Brave Browser Adds “Force Paste” to Override Website Paste Blocks

Brave Browser has added a feature called Force Paste that lets users override website restrictions blocking them from pasting text into login and form fields.

The feature targets a widespread friction point for password manager users — people who generate long, randomized passwords only to find that a site’s form rejects the standard paste command.

How It Works

Users Can activate Force Paste by right-clicking any restricted field and selecting the option from the context menu. Brave then ignores the site’s paste block and inserts the copied text directly.

For frequent users, Brave also allows a Custom Keyboard shortcut. Navigate to Settings > System > Shortcuts, assign a key combination to Force Paste, and it becomes available without opening the context menu.

The Security Argument

Brave publicly challenged the rationale behind paste restrictions when it announced the feature on X, saying the blocks discourage strong, randomly generated passwords rather than improving account security.

That position aligns with guidance from major cybersecurity bodies. The U.K.’s National Cyber Security Centre has explicitly told website operators to allow password pasting, arguing the practice supports good password hygiene rather than undermining it.

The logic cuts in one direction: password managers work by generating credentials users never need to memorize. Block pasting, and many users substitute shorter, manually typed passwords instead — the exact outcome the restriction was meant to prevent.

Some sites impose paste blocks on email confirmation fields as well, on the theory that forcing a user to retype an address catches typos. Security researchers and usability advocates have long argued that approach creates more problems than it solves.

Availability

Force Paste is live now on Brave for desktop and iOS. The feature did not appear in testing on Brave for Android, leaving the mobile platform’s timeline unclear.

Brave, built on Chromium — the open-source engine that also underpins Google Chrome — markets itself on privacy and user-control features that it layers on top of the base browser. It reported 25 million daily active users as of 2023, according to the company’s own transparency figures.