Copyr
100% On-Device · Native SwiftUI
Finder gave up at 92%.
Copyr doesn't.
One unreadable file shouldn't cost you a three-hour copy. Copyr skips it and keeps going, hands you a report at the end, and lets you pause, resume, and carry on after a drive is unplugged — with every byte optionally checksummed.
v1.5.0 · macOS 14+, including 27 Golden Gate · Apple Silicon & Intel · Signed & notarized by Apple · No account
How it works
Drop. Preflight. Copy. Report.
Give it the files
Drop them on the window, press ⌘O, or right-click in Finder and pick Copy with Copyr. There's a Services entry too, which you can bind to a keyboard shortcut.
Read the preflight
Before a byte moves: how much free space you'll have left, which files are iCloud placeholders about to be downloaded, anything already unreadable, and whether the destination is a network mount.
Watch it run
A live speed graph of the last minute. Pause whenever you like — it flushes to disk first, so a pause is always a safe moment to unplug. Unplug without pausing and it waits for the drive.
Read the report
Every skip and failure, each with a reason and an errno. Copy it as text, or save the failures as CSV. A clean job just says so and gets out of your way.
Safe by design
Nothing is deleted unless you asked for it.
Copyr copies by default, and a copy never touches your originals. Move is a per-job choice you make in the destination sheet, never a saved default — it turns verification on for you, and it deletes an original only once that file’s copy is completely written — and checksummed, unless you deliberately turn verification back off. And a half-written file never sits somewhere wearing a real name, which is the other way a file copier can actually lose your work.
Checksums you can still check in five years
Tick Save a checksums.sha256 file in the copy sheet and Copyr leaves one in the destination when the job finishes. With verification on it costs nothing: every byte is already being hashed to check it, so now the digests get written down instead of thrown away. With verification off it hashes as it reads, which costs processing time but not one extra byte off either disk. The only files read back afterwards are the ones that landed without ever being read, an APFS clone or a same-volume rename, and the sheet says so before you start. The manifest also states in its own header what it does not cover, so a clean check can never quietly mean less than you think. Check any folder against one later and it reports what still matches, what changed, what's missing and what's new. Standard
Proof, later
shasum format on purpose: shasum -a 256 -c reads it, so an archive checked in five years doesn't need this app to still exist. Hashing a whole archive drive takes hours, so that run has a Stop button, and stopping a check keeps what it found, while stopping a write saves nothing rather than leaving a partial manifest that would quietly pass its own verification later.Retry just the ones that didn't land
A list of what failed is only half an answer. Most failures are a drive that was asleep or a file that was open, and both are fixed by trying again a minute later. One button queues a fresh job containing only those items — never as a move, because the originals of anything that didn't arrive are still the only copy.
From the report
Nothing half-written wears a real name
Content is written to
Atomic rename
<name>.copyr-part and renamed into place only once it's complete — and verified, if you asked for that. The classic failure where a file looks fine and then stops playing 40 minutes in is structurally impossible.An interrupted job leaves you the partial
Cancel deliberately and the partial file is cleaned up. Get interrupted — an unplug, a crash, a quit — and it's deliberately left behind, because that partial is exactly what lets the job resume instead of starting over.
Resumable
A name collision asks
If something already exists at the destination, Copyr asks — replace, skip, or keep both — with an apply to the rest option so you answer once per job, not once per file. The default silently loses nothing and silently duplicates nothing.
No silent overwrite
Failures are reported, not swallowed
A file Copyr couldn't read is one line in the end-of-job report with its reason and errno — not a silent omission you discover a year later. Save the failures as CSV and go re-rip exactly those.
Errno included
Everything on your Mac
Copying happens entirely on your machine. File names, sizes and paths are never uploaded, there's no account, and there's no analytics or telemetry.
Private
Features
Everything Finder's copy isn't.
A copy engine you can pause, resume, interrupt, verify and audit — built for the case where the copy is the only remaining copy.
