KeePassXC password copy not being deleted after the default 10 seconds

[Thomot512]

Bug Description

When copying a password from KeepassXC, a timer starts in KeepassXC, which should delete the password from the clipboard after the delay. This however does not work with clipboard-manager.

Expected Result

KeePassXC should be able to trigger the deletion of the password in the clipboard for security reasons.

Steps to Reproduce

Copy a password from an entry in KeePassXC using Ctrl+C, wait for the delay to be finished. Try to paste and see that it does not work. Click on the Clipboard-Manager see that the selected option is the password, select it again with the mouse, and paste.

Additional Information

`fastfetch`

                  -`                     ****@****
                 .o+`                    ------------------------
                `ooo/                    OS: Arch Linux x86_64
               `+oooo:                   Kernel: Linux 6.18.3-arch1-1
              `+oooooo:                  Uptime: 12 hours, 30 mins
              -+oooooo+:                 Packages: 1377 (pacman), 6 (flatpak-system), 10 (flatpak-user)
            `/:-:++oooo+:                Shell: nushell 0.109.1
           `/++++/+++++++:               Display (LC49G95T): 5120x1440 in 49", 240 Hz [External]
          `/++++++++++++++:              DE: COSMIC
         `/+++ooooooooooooo/`            WM: cosmic-comp (Wayland)
        ./ooosssso++osssssso+`           Cursor: Adwaita
       .oossssso-````/ossssss+`          Terminal: cosmic-term
      -osssssso.      :ssssssso.         CPU: AMD Ryzen 5 7600X (12) @ 5.46 GHz
     :osssssss/        osssso+++.        GPU 1: AMD Radeon RX 7900 XTX [Discrete]
    /ossssssss/        +ssssooo/-        GPU 2: AMD Raphael [Integrated]
  `/ossssso+/:-        -:/+osssso+-      Memory: 13.13 GiB / 30.50 GiB (43%)
 `+sso+:-`                 `.-/+oso:     Swap: 0 B / 15.25 GiB (0%)
`++:.                           `-/+/    Disk (/): 34.58 GiB / 97.87 GiB (35%) - ext4
.`                                 `/    Disk (/home): 304.97 GiB / 1.69 TiB (18%) - ext4
                                         Disk (/run/media/****/****): 43.93 MiB / 14.70 GiB (0%) - vfat [External]
                                         Local IP (eno1): ***.***.***.***/24
                                         Locale: en_US.UTF-8

Logs

Not so sure where to find the logs. If someone tells me where they are I would be glad to provide them.

[GonzRon]

just a theory haven't tested but i use keepassXC as well:

● Found it. The root cause is in app.rs in the EmptyKeyboard handler. Let me trace the full chain:

The flow

1. KeePassXC copies password → Wayland Selection event with an offer → clipboard manager reads the data, stores it in the DB as the most recent entry (index 0)
2. 10 seconds later, KeePassXC clears the clipboard → Wayland sends Selection { id: None } → clipboard_watcher.rs calls set_offer(None) → start_watching() sees offer is None
   → returns Err(Error::ClipboardEmpty)
3. clipboard.rs maps ClipboardEmpty → sends WatchRes::None → becomes ClipboardMessage::EmptyKeyboard
4. app.rs line ~300 — here's the bug:
   clipboard::ClipboardMessage::EmptyKeyboard => {
   if let Some(data) = self.db.get(0) {
   return copy_iced(data.raw_content().clone());
   }
   }

When the clipboard is cleared, the clipboard manager immediately re-copies the most recent DB entry (the password) back to the clipboard. This is by design — it's meant to
keep the clipboard always populated so pasting never fails. But it directly defeats KeePassXC's security clearing.

Why paste fails initially but works after re-selecting

The user reports: "Try to paste and see that it does not work. Click on the Clipboard-Manager, select it again with the mouse, and paste."

This is because there's a race condition: KeePassXC clears the clipboard, the clipboard manager re-copies the data via copy_iced(), but the paste target may have already
received the "clipboard is empty" notification before the clipboard manager restores it. Re-selecting in the clipboard manager triggers a fresh Copy which works.

The fix

The clipboard manager needs to either:

1. Honor the x-kde-passwordManagerHint MIME type — KeePassXC sets this MIME type when copying passwords. Entries with this hint should not be stored or should be marked as
   ephemeral and not restored on clear.
2. Add a "don't restore on clear" option — a config toggle that, when the source app clears the clipboard, respects that instead of re-populating.
3. Track the clear source — if the same app that set the clipboard also clears it, treat that as intentional.

Option 1 is the most targeted. When ClipboardMessage::Data(data) arrives, check if the MIME types contain x-kde-passwordManagerHint. If so, either skip storing it entirely,
or flag it so the EmptyKeyboard handler doesn't restore it.