Copyr
100% On-Device · Native SwiftUI

Finder gave up at 92%.
Copyr doesn't.

One unreadable file shouldn't cost you a three-hour copy. Copyr skips it and keeps going, hands you a report at the end, and lets you pause, resume, and carry on after a drive is unplugged — with every byte optionally checksummed.

v1.2.0 · macOS 14+ · Apple Silicon & Intel · Signed & notarized by Apple · No account

How it works

Drop. Preflight. Copy. Report.

Give it the files
Drop them on the window, press ⌘O, or right-click in Finder and pick Copy with Copyr. There's a Services entry too, which you can bind to a keyboard shortcut.
Read the preflight
Before a byte moves: how much free space you'll have left, which files are iCloud placeholders about to be downloaded, anything already unreadable, and whether the destination is a network mount.
Watch it run
A live speed graph of the last minute. Pause whenever you like — it flushes to disk first, so a pause is always a safe moment to unplug. Unplug without pausing and it waits for the drive.
Read the report
Every skip and failure, each with a reason and an errno. Copy it as text, or save the failures as CSV. A clean job just says so and gets out of your way.

Safe by design

Your originals are never touched.

Copyr copies. It never deletes a source file, and it never lets a half-written file sit somewhere wearing a real name — the two ways a file copier can actually lose your work.

Nothing half-written wears a real name
Content is written to <name>.copyr-part and renamed into place only once it's complete — and verified, if you asked for that. The classic failure where a file looks fine and then stops playing 40 minutes in is structurally impossible.
Atomic rename
An interrupted job leaves you the partial
Cancel deliberately and the partial file is cleaned up. Get interrupted — an unplug, a crash, a quit — and it's deliberately left behind, because that partial is exactly what lets the job resume instead of starting over.
Resumable
A name collision asks
If something already exists at the destination, Copyr asks — replace, skip, or keep both — with an apply to the rest option so you answer once per job, not once per file. The default silently loses nothing and silently duplicates nothing.
No silent overwrite
Failures are reported, not swallowed
A file Copyr couldn't read is one line in the end-of-job report with its reason and errno — not a silent omission you discover a year later. Save the failures as CSV and go re-rip exactly those.
Errno included
Everything on your Mac
Copying happens entirely on your machine. File names, sizes and paths are never uploaded, there's no account, and there's no analytics or telemetry.
Private

Features

Everything Finder's copy isn't.

A copy engine you can pause, resume, interrupt, verify and audit — built for the case where the copy is the only remaining copy.

One bad file doesn't end the job
A file that can't be read costs one line in the end-of-job report — not the other 2 TB. Finder's dialog stops the whole transfer and makes you start again; Copyr notes it and carries on.
The headline
Pause and resume, mid-file
Pause at a chunk boundary partway through a 40 GB file and pick it up later. Pausing flushes to disk first, which means a paused job is always a safe moment to unplug the drive.
Safe to unplug
Survives an unplug
Yank the drive mid-copy and the job waits for it rather than failing. Plug it back in and it continues from the last durable checkpoint — Copyr flushes every 64 MB, so that's the most work it can ever repeat. Quitting the app is survivable too.
≤ 64 MB redone
Live speed graph
The last minute of throughput, drawn as you go. The shape is the diagnostic: a sawtooth is a write cache draining, and a cliff that never recovers is a card starting to fail.
Read the shape
Optional checksum verification
SHA-256 of what was read against what landed. Off by default — it roughly halves throughput, and most people offloading a card don't want that every time. Turn it on when the copy is the only copy left.
SHA-256
Honest preflight
Before a byte moves: free space after the copy, iCloud placeholders that are about to be downloaded on your behalf, anything already unreadable, and whether the destination is a network mount.
Before you commit
Instant on the same APFS volume
A same-volume copy uses clonefile(2) — immediate, and taking no extra space until one side changes. Automatically skipped when verification is on, because there's nothing to verify about blocks shared with the source.
clonefile(2)
Keeps everything
Permissions, ACLs, timestamps, extended attributes and Finder tags all survive. Symlinks stay symlinks instead of being followed, and hard links are recreated as links rather than silently duplicated.
Metadata intact
End-of-job report
Every skip and every failure, each with a plain-English reason and the underlying errno. Copy the whole thing as text for a ticket, or save just the failures as CSV and go re-rip exactly those.
Text or CSV
Right-click in Finder
A Copy with Copyr item in Finder's context menu, plus a Services entry that works even without the extension switched on — and which you can give a keyboard shortcut in System Settings.
Finder extension
One job at a time, on purpose
Two copies fighting over the same bus finish later than the same two run back to back — and the progress readout stops meaning anything. Copyr queues them instead.
Queued
Signed & notarized
Opens with a normal double-click — no "unidentified developer" warning, no Open Anyway, no Terminal. Signed with an Apple Developer ID and notarized by Apple. One universal build for Apple Silicon and Intel.
No warnings
Light and dark, properly
The whole window follows your Mac's appearance, including the Increase Contrast setting — and repaints when you change it, rather than waiting for a relaunch. Native SwiftUI, so it feels at home on macOS.
Built for everyone
Keyboard-driven — ⌘O to choose files, ⇧⌘⌫ to clear finished rows — with VoiceOver labels throughout and WCAG 2.1 AA contrast checked in both light and dark on every build.
WCAG 2.1 AA
What v1.0 covers
Local, USB & Thunderbolt Network volumes — best effort Move is per job, never a default Resume across a quit Verify off by default macOS 14+

