Stash is a feature-rich, yet simple and lightweight clipboard management utility with many features such as but not necessarily limited to:
- Automatic MIME detection for stored entries
- Fast persistent storage using SQLite
- List, search, decode, delete, and wipe clipboard history with ease
- Backwards compatible with Cliphist TSV format
- Import clipboard history from TSV (e.g., from
cliphist list)
- Import clipboard history from TSV (e.g., from
- Image preview (shows dimensions and format)
- Text previews with customizable width
- Deduplication and entry limit control
- Automatic clipboard monitoring with
stash watch - Drop-in replacement for
wl-clipboardtools (wl-copyandwl-paste) - Sensitive clipboard filtering via regex (see below)
- Sensitive clipboard filtering by application (see below)
See usage section for more details.
Nix is the recommended way of downloading Stash. You can install it using Nix
flakes using nix profile add if on non-nixos or add Stash as a flake input if
you are on NixOS.
{
# Add Stash to your inputs like so
inputs.stash.url = "github:NotAShelf/stash";
outputs = { /* ... */ };
}Then you can get the package from your flake input, and add it to your packages
to make stash available in your system.
{inputs, pkgs, ...}: let
stashPkg = inputs.stash.packages.${pkgs.stdenv.hostPlatform}.stash;
in {
environment.systemPackages = [stashPkg];
# Additionally feel free to add the Stash package in `systemd.packages` to
# automatically run the Stash watch daemon, which will watch your primary
# clipboard for changes and persist them.
systemd.packages = [stashPkg];
}If you want to give Stash a try before you switch to it, you may also run it one
time with nix run.
nix run github:NotAShelf/stash -- watch # start the watch daemonYou can also install Stash on any of your systems without using Nix. New releases are made when a version gets tagged, and are available under GitHub Releases. To install Stash on your system without Nix, either:
-
Download a tagged release from GitHub Releases for your platform and place the binary in your
$PATH. Instructions may differ based on your distribution, but generally you want to download the built binary from releases and put it somewhere like/usr/binor~/.local/bindepending on your distribution. -
Build and install from source with Cargo:
cargo install --git https://github.com/notashelf/stash
Note
It is not a priority to provide 1:1 backwards compatibility with Cliphist. While the interface is almost identical, Stash chooses to build upon Cliphist's design and extend existing design choices. See Migrating from Cliphist for more details.
The command interface of Stash is only slightly different from Cliphist. In
most cases, you may simply replace cliphist with stash and your commands,
aliases or scripts will continue to work as intended.
Some of the commands allow further fine-graining with flags such as --type or
--format to allow specific input and output specifiers. See --help for
individual subcommands if in doubt.
$ stash help
Wayland clipboard manager
Usage: stash [OPTIONS] [COMMAND]
Commands:
store Store clipboard contents
list List clipboard history
decode Decode and output clipboard entry by id
delete Delete clipboard entry by id (if numeric), or entries matching a query (if not). Numeric arguments are treated as ids. Use --type to specify explicitly
wipe Wipe all clipboard history
import Import clipboard data from stdin (default: TSV format)
watch Start a process to watch clipboard for changes and store automatically
help Print this message or the help of the given subcommand(s)
Options:
--max-items <MAX_ITEMS>
Maximum number of clipboard entries to keep [default: 18446744073709551615]
--max-dedupe-search <MAX_DEDUPE_SEARCH>
Number of recent entries to check for duplicates when storing new clipboard data [default: 20]
--preview-width <PREVIEW_WIDTH>
Maximum width (in characters) for clipboard entry previews in list output [default: 100]
--db-path <DB_PATH>
Path to the `SQLite` clipboard database file
--excluded-apps <EXCLUDED_APPS>
Application names to exclude from clipboard history [env: STASH_EXCLUDED_APPS=]
--ask
Ask for confirmation before destructive operations
-v, --verbose...
Increase logging verbosity
-q, --quiet...
Decrease logging verbosity
-h, --help
Print help
-V, --version
Print versionecho "some clipboard text" | stash storestash listStash list will list all entries in an interactive TUI that allows navigation
and copying/deleting entries. This behaviour is EXCLUSIVE TO TTYs and Stash will
display entries in Cliphist-compatible TSV format in Bash scripts. You may also
enforce the output format with stash list --format <tsv | json>.
stash decode <input ID>Tip
Decoding from dmenu-compatible tools:
stash list | tofi | stash decodestash delete --type [id | query] <text or ID>By default stash will try to guess the type of an entry, but this may not be
desirable for all users. If you wish to be explicit, pass --type to
stash delete.
stash delete --type id < ids.txtstash wipestash watchThis runs a daemon that monitors the clipboard and stores new entries
automatically. This is designed as an alternative to shelling out to
wl-paste --watch inside a Systemd service or XDG autostart. You may find a
premade Systemd service in contrib/. Packagers are encouraged to vendor the
service unless adding their own.
Tip
Stash provides wl-copy and wl-paste binaries for backwards compatibility
with the wl-clipboard tools. If must depend on those binaries by name, you
may simply use the wl-copy and wl-paste provided as wl-clipboard-rs
wrappers on your system. In other words, you can use
wl-paste --watch stash store as an alternative to stash watch if
preferred.
