Clipboard ledger for macOS

Everything you have ever copied. One shortcut away.

An encrypted ledger of your clipboard, on every Mac you own. Press Shift Option Space, search your whole history, and paste it yourself.

macOS 14 or newer · Universal · Free · No account

Space opens the search window, anywhere

esc closes

Pinned

August invoice template PagesInvoice 2026-081, due within 30 days Pinned ⌘1
https://invoices.example/account/2026-081 Safariinvoices.example ⌘2
ledger.apply(retentionRule) XcodeSwift, 27 characters ⌘3
Screenshot 2026-08-22 at 14.02 ScreenshotPNG, text read on device ⌘4
ClipLedger-0.1.0.dmg FinderFile reference, 14,2 MB ⌘5
Call the accountant before Friday NotesNote, 32 characters ⌘6
sqlcipher ledger.db TerminalShell, 19 characters ⌘7
https://clipledger.app/security Mailclipledger.app ⌘8
API key, masked on capture NumbersExpires in 1 hour, never synced Masked ⌘9
Invoice-2026-081.pdf PreviewFile reference, 214 KB

10 entriesCopy

This is the real interface. Type, filter, use the arrows, press Enter.

Unlimited history

Every entry you choose to keep stays searchable, with limits and expiry you set yourself.

Encrypted everywhere

SQLCipher on disk, AES-256-GCM for files and for anything that reaches iCloud.

No permissions

ClipLedger only sets the clipboard, so it never asks for Accessibility access.

Search

Your whole history, narrowed while you type.

ClipLedger keeps every entry you chose to keep, so the answer is never gone. Full text search runs over the encrypted ledger, operators cut the result down, and fewer than five matches quietly switches to a fuzzy pass.

Operators, if you already know

app:xcode
only entries copied from Xcode
type:links
only links
is:pinned
only pinned entries
after:2026-08-01
only entries from August

Fewer than five matches turns on the fuzzy pass, so a half remembered word still lands.

ClipLedger search window, Captured with fixed sample data, no personal information.
Real capture from the macOS app, search window with the type filters at the bottom.

Filters

Text, links, images, files, code.

Every entry keeps its type, its source app, and its age. Tab and Shift Tab move through the filters without leaving the keyboard, and Vision reads text inside screenshots on device so an image is searchable too.

August invoice template PagesInvoice 2026-081, due within 30 days Text Pinned
https://invoices.example/account/2026-081 Safariinvoices.example Links
ledger.apply(retentionRule) XcodeSwift, 27 characters Code
Screenshot 2026-08-22 at 14.02 ScreenshotPNG, text read on device Images
ClipLedger-0.1.0.dmg FinderFile reference, 14,2 MB Files
Call the accountant before Friday NotesNote, 32 characters Text
sqlcipher ledger.db TerminalShell, 19 characters Code
https://clipledger.app/security Mailclipledger.app Links
API key, masked on capture NumbersExpires in 1 hour, never synced Text Masked
Invoice-2026-081.pdf PreviewFile reference, 214 KB Files

10 entries Sample ledger, filtered live in your browser.

Encrypted sync

One ledger. Every Mac you own.

Sync runs through your own private CloudKit database, never a ClipLedger server and never an account. Each record is encrypted again with your Ledger Key before it leaves the Mac, and that key reaches your other Macs through iCloud Keychain or a recovery phrase you keep.

  1. 01

    You copy something

    The entry is classified, then written to the local ledger that SQLCipher keeps encrypted on disk.

  2. 02

    It is sealed again

    Before upload, the payload is encrypted with AES-256-GCM under your Ledger Key, so iCloud stores bytes it cannot read.

  3. 03

    It travels privately

    The record lands in your own private CloudKit database. There is no ClipLedger account, server, or shared database.

  4. 04

    It appears on your other Mac

    The second Mac unlocks the payload with the same Ledger Key and the entry is one shortcut away there too.

Transport
Private CloudKit database
Payload
AES-256-GCM, client side
Key delivery
iCloud Keychain or recovery phrase
Account
None, ever
ClipLedger sync settings, Captured with fixed sample data, no personal information.
Real capture from the macOS app, the sync settings with per type choices and key status.

The app itself

Five captures, straight from the build.

These are deterministic captures of the real macOS interface, recorded with fixed sample data. No mockups, no stock photography, no invented numbers.

  1. Search, Captured with fixed sample data, no personal information.
    01 Search The search window with preview, keys, and type filters.
  2. Privacy rules, Captured with fixed sample data, no personal information.
    02 Privacy rules Every detected category gets its own action, expiry, and sync choice.
  3. Retention, Captured with fixed sample data, no personal information.
    03 Retention See exactly what a retention rule would remove before you save it.
  4. Encrypted sync, Captured with fixed sample data, no personal information.
    04 Encrypted sync Private CloudKit, per type choices, and the Ledger Key status.
  5. Transforms, Captured with fixed sample data, no personal information.
    05 Transforms Clean, format, encode, or hash on the way to the clipboard.

Captured with fixed sample data, no personal information.

The ledger

Fast in the moment, predictable afterwards.

Search is only the beginning. ClipLedger shows exactly why an entry is kept, masked, synced, or removed.

Transform without changing the source

Clean text, format JSON, convert colors, or create a hash. The result goes to the clipboard while the saved entry stays intact.

Make secrets yours

Every detector has its own action, expiry, and sync choice. Multiple matches always follow the strictest rule.

Search like you already know

Combine full text search with operators for app, type, date, state, and category. Fewer than five matches triggers a fuzzy fallback.

Time is a setting

Set a TTL on one entry or an entire category. Before saving, see exactly what the new rules would remove.

Text inside images counts

Vision OCR makes screenshot text searchable, locally and without a network request. Images remain encrypted.

The same rules on every Mac

Private CloudKit sync gets an extra client side encryption layer. The Ledger Key reaches your Macs through iCloud Keychain or a recovery phrase.

Completely free

The complete app. No subscription. No limit as a business model.

Both distribution channels get the same features and cost zero. Only signing and updates differ.

macOS 14 or newer · Universal · Free · No account

FAQ

Questions that actually matter.

Why does ClipLedger not paste automatically?

Automatic paste requires simulated keystrokes and Accessibility permission. ClipLedger only restores the clipboard, then you paste normally with Command-V.

Where is my data stored?

Entries live in an encrypted database on your Mac. If sync is enabled, client-side encrypted records also live in your private CloudKit database.

What happens to passwords?

Password-manager marker types are always honored and ignored. Other likely secrets follow the privacy rule you choose.

Can I choose to keep a detected secret?

Yes. Every category has its own store, masked store, never store, expiry, and sync controls.

What if I lose my key?

Without the Ledger Key or recovery phrase, nobody can recover your ledger, including us.

How much disk space does it use?

You decide. Set limits globally and per type, including separate expiry rules for images and files.

Does it work on Intel Macs?

Yes. ClipLedger is a Universal app for Apple silicon and Intel Macs running macOS 14 or newer.

What is the difference between the App Store and direct download?

Features and price are identical. Only signing and the update channel differ.

No analytics, no cookies, no banner. This site does not build a file on you either. See the key hierarchy