Pricing

Free for you. Fair for work.

Personal use is free forever — the full app, unlimited copies, no key, no account, no nag screens. If Copyr earns its keep at your job, a one-time commercial license keeps it supported.

Personal
Free forever
For individuals and personal projects
  • The full engine — every feature
  • Unlimited copies, any size, any volume
  • Pause, resume, verify, Finder menu item
  • 100% on-device — nothing uploaded
  • No account, no nag screens
  • Free updates forever
Download — Free
Commercial
$5 / device
One-time payment — no subscription
  • Everything in Personal
  • Use commercially at work
  • One-time payment — no subscription
  • Free updates forever
  • Supports solo indie development

The personal tier is the full app — buy a commercial license only if you use Copyr commercially. One seat per device, paid once, yours for life. Secure checkout via Stripe; your license key is emailed instantly.


Download & install

Get set up in seconds.

Download the app and drag it into Applications — that's it. No Terminal, no Homebrew, no sign-up. The Finder menu item takes one switch to turn on; the Services entry works straight away.

Download Copyr for Mac — Free

Version 1.2.0 · macOS 14+ · Free updates forever

macOS 14 Sonoma or later · Apple Silicon or Intel
Everything Copyr needs is built right into the app — native SwiftUI, nothing else to set up. One universal build runs natively on Apple Silicon and Intel.
Opens with a double-click
Copyr is signed with an Apple Developer ID and notarized by Apple, so it opens cleanly the first time — no Open Anyway trip through System Settings, no Terminal. Open the DMG, drag Copyr into Applications, and launch it.
Switching on the Finder menu item
macOS ships Finder extensions turned off. Once per Mac: System Settings › General › Login Items & Extensions › Added Extensions › Finder → tick Copyr. Copyr's Settings has a button that opens that pane directly. The Services → Copy with Copyr entry works whether or not you do this.
Your originals are safe
Copyr copies — it never deletes a source file, and v1.0 has no move operation at all. Incoming files land as .copyr-part and are renamed into place only once complete, so a half-written file never wears a real name. Everything stays on your Mac; nothing is uploaded, ever.

FAQ

Common questions.

