topic Re: Security Flaw with Samsung Clipboard in Mobile Apps & Services

Security Flaw with Samsung Clipboard

JAMES4578 — Tue, 22 Apr 2025 19:41:26 GMT

Security researchers have identified that Samsung Devices running Android 9 or later store all clipbopard content including passwords and Banking details in plain text indefinitely without an automatic deletion mechanism. It is not possible to auto delete entries after a specific time period which can result in a security risk, this was recognised by a US Samsung Moderator.The issue will be passed to the developers for a fix but there is no timeframe on that at present.

Most concerning is the threat from malware which can target clipboard data to steal credentials and financial information. Any sensitive information should be cleared from the clipboard manually. Third party keyboards like Swifkey do automatically clear the contents after an hour,Samsung's system level storage will still retain the information though.

It is to do with Samsung's implemetation of the Android Clipboard API, can see the technical details here https://cybersecuritynews.com/samsung-one-ui-security-flaw/

Re: Security Flaw with Samsung Clipboard

arianwen27 — Tue, 22 Apr 2025 19:49:48 GMT

I swear I remember someone made a post here asking how to disable the clipboard save feature. Seems they knew something we didn't.

For right now, as long as you don't use a password manager that copies the password for you to paste, nothing super sensitive should be in there. Though of course you can manually clear it. Now we wait for a fix.

Update. The clipboard has a max of 40 items. So if you copy a lot of things, they are auto deleted. Source: had 40 things, copied something, still said 40 oldest was deleted

Re: Security Flaw with Samsung Clipboard

Obsydian — Tue, 22 Apr 2025 19:46:08 GMT

Wow, glad I use a password manager for all that auto fill stuff, well until that gets hacked 😂

Noticed when I clean installed UI7 Microsoft Edge now won't autofill my address or credit card without Microsoft Authenticator approval.

I do delete my clipboard daily, but keep a few things pinned, nothing confidential, but deleted with data is never really deleted.

Hope a fix is found, a proper barn door clanger, thanks for the heads up.

Re: Re: Security Flaw with Samsung Clipboard

JAMES4578 — Tue, 22 Apr 2025 20:02:12 GMT

Oh right,yes if you copy a lot not so much of a factor.

Still a concern though I would not have anything sensitive in there.

Re: Re: Security Flaw with Samsung Clipboard

JAMES4578 — Tue, 22 Apr 2025 20:04:05 GMT

No problem,whilst can take precautions not the full solution.

Re: Security Flaw with Samsung Clipboard

Star_girl — Tue, 22 Apr 2025 21:10:04 GMT

Security settings should be more thorough than, for the people who just want to use their phones and are not so much into tech.
Also would the phone's own antivirus detect suspicious malware? Every time I perform a scan it doesn't find any malware, and I trust it. I hope it's accurate.

Re: Security Flaw with Samsung Clipboard

Sonora — Wed, 23 Apr 2025 06:17:54 GMT

It wasn't discovered by a US Samsung moderator, it's been known for years, as it says at the bottom of the text you linked

This security flaw has reportedly been known for years, with users across Reddit, XDA, and Samsung forums raising concerns without substantive resolution.

Google search:

https://forums.androidcentral.com/threads/warning-samsung-users.1065119/

https://www.reddit.com/r/samsunggalaxy/comments/mtakqq/how_to_disable_the_clipboard_history_this_is_a/?rdt=37460

But, if everyone is just now talking about it, my guess is that Samsung has finally patched it.

Re: Re: Security Flaw with Samsung Clipboard

JAMES4578 — Wed, 23 Apr 2025 09:06:49 GMT

I did not say it was discovered by a Samsung Moderator , they did confirm the issue. Yes the flaw has been reported for a number of years,seems whilst Samsung more proactive seems we are still awaiting the patch.

Re: Re: Security Flaw with Samsung Clipboard

Sonora — Wed, 23 Apr 2025 09:38:25 GMT

What I noticed is:Regardless of deleting the clipboard, the last copy before deletion can be loaded into the browser's after deletion, so it takes several copies to the clipboard to delete the password if it was the last copy, clean RAM and restarting the phone, because only by restarting the phone does the possibility of copying the last item from the clipboard to Google Translate disappear . So, after deleting clipboard, a phone restart is also required so that applications like Google Translate can no longer paste the last (deleted) item into the clipboard.

Re: Security Flaw with Samsung Clipboard

JorgenS — Tue, 30 Dec 2025 05:10:46 GMT

This is still happening, S25 Ultra.

I'm pretty appalled by it, have been using gboard with its clipboard function disabled – but then opened the clipboard edge panel and had a minor heart attack seeing how much was there.