One bad file doesn't end the job
A file that can't be read costs one line in the end-of-job report — not the other 2 TB. Finder's dialog stops the whole transfer and makes you start again; Copyr notes it and carries on.
The headline
Pause and resume, mid-file
Pause at a chunk boundary partway through a 40 GB file and pick it up later. Pausing flushes to disk first, which means a paused job is always a safe moment to unplug the drive.
Safe to unplug
Survives an unplug
Yank the drive mid-copy and the job waits for it rather than failing. Plug it back in and it continues from the last durable checkpoint — Copyr flushes every 64 MB, so that's the most work it can ever repeat. Quitting the app is survivable too.
≤ 64 MB redone
Live speed graph
The last minute of throughput, drawn as you go. The shape is the diagnostic: a sawtooth is a write cache draining, and a cliff that never recovers is a card starting to fail.
Read the shape
Optional checksum verification
SHA-256 of what was read against what landed. Off by default — it roughly halves throughput, and most people offloading a card don't want that every time. Turn it on when the copy is the only copy left.
SHA-256
Honest preflight
Before a byte moves: free space after the copy, iCloud placeholders that are about to be downloaded on your behalf, anything already unreadable, and whether the destination is a network mount.
Before you commit
Instant on the same APFS volume
A same-volume copy uses
clonefile(2)
clonefile(2) — immediate, and taking no extra space until one side changes. Automatically skipped when verification is on, because there's nothing to verify about blocks shared with the source.Keeps everything
Permissions, ACLs, timestamps, extended attributes and Finder tags all survive. Symlinks stay symlinks instead of being followed, and hard links are recreated as links rather than silently duplicated.
Metadata intact
End-of-job report
Every skip and every failure, each with a plain-English reason and the underlying errno. Copy the whole thing as text for a ticket, or save just the failures as CSV and go re-rip exactly those.
Text or CSV
Right-click in Finder
A Copy with Copyr item in Finder's context menu, plus a Services entry that works even without the extension switched on — and which you can give a keyboard shortcut in System Settings.
Finder extension
One job at a time, on purpose
Two copies fighting over the same bus finish later than the same two run back to back — and the progress readout stops meaning anything. Copyr queues them instead. When something urgent turns up behind a 400 GB card, start this one next (⇧⌘]) moves it to the front without disturbing the copy already running.
Queued · jump the line
Signed & notarized
Opens with a normal double-click — no "unidentified developer" warning, no Open Anyway, no Terminal. Signed with an Apple Developer ID and notarized by Apple. One universal build for Apple Silicon and Intel.
No warnings
Light and dark, properly
The whole window follows your Mac's appearance, including the Increase Contrast setting — and repaints when you change it, rather than waiting for a relaunch. Native SwiftUI, so it feels at home on macOS.
Thirteen languages, and you choose
English, German, Spanish, French, Italian, Japanese, Korean, Dutch, Polish, Portuguese (Brazil), Russian, Turkish and Simplified Chinese — picked in Copyr's own Settings rather than inherited from your Mac, so you can run Copyr in Spanish on an English Mac. The window switches the moment you choose, with no relaunch, and it is the whole window: every button, tooltip, preflight warning, report figure and VoiceOver announcement. Sizes, rates, counts and dates follow that choice too, so German reads “1,4 GB”.
13 languages
Tidying up can't lose a decision
A job that finished with names already taken keeps those files and asks you about them. ⇧⌘⌫ clears finished rows — but never those ones, because sweeping a row away would silently answer “leave them alone” for every file still waiting, with no undo. Copyr says which rows it kept and why.
No silent answer
Recent destinations
The last six places you copied to sit as chips under the destination card — one click instead of navigating the file picker again for the folder you've used for the last fifty jobs. A folder on a drive that isn't connected is grayed out and can't be chosen, so a copy can't quietly land in a same-named folder on your startup disk. The list never leaves your Mac.
