What a clipboard tool should never do
- Sell or mine your data. Clipboard contents are about the most intimate telemetry there is. If the business model is advertising or "insights", walk away.
- Read more than you gave it. A sync tool should handle what you deliberately copied — not scrape every app, screenshot or keystroke around it.
- Keep everything forever by default. A history is the feature, but you need delete, hide, and retention limits that actually remove things.
- Lock you in. If you can't export your data and hard-delete your account without emailing support, the tool owns your data — not you.
- Overstate its crypto. "Military-grade" and vague "encrypted" claims with no detail are a tell. So is claiming end-to-end encryption for a product whose features (web access, share links, history on new devices) plainly require the server to have the data.
Questions to ask any vendor
- Can your servers read my clips? (An honest answer is often "yes" — what matters is that they say so plainly.)
- Is data encrypted in transit and at rest?
- How are passwords and share passphrases stored?
- What guards sign-in — is there 2FA, and lockout on guessing?
- Are share links guessable? Do they show up in search engines?
- Can I export everything and delete everything?
How MoveMyWork answers each
These match our security page — that's the canonical version and it doesn't overstate. Point by point:
- Can the server read your clips? Technically, yes. MoveMyWork stores and relays your clips — that's how they reach your other devices and the web app. They're encrypted in transit (HTTPS/TLS everywhere) and files are stored encrypted at rest, but this is not end-to-end encryption and we won't pretend otherwise. If you need genuine zero-knowledge handling for something like a password vault, use a dedicated password manager alongside us — different tools, different jobs.
- Passwords are bcrypt-hashed. Never stored or logged in plaintext. Share-link passphrases are hashed the same way.
- Sign-in has email 2FA by default. A six-digit code from a new browser; codes expire in 10 minutes, are single-use, and lock after 5 wrong attempts. Password guessing gets the same treatment: 5 wrong attempts in 15 minutes locks it, and share-link passphrases are rate-limited per link.
- Share links are unguessable and unindexed. 128 bits of randomness in every URL, served with noindex headers so they stay out of search engines. Expiry, view caps and revocation are covered in the expiring links guide.
- Files aren't sitting in a public folder. Uploads live outside the web root and are only streamed through an authenticated endpoint that checks ownership or a valid share token first.
- Sessions are scoped. Cookies are HttpOnly, Secure and SameSite; trusted-device tokens are HMAC-signed and revocable from your other devices.
- You can leave, completely. Settings → Export your data gives you a zip of clips and files (the export guide has the details), and account deletion is a hard delete — clips, files, shares, logs, all of it.
Your side of the bargain
Two habits close most of the remaining gap. Don't sync what shouldn't be synced — a clipboard history is the wrong home for master passwords or recovery codes, whatever tool you use. And delete or hide sensitive clips when they've done their job rather than letting them ride out the retention window.
That's the honest picture: a useful amount of security, described without adjectives, and the one limit — the server can read what it stores — said out loud. If a vendor won't say that sentence about their own product, ask why.