How to Configure S3 Cloud Sync for Cross-Device Clipboard

Clipboard synchronization should be fast, reliable, and secure. While local network sync (Nearby Sync) is ideal when your devices are on the same Wi-Fi, S3-compatible cloud synchronization keeps your clipboard history updated even when you are on different networks (e.g., home and office).

Octoclip supports any S3-compatible object storage provider, such as Cloudflare R2, AWS S3, Aliyun OSS, Tencent Cloud COS, and Bitiful Cloud. This guide walks you through the concepts and step-by-step configuration.

What Is S3 Cloud Sync?

S3 (Simple Storage Service) is a widely used protocol for cloud storage. By configuring S3 cloud sync, Octoclip stores your clipboard history in an encrypted database file within your own private cloud storage bucket.

Whenever you copy something on your phone or computer, the app safely pushes the update to your storage bucket, and your other devices pull the change shortly after.

Why Use S3-compatible Storage?

  • Private by design — You own the storage bucket, and Octoclip encrypts your clipboard content locally before it leaves your device. Your clips sit in storage you control, not on someone else's server.
  • Cross-network Sync — Seamless clipboard sync between home, office, and mobile cellular networks.
  • Cost-effective — Most S3-compatible services offer generous free tiers (e.g., Cloudflare R2's free tier includes 10 GB of stored data per month) which is more than enough for years of clipboard text and image sync.

Step-by-Step Configuration (Using Bitiful Cloud as an Example)

1

Create an account and a private bucket

  1. Visit Bitiful Cloud (or your preferred S3 provider console) and sign in.
  2. Navigate to Object Storage -> Bucket List and click Create Bucket.
  3. Enter a unique bucket name (e.g., octoclip-sync-yourname) and set the permissions to Private.
  4. Save your bucket name and region.
Note

Storage bucket names must be globally unique across the cloud service provider. Once created, a bucket name cannot be modified.

2

Generate restricted access keys

To allow Octoclip to read and write to your bucket securely, generate API access keys:

  1. Navigate to AccessKey or API Keys in your S3 provider's console.
  2. We highly recommend creating a Sub-User (IAM User) with access restricted only to the bucket you created, rather than using your main account root keys.
  3. Generate a new key pair and copy down the Access Key (ID) and Secret Key (Secret).
  4. Ensure the user or access key has full Read and Write permissions for the designated bucket.
Treat your keys as secrets

Your Access Key and Secret Key grant read/write access to the bucket. Don't share them, paste them into chats, commit them to a repo, or include them in screenshots or support logs. Prefer a least-privilege sub-user scoped to this one bucket, and rotate or revoke the key if it's ever exposed.

3

Enter the credentials in the Octoclip client

Open Octoclip on any device (macOS, iOS, Windows, or Android):

  1. Go to Settings -> Cloud Sync.
  2. Select S3 as your sync type.
  3. Fill in the connection parameters:
    • Access Key: The API access key ID you copied.
    • Secret Key: The API secret key.
    • Endpoint: The S3 endpoint URL (e.g., s3.bitiful.com or https://<account_id>.r2.cloudflarestorage.com for Cloudflare).
    • Bucket: The exact name of your bucket.
    • Region: The region code (e.g., cn-east-1 or auto).
  4. Click Test Connection. Once successful, tap Save and Enable.

Now configure S3 sync on your other devices using the exact same parameters to link your clip histories.

Encrypted Clipboard Sync: What Actually Leaves Your Device

A clipboard regularly holds passwords, addresses, and private messages, so it matters what an encrypted clipboard sync actually does:

  • You set the encryption key. When you configure Cloud Sync, you provide an encryption key. Octoclip encrypts each clip on your device with that key before upload, so what lands in your bucket is ciphertext, not readable text. Your storage credentials and the key are kept in your device's system keychain (or the platform's equivalent secure store) — not on an Octoclip server.
  • The other device needs the same setup. To read and decrypt the synced history, each of your devices must be configured with the same storage settings and the same encryption key. Without the key, the data in the bucket can't be decrypted by anyone — including Octoclip.
  • The bucket is yours. You created it, you hold its access keys, and you can revoke Octoclip's access or delete the data at any time.
  • End-to-end between your own devices. When one device uploads, Octoclip sends a lightweight, anonymous notification to your other devices on the same Cloud Sync account so they know new data is ready. That notification only carries a "go fetch" signal — the encrypted clip itself travels through your own S3/WebDAV storage, and Octoclip never sees your clip content or your key.

This is the practical difference between syncing through storage you own and routing your clipboard through a vendor's cloud. If you'd rather skip the cloud entirely, Nearby Sync moves clips over your local network instead.