Is Copyr really free?
Personal use is free forever — the whole app, unlimited copies, no account, no trial timer, no nag screens. If you use Copyr at work, a one-time $5 commercial license per device keeps it supported.
Is this like TeraCopy for Mac?
That's the idea. TeraCopy is the Windows tool people miss when they move to a Mac, and the usual advice — learn rsync — isn't an answer for most people. Copyr covers the same ground natively: a copy queue, pause and resume, skip-and-continue instead of aborting, checksum verification, and a report at the end. It is its own app, not a port, and it isn't affiliated with TeraCopy or Code Sector.
What happens when a file can't be read?
The job keeps going. The bad file is recorded with its reason and errno, and everything else copies normally. At the end you get a report listing every skip and failure, which you can copy as text or save as CSV. That's the whole point — one unreadable file on a failing card shouldn't cost you the other 2 TB.
What if I unplug the drive mid-copy?
The job pauses and waits for that volume to come back. Plug it in again and it continues from the last durable checkpoint — Copyr flushes and records its position every 64 MB, so at most 64 MB is ever redone. This survives quitting the app too. Pausing deliberately flushes to disk first, so a paused job is always a safe moment to unplug.
Can a copy leave me with a half-written file?
No. Content is written to a file named <name>.copyr-part and only renamed into place once it is complete — and verified, if verification is on. So the classic failure where a file looks fine in Finder and then stops playing 40 minutes in can't happen. Cancelling a job deletes the partial; an interruption deliberately leaves it, because that partial is what makes resuming possible.
Should I turn on verification?
It's off by default, on purpose — SHA-256 hashing both sides roughly halves throughput, and most people offloading a card don't want that every time. Turn it on when the copy is the only remaining copy: archiving a shoot, or migrating a drive you're about to erase. Note that verification also disables the instant same-volume clone, because there is nothing to verify about blocks shared with the source.
Does Copyr replace Finder's ⌘C?
No, and it can't. macOS gives no way to hook Finder's own copy engine — the extension API (FIFinderSync) is a context menu and a badge, and that is all of it. So Copyr adds Copy with Copyr to Finder's right-click menu and to the Services menu, and those are how you route a copy through it instead. You can give the Services entry a keyboard shortcut in System Settings.
Can Copyr move files, not just copy them?
Yes. Move is a per-job choice in the destination sheet, next to Copy — and it is deliberately not a saved default, because a destructive setting turned on once and forgotten is how someone loses a shoot. Every job starts at Copy. Choosing Move turns verification on for you, since the originals are deleted on the strength of those writes, and a file left waiting on a name-clash question keeps both its original and its source folder.
Does it work over the network?
It runs, and it is labelled best-effort in the app rather than pretending otherwise. Local, USB and Thunderbolt are the supported cases. Resuming across an SMB reconnect isn't something the filesystem gives reliable footing for, so Copyr tells you the destination is a network mount instead of quietly promising something it can't guarantee. Verifying to a share means every byte crosses the network twice, and Copyr says so at the point you choose it.
Does Copyr upload anything?
No. Copying happens entirely on your Mac — file names, sizes and paths are never uploaded, there is no account, and there is no analytics or telemetry. The one network connection Copyr makes is the update check described below, which sends nothing about your files.
How do I update Copyr?
Copyr checks for updates about once a week and offers them in-app — updates are signed, and one that doesn't verify is refused. You can also re-download the latest DMG from this page at any time and drag the new Copyr into Applications, replacing the old one.
Why doesn't the Finder menu item appear?
macOS ships Finder extensions switched off. Turn it on once per Mac in System Settings › General › Login Items & Extensions › Added Extensions › Finder, and tick Copyr. Copyr's Settings has a button that opens that pane directly. The Services entry works whether or not you do this.
Will macOS warn me about an unidentified developer?
No. Copyr is signed with an Apple Developer ID and notarized by Apple, so it opens with a normal double-click the first time — no Open Anyway trip through System Settings, no Terminal.
Also by the same solo developer Diskr Copyr fills the drive. Diskr tells you what's on it — every file mapped into an interactive sunburst, so the space hogs are impossible to miss. Free for personal use.

Like what I make?

All my apps are free for personal use. If they save you time or make your day a little easier, a tip keeps me going — it goes straight to development, no middleman.

Hear about new apps first

One short email when twoplus11 ships a new Mac app. No spam — and unsubscribing is one click that works instantly.

One confirmation email first — you're only in if you click it.