One click
Built for everyone
Every job in the queue is reachable from the keyboard — ⌘O to choose files, ⌥⌘↓ and ⌥⌘↑ to walk the queue, ⇧⌘⌫ to clear finished rows — with VoiceOver labels and announcements throughout, in whichever of the thirteen languages you picked. Keyboard chords are spoken as words, so ⇧⌘⌫ is read as “shift command delete” rather than as punctuation. WCAG 2.1 AA contrast is checked in light and dark, and in both Increase Contrast variants, on every build.
WCAG 2.1 AA
What Copyr covers
Local, USB & Thunderbolt
Network volumes — best effort
Move is per job, never a default
Resume across a quit
Verify off by default
macOS 14+
Pricing
Free for you. Fair for work.
Personal use is free forever — the full app, unlimited copies, no key, no account, no nag screens. If Copyr earns its keep at your job, a one-time business license keeps it supported.
Personal
Free forever
For individuals and personal projects
- The full engine — every feature
- Unlimited copies, any size, any volume
- Pause, resume, verify, Finder menu item
- 100% on-device — nothing uploaded
- No account, no nag screens
- Free updates forever
Business
$5 / device
One-time payment — no subscription
- Everything in Personal
- Use commercially at work
- One-time payment — no subscription
- Free updates forever
- Supports solo indie development
The personal tier is the full app — buy a business license only if you use Copyr commercially. One seat per device, paid once, yours for life. Secure checkout via Stripe; your license key is emailed instantly.
Download & install
Get set up in seconds.
Download the app and drag it into Applications — that's it. No Terminal, no Homebrew, no sign-up. The Finder menu item takes one switch to turn on; the Services entry works straight away.
Version 1.5.0 · macOS 14+ · Free updates forever
macOS 14 Sonoma or later, including macOS 27 Golden Gate · Apple Silicon or Intel
Everything Copyr needs is built right into the app — native SwiftUI, nothing else to set up. One universal build runs natively on Apple Silicon and Intel.
Opens with a double-click
Copyr is signed with an Apple Developer ID and notarized by Apple, so it opens cleanly the first time — no
Open Anyway trip through System Settings, no Terminal. Open the DMG, drag Copyr into Applications, and launch it.Switching on the Finder menu item
macOS ships Finder extensions turned off. Once per Mac: System Settings › General › Login Items & Extensions › Added Extensions › Finder → tick Copyr. Copyr's Settings has a button that opens that pane directly. The
Services → Copy with Copyr entry works whether or not you do this.Your originals are safe
Copyr copies. It only ever deletes an original when you deliberately choose Move for that job — and then only after that file’s copy is completely written, and checksummed, because Move turns verification on for you. Incoming files land as
.copyr-part and are renamed into place only once complete, so a half-written file never wears a real name. Everything stays on your Mac; nothing is uploaded, ever.Check the file you downloaded
Copyr is signed with an Apple Developer ID and notarized by Apple, and macOS checks that every time you open it — that is the check that catches a file altered on its way to you. To confirm it yourself, compare the SHA-256 of your copy with the one published for the
Copyr.dmg this page serves.SHA-256 checksum
Published checksum
Run this on your download and compare
shasum -a 256 ~/Downloads/Copyr.dmg
Or have your Mac compare them for you: save Copyr.dmg.sha256 beside the download and run shasum -a 256 -c Copyr.dmg.sha256.
FAQ
Common questions.
Is Copyr really free?
Personal use is free forever — the whole app, unlimited copies, no account, no trial timer, no nag screens. If you use Copyr at work, a one-time $5 business license per device keeps it supported.
Is this like TeraCopy for Mac?
That's the idea. TeraCopy is the Windows tool people miss when they move to a Mac, and the usual advice — learn
rsync — isn't an answer for most people. Copyr covers the same ground natively: a copy queue, pause and resume, skip-and-continue instead of aborting, checksum verification, and a report at the end. It is its own app, not a port, and it isn't affiliated with TeraCopy or Code Sector.What happens when a file can't be read?
The job keeps going. The bad file is recorded with its reason and errno, and everything else copies normally. At the end you get a report listing every skip and failure, which you can copy as text or save as CSV. That's the whole point — one unreadable file on a failing card shouldn't cost you the other 2 TB.
