SafeClip: Encrypted Clipboard History

SafeClip keeps a history of what you copy, encrypted, on your device only. No account, no server, no sync. Copy something on a web page and SafeClip remembers it. Star the things worth keeping and file them into folders. Everything is encrypted with AES-256 before it touches disk, behind a passphrase only you know. WHY Most clipboard managers store your history in plain text, or sync it to a server you can't see into. That's a problem when what you copy includes tokens, addresses, order numbers, or the occasional password. SafeClip keeps that history readable by you and nobody else. HOW IT WORKS • Saved items are always encrypted under a key derived from your passphrase (PBKDF2, 300,000 iterations). The passphrase is never stored anywhere. • Recent items can optionally stay unlocked across restarts using a separate on-device key, so your day-to-day clipboard doesn't demand a passphrase every time. Starring something or opening Saved still requires it. • Auto-lock runs on a timer you control (1–60 minutes, or never), and keeps working even when the popup is closed. • Wrong passphrases are throttled with increasing lockouts, both when unlocking and when changing your passphrase. • Export and import let you back up or move your encrypted vault as a single file. WHAT IT DOESN'T DO No account, no cloud sync, no analytics, no network requests of any kind, you can verify this yourself by checking the source. It only sees copies made on regular web pages; Chrome doesn't allow extensions to see clipboard activity in its own UI (address bar, bookmarks), and there's no permission that changes that. PERMISSIONS • storage — saves your encrypted clips and settings locally. • alarms — fires auto-lock on schedule even when the popup is closed. • host access (http/https) — needed so the content script can hear the copy event on the page you're using. It only reads the text you selected and copied. Source code: https://github.com/kernelandshell-byte/safeclip