage on your device — when you copy something new, it replaces what was there before.
The reason these shortcuts matter for security is that your clipboard is readable by programs running on your device. If you copy a password, a credit card number, or a private message, anything with access to your clipboard can see it until you copy something else or shut down your device.
Key Takeaways
- Ctrl+C and Cmd+C copy to your clipboard; Ctrl+V and Cmd+V paste from it; Ctrl+X and Cmd+X cut (copy and delete).
- Your clipboard is temporary storage on your device and is readable by programs running on that device.
- Pasting into a web form or email sends the clipboard contents to that service, so be aware what you are pasting and where.
- After copying sensitive information like a password, copy something harmless afterward to overwrite it on your clipboard.
- Some password managers and security tools can clear your clipboard automatically after a set time.
How to select text or files before copying
You cannot copy what you have not selected. To select text, click at the start of what you want, hold Shift, and click at the end. Or click and drag from start to end. On a Mac, you can also triple-click a paragraph to select the whole thing.
To select a file or folder in your file manager, click it once. To select multiple files, click the first one, hold Ctrl (Windows/Linux) or Cmd (Mac), and click each additional file. To select a range of files, click the first, hold Shift, and click the last.
Once something is highlighted or outlined, the copy shortcut will work. If nothing is selected and you press Ctrl+C or Cmd+C, nothing happens — the clipboard keeps whatever was there before.
What happens when you paste into different places
When you paste into a text field on a website — a search box, a login form, an email — your clipboard contents are sent to that website's servers. The website can see what you pasted. If you paste a password into a phishing site by mistake, the attackers have your password. If you paste your address into a form on a site you do not trust, that site now has your address.
Pasting into a program on your own device (like a word processor or email client) keeps the information on your device unless you send it somewhere. But the program itself can read what you pasted. This is why it matters which programs you install — a malicious program could monitor your clipboard and steal passwords or financial information.
Right-click on most text fields to see a paste option in the menu, which does the same thing as Ctrl+V or Cmd+V. Some websites disable right-click paste on login forms as a weak security measure, though this does not stop a determined attacker.
Why copying passwords is risky and what to do instead
If you copy a password to paste it into a login form, that password sits in your clipboard until you copy something else. Any program running on your device can read it. A malicious app, a browser extension, or malware could grab it. Even if nothing bad happens, you have created a window of time where your password is exposed in a way it normally is not.
The safer approach is to use a password manager — a program like Bitwarden, 1Password, or Dashlane that stores your passwords encrypted and fills login forms automatically without putting the password in your clipboard. If your password manager does copy a password, many of them clear the clipboard after 30 or 60 seconds automatically.
If you must copy a password, copy it, paste it when ready into the login form, and then copy something else — a random word, a space, anything — to overwrite the password on your clipboard. Do this right away, before you do anything else on your device.
Clearing your clipboard manually and automatically
On Windows, there is no built-in way to clear your clipboard from the keyboard. You can open Clipboard History (Windows key + V) and delete individual items, or you can copy a blank space or a harmless word to overwrite everything. Some third-party tools like Clipboard Manager let you clear it with a hotkey.
On Mac, you can open Terminal and type pbcopy < /dev/null to clear the clipboard. This is technical and not something most people need to do regularly, but it works if you want to be certain nothing sensitive is left behind.
Several password managers and security tools can clear your clipboard automatically after a timer runs out — usually 30 to 120 seconds. If you use a password manager, check its settings to see if this feature is available and turn it on. This way, even if you forget to overwrite the clipboard yourself, it happens automatically.
Clipboard access and browser extensions
Browser extensions can request permission to read your clipboard. When you install an extension, your browser will ask you what permissions it needs — if it asks for clipboard access and you do not understand why it needs it, that is a reason to skip that extension or look for an alternative.
Some extensions genuinely need clipboard access: a password manager needs it to fill forms, a screenshot tool might need it to copy images. But an extension that has no obvious reason to read your clipboard should not have that permission. You can revise extension permissions in your browser settings after installation if you change your mind.
Malicious extensions sometimes hide their real purpose and request broad permissions. This is one reason to install extensions only from official sources (the Chrome Web Store, Firefox Add-ons, Safari App Store) and to check the reviews and the developer's reputation before installing.
Frequently Asked Questions
Can I copy and paste between different devices?
Not with the basic keyboard shortcuts — your clipboard is local to one device. Some operating systems offer cloud clipboard features: Windows has Cloud Clipboard if you sign in with a Microsoft account, and Mac has Universal Clipboard if you have multiple Apple devices signed into the same iCloud account. These sync your clipboard across devices, which is convenient but means your clipboard contents travel over the internet.
What if I paste something and it looks different than what I copied?
Formatting sometimes does not paste the same way. If you copy text from a website with colors and bold text and paste it into a plain text editor, the formatting disappears. If you paste into a word processor, it usually keeps the formatting. Use Ctrl+Shift+V (Windows/Linux) or Cmd+Shift+V (Mac) to paste without formatting — this strips colors, bold, links, and other styling and leaves only the plain text.
Is my clipboard visible to websites I visit?
Websites cannot read your clipboard without your permission. However, if a website asks for clipboard permission (which some do), and you grant it, that website can read what is in your clipboard. Always check what permissions a website is asking for before you allow them. You can revise permissions in your browser settings.
What happens to my clipboard when I shut down my computer?
Your clipboard is cleared when you shut down or restart. This is why it is safe to copy sensitive information and then shut down — the clipboard does not survive the restart. However, if you are concerned about someone accessing your device while it is still on, clearing the clipboard manually is a better approach than waiting for a shutdown.
Can I undo a paste if I made a mistake?
Yes, in most programs. Press Ctrl+Z (Windows/Linux) or Cmd+Z (Mac) to undo the last action, including a paste. This works in word processors, email clients, and many web forms. Some websites do not support undo, so if you pasted something into a web form by mistake, you may need to delete it manually or refresh the page.