Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

This question already has an answer here:

If I copy a username/password from an email and paste it into an FTP client or an online form in the browser, can keyloggers capture this private information?

And does it make any difference whether using:

Right-click > Copy, Right-click > Paste

Or are both equally vulnerable to keyloggers?

share|improve this question

marked as duplicate by Terry Chia, NULLZ, Adi, AJ Henderson, Gilles Jun 3 '13 at 13:37

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

2 Answers 2

up vote 3 down vote accepted

From the MSDN page.

The clipboard is a set of functions and messages that enable applications to transfer data. Because all applications have access to the clipboard, data can be easily transferred between applications or within an application.

Any applications can read data from the clipboard. A keylogger might not be logging such data, but it's definitely possible.

share|improve this answer

Often key loggers are not just looking at what is typed on the keyboard but also looking for submitted data from forms. On Windows at least, if a program has admin access to see the keystrokes going to other applications, it can also inspect the form contents of other programs.

Copy and paste may defeat the most basic key loggers, but it won't do anything against reasonably well built ones.

share|improve this answer