Management services and consulting

Verification: I checked the project README and Apple’s pasteboard-privacy documentation. Anything I couldn’t confirm is marked [VERIFY]. Resolve those before publishing.

Category Uncategorized
by

Verification: I checked the project README and Apple’s pasteboard-privacy documentation. Anything I couldn’t confirm is marked [VERIFY]. Resolve those before publishing.

Verification: I checked the project README and Apple’s pasteboard-privacy documentation. Anything I couldn’t confirm is marked . Resolve those before publishing.

Is Maccy Safe? A Privacy and Security Review (2026)

Quick answer: Maccy is a local-first, open-source clipboard manager, so its design avoids the usual cloud risks. Its real risk is the one every clipboard manager has: it records what you copy, including sensitive items. It’s safe to use if you download it from the official site or Homebrew, exclude password managers, and understand what gets stored on disk.

What a clipboard manager can see

Any clipboard manager sees everything you copy: passwords, 2FA codes, API keys, private messages. Maccy App is no exception, so “is it safe?” really asks three things. Where does that data go? Who can read it? Can you trust the code?

Is Maccy open source, and who makes it?

  • Maccy’s source is public on GitHub under p0deje/Maccy, so anyone can read how it handles the clipboard. The project’s README states that maccy.app is the only official website and warns about fake sites impersonating it. Several forks of the repo also exist, so check that you’re installing the original. The README warns of impostor sites and names maccy.app as the only official one.
  • github

Licence: .

Does Maccy send my clipboard anywhere?

Maccy Mac is described as local-first, and nothing in its documentation mentions cloud sync or accounts. I couldn’t find a documented network feature beyond update checking.

:

  • Maccy has no analytics or telemetry in the current release.
  • The only outbound traffic is the update check (Sparkle on the direct download).
  • The App Store build differs from the direct download in any privacy-relevant way.

If you want to confirm it yourself, run Little Snitch or Lulu and watch for connections.

Where is my clipboard history stored?

On your Mac, in the app’s own data store.

Assume the history is not encrypted beyond macOS disk encryption. That matters for one reason: if FileVault is off and someone has your Mac, your clipboard history is readable. Turn FileVault on in System Settings → Privacy & Security.

How does Maccy handle passwords?

It skips some copies by default, and you can extend the list.

  • Ignored pasteboard types. By default, Maccy ignores copy types considered confidential or temporary, and the README lists defaults including password-manager types such as 1Password and KeeWeb entries. The restore command in the README shows the full default list.
  • github
  • Custom types. You can add your own in Settings, and the README suggests the free Pasteboard-Viewer app to discover which types an app uses.
  • Skip one copy. Option+Shift-click on the menu icon ignores only the next copy, and Option-click pauses Maccy entirely.
  • github
  • Universal Clipboard. To keep clipboard items from your iPhone out of history, add com.apple.is-remote-clipboard under Ignore → Pasteboard Types.
  • github
  • The catch is that these filters depend on the source app labeling its clipboard data as sensitive. Maccy’s code checks the copied types against its ignore list. The shouldIgnore check skips an item if it has an ignored type or lacks an enabled one. If an app doesn’t label its data, Maccy records it. A password you copy from a plain text field or a website often carries no such label.
  • github

: whether Maccy Clipboard honors the community org.nspasteboard.ConcealedType / TransientType markers by default, and the exact settings tab names for ignoring specific applications.

How does Maccy read the clipboard?

  • By polling. Maccy checks the clipboard every 500 ms by default. There’s no keylogging or screen recording involved, only clipboard reads. That limits its surface, but it also means Maccy touches your pasteboard constantly, which matters for the next section.
  • github

Does macOS’s new pasteboard privacy affect Maccy?

  • Apple has been tightening clipboard access. In macOS 15.4, Apple previewed an alert for apps that read the general pasteboard programmatically without a paste action, and added an access-behavior property for allowed, denied, or prompt. The expected shape is a Privacy & Security setting letting you allow, deny, or be asked. Apple also patched a real pasteboard flaw in the same release: CVE-2025-30461 was fixed in Sequoia 15.4 with extra sandbox restrictions on system pasteboards.
  • Pasteboard Privacy Preview in macOS 15.4 +2

For a clipboard manager, background polling is the exact behavior these prompts target. If you’re on macOS 26 and Maccy stops recording, check System Settings → Privacy & Security for a pasteboard permission.

Maccy vs. the usual clipboard-manager risks
Risk Cloud-sync managers Maccy
Clipboard sent to a vendor server Often, by design Not documented;
Account required Often No account in the docs
Code auditable Usually not Yes
Records sensitive copies Yes Yes, unless filtered
Disk history encrypted Varies , assume no

Maccy’s advantage is architectural: there’s no server to breach. Its risk is local: anyone or any process with access to your user account can read the history.

  • Hardening checklist (5 minutes)
  • Install from a trusted source: brew install maccy or maccy.app. The README calls out fake sites.
  • github
  • Turn on FileVault.
  • Confirm your password manager’s pasteboard type is ignored (Settings → Ignore).
  • Add types for apps that handle secrets, using Pasteboard-Viewer.
  • Ignore Universal Clipboard if you copy sensitive data on your iPhone.
  • Use Option-click before copying a one-off secret.
  • Clear history when you finish sensitive work.
  • Verdict

Maccy is a reasonable choice for a privacy-minded Mac user. Its design avoids the cloud, its code is public, and it gives you real controls over what it records. It does not protect you from yourself: whatever you copy without a sensitivity label gets stored. Use the filters, keep FileVault on, and verify the open items above before you tell anyone it’s airtight.

Want to go deeper? Next, we could look at how Maccy compares with other clipboard managers on privacy.

top