Some commands take additional flags to modify Stash's behavior. See each
commands --help text for more details. The following are generally standard:
--db-path <path>: Custom database path--max-items <N>: Maximum number of entries to keep (oldest trimmed)--max-dedupe-search <N>: Deduplication window size--preview-width <N>: Text preview max width forlist--version: Print the current version and exit
Stash can be configured to avoid storing clipboard entries that match a sensitive pattern, using a regular expression. This is useful for preventing accidental storage of secrets, passwords, or other sensitive data. You don't want sensitive data ending up in your persistent clipboard, right?
The filter can be configured in one of three ways, as part of two separate features.
This can be configured in one of two ways. You can use the environment
variable STASTH_SENSITIVE_REGEX to a valid regex pattern, and if the
clipboard text matches the regex it will not be stored. This can be used for
trivial secrets such as but not limited to GitHub tokens or secrets that follow
a rule, e.g. a prefix. You would typically set this in your ~/.bashrc or
similar but in some cases this might be a security flaw.
The safer alternative to this is using Systemd LoadCrediental. If Stash is
running as a Systemd service, you can provide a regex pattern using a crediental
file. For example, add to your stash.service:
LoadCredential=clipboard_filter:/etc/stash/clipboard_filterThe file /etc/stash/clipboard_filter should contain your regex pattern (no
quotes). This is done automatically in the
vendored Systemd service. Remember to set the
appropriate file permissions if using this option.
The service will check the credential file first, then the environment variable. If a clipboard entry matches the regex, it will be skipped and a warning will be logged.
Tip
Example regex to block common password patterns:
(password|secret|api[_-]?key|token)[=: ]+[^\s]+
For security reasons, you are recommended to use the regex only for generic tokens that follow a specific rule, for example a generic prefix or suffix.
Stash allows blocking an entry from the persistent history if it has been copied
from certain applications. This depends on the use-toplevel feature flag and
uses the the wlr-foreign-toplevel-management-v1 protocol for precise focus
detection. While this feature flag is enabled (the default) you may use
--excluded-apps in, e.g., stash watch or set the STASH_EXCLUDED_APPS
environment variable to block entries from persisting in the database if they
are coming from your password manager for example. The entry is still copied to
the clipboard, but it will never be put inside the database.
This is a more robust alternative to using the regex method above, since you
likely do not want to catch your passwords with a regex. Simply pass your
password manager's window class to --excluded-apps and your passwords will
be only copied to the clipboard.
Tip
Example startup command for Stash daemon:
stash --excluded-apps Bitwarden watch
Stash was designed to be a drop-in replacement for Cliphist, with only minor improvements. If you are migrating from Cliphist, here are a few things you should know.
- Most Cliphist commands have direct equivalents in Stash. For example,
cliphist store->stash store,cliphist list->stash list, etc. - Cliphist uses
delete-query; in Stash, you must usestash delete --type query --arg "your query". - Both Cliphist and Stash support deleting by ID, including from stdin or a file.
- Stash respects the
STASH_CLIPBOARD_STATEenvironment variable for sensitive/clear entries, just like Cliphist. TheSTASH_prefix is added for granularity, you must update your scripts. - You can export your Cliphist history to TSV and import it into Stash (see below).
- Stash supports text and image previews, including dimensions and format.
- Stash adds a
watchcommand to automatically store clipboard changes. This is an alternative towl-paste --watch cliphist list. You can avoid shelling out and depending onwl-pasteas Stash implements it throughwl-clipboard-rscrate and provides its ownwl-copyandwl-pastebinaries.
Both Stash and Cliphist support TSV format for clipboard history. You can export from Cliphist and import into Stash, or use Stash to export TSV for interoperability.
Export TSV from Cliphist:
cliphist list --db ~/.cache/cliphist/db > cliphist.tsvImport TSV into Stash:
stash import < cliphist.tsvExport TSV from Stash:
stash list > stash.tsvImport TSV into Cliphist:
cliphist --import < stash.tsvHere are some other tips for Stash that are worth documenting. If you have figured out something new, e.g. a neat shell trick, feel free to add it here!
-
You may use
stash listto view your clipboard history in an interactive TUI. This is obvious if you have ever ran the command, but here are some things that you might not have known.stash listdisplays the TUI only if the user is in an interactive TTY. E.g. if it's a Bash script,stash listwill output TSV.- You can change the format with
--formatto e.g. JSON but you can also force a TSV format inside an interactive session with--format tsv. stash listdisplays the mime type for newly recorded entries, but it will not be able to display them for entries imported by Cliphist since Cliphist never made a record of this data.
-
You can pipe
cliphist list --db ~/.cache/cliphist/dbtostash import --type tsvto mimic importing from STDIN.cliphist list --db ~/.cache/cliphist/db | stash import
-
Stash provides its own implementation of
wl-copyandwl-pastecommands backed bywl-clipboard-rs. Those implementations are backwards compatible withwl-clipboard, and may be used as drop-in replacements. The default build wrapper inbuild.rslinksstashtostash-copyandstash-paste, which are also available aswl-copyandwl-pasterespectively. The Nix package automatically links those to$out/binfor you, which means they are installed by default but other package managers may need additional steps by the packagers. While building from source, you may linktarget/release/stashmanually.
My thanks go first to @YaLTeR for the wl-clipboard-rs crate. Stash is powered by several crates, but none of them were as detrimental in Stash's design process.
Additional thanks to my testers, who have tested earlier versions of Stash and provided feedback. Thank you :)
This project is made available under Mozilla Public License (MPL) version 2.0. See LICENSE for more details on the exact conditions. An online copy is provided here.