Frequently Asked Questions

Is S3 sync free?

Octoclip does not charge extra for S3 sync features. Any fees would come from your S3 storage provider. However, since clipboard sync databases are typically under 50 MB, you will remain well within the free tiers of providers like Cloudflare R2 or Backblaze B2 indefinitely.

Does S3 sync support images and files?

Yes. Octoclip syncs text, URLs, and image clips. To save bandwidth and storage, you can configure maximum size limits for image sync in the settings. Large files (like videos) are not synced to prevent performance lags.

How often does the sync run?

Octoclip runs a lightweight sync merge immediately after it detects a new copy event, and periodically pulls updates from the cloud when the app is active, delivering near-instant updates across devices.

Can I self-host my clipboard sync?

Yes. Octoclip talks to any S3-compatible endpoint, which includes self-hosted object storage such as MinIO running on your own server or NAS — point the Endpoint field at your instance and the same steps apply. Octoclip also supports WebDAV as an alternative Cloud Sync backend.

Troubleshooting

Connection failed or timed out?

Verify your Endpoint and Region fields. Ensure you include https:// in the endpoint if required by your provider. Check if your local network is blocking the S3 provider domain.

Permission Denied (403 Forbidden)?

Double check your Access Key and Secret Key. Ensure the sub-user has policies attached allowing s3:GetObject, s3:PutObject, and s3:ListBucket operations on the designated bucket.

Need Extra Assistance?

If your cloud sync fails to initialize, reach out to us at support@octoclip.app or join the discussion in our Community Forum. Please provide:

  • The S3 provider name (e.g., Cloudflare, Bitiful, Aliyun)
  • Your device OS versions
  • Any connection error messages displayed by the app

如何配置 S3 云同步实现跨设备剪贴板同步

剪贴板同步应该是快速、稳定且安全的。虽然在设备处于同一 Wi-Fi 网络下时，附近同步（Nearby Sync）是最理想的选择，但基于 S3 的云同步服务可以确保即使在不同网络环境（例如公司和家中）下，你的剪贴板历史也能实时保持一致。

章鱼速贴支持任何兼容 S3 协议的对象存储服务，如 缤纷云（Bitiful）、阿里云 OSS、腾讯云 COS、Cloudflare R2 和 AWS S3。本指南将为你介绍 S3 云同步的原理并提供详细的配置步骤。

什么是 S3 云同步？

S3（简单存储服务）是目前使用最广泛的对象存储协议。通过配置 S3 云同步，章鱼速贴会将你加密后的剪贴板数据存储在你自己私有的云存储桶中。

当你在手机或电脑上复制内容时，客户端会安全地将更新推送到你的存储桶，其他设备会很快拉取这些更新。

为什么选择 S3 兼容存储？

  • 隐私优先的设计 — 存储桶完全属于你自己，章鱼速贴会在内容离开设备之前于本地完成加密。你的剪贴数据存放在你掌控的存储中，而不是别人的服务器上。
  • 跨网络无缝连接 — 实现家庭、办公室、以及移动蜂窝网络环境下的跨设备无缝同步。
  • 极低的使用成本 — 大多数 S3 兼容服务都提供极其慷慨的免费额度（例如 Cloudflare R2 的免费档每月包含 10 GB 存储容量，缤纷云的低频存储也非常便宜），这对于剪贴板的文字和图片同步来说几乎常年免费。

详细配置步骤（以缤纷云为例）

1

创建账号和私有存储桶

  1. 登录 缤纷云官网 并进入控制台。
  2. 在控制台中进入 对象存储 -> 桶列表，点击 创建桶。
  3. 输入一个唯一的存储桶名称（例如 octoclip-sync-yourname），并将访问权限设置为 私有。
  4. 记录下创建好的存储桶名称与区域。
说明

存储桶（Bucket）名称在云服务商系统内必须是全局唯一的，创建后无法修改名称。

2

获取受限的访问密钥

为了让章鱼速贴客户端能够安全地读写你的存储桶，需要生成 API 访问密钥：

  1. 进入控制台的 AccessKey 或 用户管理。
  2. 我们强烈建议你创建一个 子用户（IAM），并仅赋予其针对刚创建的存储桶的访问权限，而不是直接使用主账号的根密钥。
  3. 生成一组新的密钥对，并妥善复制保存 Access Key（访问密钥 ID）与 Secret Key（私有密钥）。
  4. 确保该子用户已拥有对指定存储桶的 读写权限。
把密钥当作机密对待

