Copying and pasting is local
When you copy text, it goes to the clipboard, a small area of your device’s memory. That copy does not travel over Wi-Fi and cannot be seen by other people on the network. The same is true when you paste it into a document on your own device.
What matters is the moment you send the text: pasting it into a login form, a chat or a website sends it across the network. So the question is not “is copy and paste safe?” but “is the connection I am sending it over safe?”.
What actually puts you at risk on public Wi-Fi
- Fake hotspots. An attacker can create a network with a believable name such as “Airport Free WiFi”. If you join it, they control the connection. Always check the exact name with staff.
- Unencrypted connections. Almost all websites use HTTPS, which scrambles the data between your browser and the site so others on the network cannot read it. A page that does not, or shows a certificate warning, should not receive anything private.
- Phishing pages. A login page that looks right but sits at a slightly wrong address will happily collect what you paste. Check the address bar.
- Captive portals that ask for too much. A hotspot page may ask you to install an app, a certificate or a “security update”. Do not.
- Shoulder surfing. In a crowded place, people can look at your screen while you type or paste.
- Shared devices. A public computer is a bigger risk than a public network; see the guide to copying text to a public computer safely.
How to stay safe
- Confirm the network name with staff before joining.
- Use HTTPS sites and look for the padlock. If your browser warns about a certificate, stop.
- Turn on two-step verification on important accounts, so a stolen password is not enough.
- Use mobile data for banking and anything highly sensitive. It is a private connection you control.
- Consider a VPN from a reputable provider for added protection.
- Turn off automatic connection to open networks, and turn off file sharing.
- Keep your device updated, since updates close known holes.
- Log out when you finish, and forget the network afterwards.
Moving text between your own devices
Sometimes you need to get text from one device to another while you are on a public network: a code, a note, a link or a password. A few habits make that safe:
- Use an encrypted, expiring clip. In the online clipboard, add a password; the text is encrypted in your browser before it is sent, so only someone with the password can read it.
- Choose a short expiry (10 minutes is enough) and switch on delete after first view.
- Share the code with your own device, not in a public chat. If someone else must receive it, give them the password by another route.
- Avoid pasting highly sensitive passwords into any site you do not trust; prefer your password manager’s own autofill.
For guidance on passwords themselves, see how to share a password safely.
What the clipboard on your device can leak
Some apps can read the clipboard, and several operating systems show a notice when they do. If you copy a password from a password manager, clear the clipboard afterwards or let the manager clear it automatically after a short time. On a shared or public computer, never copy something sensitive and walk away, because the next person can paste it.
Quick answer
- Copying and pasting on your own device is safe on any Wi-Fi.
- Sending text over public Wi-Fi is safe enough over HTTPS, but fake hotspots and phishing are the real dangers.
- For anything sensitive, use mobile data, two-step verification and short-lived, encrypted clips.
If you are the one providing the network, the guide to sharing a Wi-Fi password explains how to give guests access without exposing your own devices.