What if I unplug the drive mid-copy?
The job pauses and waits for that volume to come back. Plug it in again and it continues from the last durable checkpoint — Copyr flushes and records its position every 64 MB, so at most 64 MB is ever redone. This survives quitting the app too. Pausing deliberately flushes to disk first, so a paused job is always a safe moment to unplug.
Can a copy leave me with a half-written file?
No. Content is written to a file named
<name>.copyr-part and only renamed into place once it is complete — and verified, if verification is on. So the classic failure where a file looks fine in Finder and then stops playing 40 minutes in can't happen. Cancelling a job deletes the partial; an interruption deliberately leaves it, because that partial is what makes resuming possible.Should I turn on verification?
It's off by default, on purpose — SHA-256 hashing both sides roughly halves throughput, and most people offloading a card don't want that every time. Turn it on when the copy is the only remaining copy: archiving a shoot, or migrating a drive you're about to erase. Note that verification also disables the instant same-volume clone, because there is nothing to verify about blocks shared with the source. It is also what makes Save a checksums.sha256 file free: every byte is being hashed anyway, so the digests are written down instead of discarded.
Does Copyr replace Finder's ⌘C?
No, and it can't. macOS gives no way to hook Finder's own copy engine — the extension API (
FIFinderSync) is a context menu and a badge, and that is all of it. So Copyr adds Copy with Copyr to Finder's right-click menu and to the Services menu, and those are how you route a copy through it instead. You can give the Services entry a keyboard shortcut in System Settings.Can Copyr move files, not just copy them?
Yes. Move is a per-job choice in the destination sheet, next to Copy — and it is deliberately not a saved default, because a destructive setting turned on once and forgotten is how someone loses a shoot. Every job starts at Copy. Choosing Move turns verification on for you, since the originals are deleted on the strength of those writes, and a file left waiting on a name-clash question keeps both its original and its source folder.
Does it work over the network?
It runs, and it is labelled best-effort in the app rather than pretending otherwise. Local, USB and Thunderbolt are the supported cases. Resuming across an SMB reconnect isn't something the filesystem gives reliable footing for, so Copyr tells you the destination is a network mount instead of quietly promising something it can't guarantee. Verifying to a share means every byte crosses the network twice, and Copyr says so at the point you choose it.
What languages does Copyr speak?
Thirteen: English, German, Spanish, French, Italian, Japanese, Korean, Dutch, Polish, Portuguese (Brazil), Russian, Turkish and Simplified Chinese. You pick one in Copyr's own Settings — it doesn't just follow your Mac, so you can run Copyr in Spanish on an English Mac — and the window switches immediately, with no relaunch. It's the whole window, including tooltips, preflight warnings, the report and every VoiceOver announcement, and sizes, transfer rates, counts and dates are formatted for the language you chose. The saved report, the CSV export and the
checksums.sha256 manifest deliberately stay in one fixed format, because those are read years later by other programs.Does Copyr upload anything?
No. Copying happens entirely on your Mac — file names, sizes and paths are never uploaded, there is no account, and there is no analytics or telemetry. Copyr makes two kinds of network request, and neither says anything about your files: the weekly update check described below, and, only if you have entered a business license key, a re-check of that key about once a day. With no key stored, that second request never happens.
How do I update Copyr?
Copyr checks for updates about once a week and offers them in-app — updates are signed, and one that doesn't verify is refused. You can also re-download the latest DMG from this page at any time and drag the new Copyr into Applications, replacing the old one.
Why doesn't the Finder menu item appear?
macOS ships Finder extensions switched off. Turn it on once per Mac in System Settings › General › Login Items & Extensions › Added Extensions › Finder, and tick Copyr. Copyr's Settings has a button that opens that pane directly. The Services entry works whether or not you do this.
Will macOS warn me about an unidentified developer?
No. Copyr is signed with an Apple Developer ID and notarized by Apple, so it opens with a normal double-click the first time — no Open Anyway trip through System Settings, no Terminal.