An Android 13 device has clipboard auto-clear enabled. A user copies a password from a banking app. What is the platform behavior that protects this sensitive clipboard content?
- A.Android 13 clears the clipboard one minute after a copy from a sensitive field
- B.Android 13 automatically clears the clipboard after approximately one hour of inactivity
- C.Android 13 encrypts clipboard entries with a Keystore-backed wrapping key
- D.Android 13 blocks clipboard reads until the user taps a paste control
Why B is correct
Android 13 introduced automatic clipboard clearing: the system clears the primary clip after approximately one hour (3,600,000 ms) of inactivity. Separately, apps can flag clipboard content as sensitive via ClipDescription.EXTRA_IS_SENSITIVE, which masks the content preview in the clipboard UI - it does not change the clear timeout, so the one-minute claim is wrong. Clipboard contents are not Keystore-encrypted, so that choice is wrong. Background apps have been unable to read the clipboard since Android 10 regardless of any paste button, so that choice is wrong.
Know someone studying for Mobile Security Fundamentals? Send them this one.