GrapheneOS has built a secure paste feature that lets users take clipboard access away from apps

Sources: GrapheneOS post, earlier GrapheneOS post, HN discussion
Summary: GrapheneOS posted from its own account on 2026-09-06 that it has developed a secure paste feature replacing traditional clipboard APIs. An app without clipboard access receives pasted content only through a user-mediated action rather than by reading the clipboard API directly. The project states it plans to get the feature merged soon and names no release.
Why it matters: Replacing the clipboard API with a user-mediated paste changes an app permission that Android has always granted implicitly, and it is the kind of change other hardened Android builds tend to follow.
Follow-up: The merge landing, the GrapheneOS release that ships secure paste, the app compatibility fallout, and whether AOSP or other hardened builds adopt the same model.