How iOS 16 Pasteboard Permission Works

Apple introduced an explicit clipboard permission prompt in iOS 16 to enhance user privacy by stopping applications from silently reading copied data without user consent. This article explains how the iOS 16 pasteboard security mechanism operates, when the system alert triggers, and how standard interface elements allow apps to bypass the prompt through explicit user intent.

The Mechanics of the Permission Prompt

Prior to iOS 16, apps could read the contents of the system pasteboard (UIPasteboard.general) programmatically without notifying the user. This allowed apps to harvest sensitive data such as passwords, addresses, and private messages directly from the clipboard.

In iOS 16, Apple introduced a gatekeeping mechanism between the application code and the system pasteboard:

  1. API Interception: When an app programmatically calls properties on UIPasteboard—such as .string, .strings, .url, or .image—iOS intercepts the call.
  2. System Modal Display: If the read request was triggered automatically by app logic rather than an authenticated system gesture, iOS pauses the execution thread and displays a system dialog: "[App Name] would like to paste from [Source App]".
  3. User Decision: The user must select either "Allow Paste" or "Don't Allow." If granted, the app receives the data. If denied, the app receives nil or an empty value.

Preventing Unwanted Prompts with UIPasteControl

To prevent alert fatigue while maintaining privacy, Apple designed the system to distinguish between automated background requests and genuine user intent.

When a user taps the standard iOS contextual edit menu (the native "Paste" bubble above a text field), the system recognizes direct intent and reads the clipboard without triggering the permission prompt.

For custom interfaces, Apple introduced the UIPasteControl API in iOS 16. This provides a configurable, system-rendered button that developers can place directly in their interface:

  • Direct Intent Verification: Because UIPasteControl is handled securely by the operating system, tapping it guarantees the user intended to paste.
  • Prompt Bypass: Tapping a UIPasteControl button immediately delivers the clipboard payload to the target field without generating the permission pop-up.

System-Level App Settings

Following user feedback regarding repeated prompts in early iOS 16 releases, Apple added per-app paste permissions in iOS 16.1. Users can control this behavior persistently:

  1. Open Settings.
  2. Scroll down and select the specific app.
  3. Tap Paste from Other Apps.
  4. Choose between Ask, Deny, or Allow.

Setting the permission to "Allow" grants the application persistent access to pasteboard data, suppressing the explicit prompt for all subsequent pastes.