Access Key 和 Secret Key 拥有对存储桶的读写权限。不要分享、不要粘贴进聊天、不要提交到代码仓库，也不要出现在截图或排查日志里。优先使用仅限本存储桶的最小权限子用户；一旦泄露，请立即轮换或吊销密钥。

3

在章鱼速贴客户端中填入凭据

打开你任意设备（macOS、iOS、Windows 或 Android）上的章鱼速贴客户端：

  1. 进入 设置 -> 云同步。
  2. 选择 S3 作为同步类型。
  3. 填入以下连接参数：
    • Access Key: 你保存的 Access Key。
    • Secret Key: 你保存的 Secret Key。
    • Endpoint: 你的 S3 终端节点 URL（例如 s3.bitiful.com，或 Cloudflare 的 https://<account_id>.r2.cloudflarestorage.com）。
    • Bucket: 你创建的存储桶名称。
    • Region: 存储桶所在的区域（例如 cn-east-1，如果服务商没有要求可填 auto）。
  4. 点击 测试连接。连接成功后，点击 保存并启用。

接下来，在你的其他设备上使用完全相同的参数进行配置，即可将它们安全地绑定到同一个剪贴板历史记录。

加密的剪贴板同步：到底有什么离开了你的设备

剪贴板里经常装着密码、地址和私人消息，所以"加密同步"具体做了什么很重要：

  • 加密密钥由你设定。 配置云同步时，你需要填入一个加密密钥。章鱼速贴会在本地用该密钥加密每一条剪贴后再上传，因此落到存储桶里的是密文，不是可读文本。你的存储凭据和加密密钥都保存在本机系统钥匙串（或对应平台的安全存储）里，不会上传到章鱼速贴的服务器。
  • 另一台设备需要相同的配置。 要读取并解密同步的历史，你的每台设备都必须配置相同的存储参数和相同的加密密钥。没有这把密钥，存储桶里的数据谁都无法解密——章鱼速贴也不行。
  • 存储桶是你自己的。 你创建、你持有它的访问密钥，随时可以吊销章鱼速贴的访问权限或删除数据。
  • 在你自己的设备之间端到端加密。 当一台设备上传后，章鱼速贴会给同一云同步账户下的其他设备发一个轻量的匿名通知，提示"有新数据了"。该通知只传递一个"去取数据"的信号——加密后的剪贴本身走的是你自己的 S3/WebDAV 存储，章鱼速贴既看不到剪贴内容，也拿不到你的密钥。

这就是"同步走自己的存储"和"剪贴板路过厂商云端"之间的实际区别。如果想完全不走云端，附近同步 可以只通过本地网络传输剪贴内容。

常见问题 FAQ

使用 S3 同步需要收费吗？

章鱼速贴不收取任何 S3 云同步功能费用。所有的存储费用由你的 S3 提供商直接结算。由于剪贴板同步数据库通常非常小（小于 50 MB），你将几乎永远处于 Cloudflare R2 等提供商的免费额度内，无需支付任何费用。

支持同步图片和文件吗？

支持。章鱼速贴会同步文本、网页链接和图片剪贴。为了节省你的移动流量，你可以在设置中限制同步图片的最大体积。过大的文件（如视频）不会进行云端同步，以防止连接阻塞。

同步的频率是怎样的？

当应用检测到新的复制事件时，会立即发起轻量级同步合并；当应用处于活动状态时，也会定期拉取云端的最新改动，从而实现接近实时的无缝同步。

可以自建（self-host）剪贴板同步吗？

可以。章鱼速贴支持任何兼容 S3 协议的端点，包括跑在你自己服务器或 NAS 上的对象存储（如 MinIO）——把 Endpoint 指向你的实例即可，其余步骤完全相同。此外章鱼速贴也支持 WebDAV 作为云同步后端。

故障排查

连接失败或请求超时？

请仔细检查 Endpoint（终端节点）和 Region（区域）输入是否正确。请确保 Endpoint 包含了 https:// 前缀（如果服务商有要求）。另外，请检查你的局域网环境是否屏蔽了该 S3 服务商的域名。

权限不足 (403 Forbidden)？

请重新确认你的 Access Key 和 Secret Key 是否输入正确。确保为该密钥授权了针对指定存储桶的 s3:GetObject、s3:PutObject 和 s3:ListBucket 操作权限。

仍需帮助？

如果你在开启云同步时遇到困难，可以通过 support@octoclip.app 联系我们，或者加入我们的 社区交流群。请在邮件中附带：

  • 你所使用的 S3 服务商名称（如 Cloudflare, 缤纷云, 阿里云）
  • 你的设备系统版本
  • 客户端显示的具体连接错误信息