Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have hundreds of passwords, since I use a different random one for each website/service. They are all generated & stored with KeePassX, which can be synced to different computers and my android phone via dropbox (or ubuntuone).

I know the database of KeePassX is secure (at least with a good passphrase). But what about when I am copying the password into the clipboard (where it is stored for 5 seconds)? Can any program running in user-space access the clipboard and store the password? If so, how big of a security risk is this?

share|improve this question
You may well be aware of it already, but I'll mention ir as a general issue.. Be very aware of clipboard managers (eg. Parcellite)... almost by definition they keep a log of what goes through your clipboard.. even if it only been there for < 1 second :) ... – Peter.O Jan 16 '11 at 14:12
up vote 8 down vote accepted

Programs may have access to the clipboard, for example you copy some text from a webpage and paste it to gedit. This should never happen without user interaction, unless KeePassX has a security vulnerability which another malware (very rare on Unix systems) could then use. Don't use software which you don't trust.

If you want to decrease the probability that your passwords go to someone else, encrypt your home folder, swap and ram, use a good login password, disable user name list in login manager (like gdm). That way the only possible way to get access to your passwords is when KeePassX is running, ie. when you are logged in and have some old insecure programs running.

share|improve this answer
+1 - Nice answer. – Mat Nadrofsky Jan 12 '12 at 20:21

To exclude KeepassX from adding passwords to the clipboard history, add KeepassX to the exclude list in

settings -> security and privacy -> files and applications

That way, KeepassX won't be recorded in ZeitGeist or the Dash and for example Diodon, will not add passwords to the history list.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.