Developer newsletter: October 2025

Hi, friends 👋

If there’s one thing we can (hopefully) all agree on, it’s the importance of open source software.

In this month’s newsletter, we’re highlighting 1Password for Open Source – a program that offers free 1Password Teams accounts to eligible open source contributors. 

And to build on our developer product news, 1Password Environments now supports local .env files! 🎉 Learn how to populate .env files from 1Password Environments and keep your secrets out of plaintext.

We’ve also included our favorite recent contributions from the 1Password Community and blog posts written by the 1Password team. 

Enjoy!

New: Introducing local .env file support in 1Password

To streamline local development, 1Password Environments now supports mounting .env files in your projects. Protecting your development credentials in 1Password keeps them more secure, and makes them easier to rotate and share with other team members.

This beta launch introduces mounted .env files, which use a special type of FIFO file to stream the environment variables to the application that needs them. This is done without them ever existing in plaintext on disk and keeps them protected behind an explicit authorization prompt.

Read the Community announcement 👉

Watch the demo 👉

1Password for Open Source: Free Teams accounts

If you’re building software, you’re likely using open source projects. (We know we are here at 1Password!) 

To support the open source community, 1Password offers free 1Password Teams accounts to eligible contributors. Using a password manager will keep your credentials and secrets safe while you’re busy building new features and resolving issues.

Learn how to apply 👉

1Password ♥️ open source

Lots of incredible teams are already part of our 1Password for Open Source project, and we want to share a few of our favorites:

The FAIR Package Manager is an open source initiative by The FAIR Web Foundation, which is a Linux Foundation project. It’s a decentralized alternative to the central WordPress.org plugin and theme ecosystem.

Helm is an open source package manager to help you manage Kubernetes applications. Use Helm Charts to define, install, and upgrade complex Kubernetes applications.

TYPO3 CMS is an open source PHP content management system for enterprise web projects. It can be used out of the box or extended and customized as needed.

From the 1Password Community blog

Portability without compromise: 1Password helps author a new standard for secure credential transfer

The FIDO Alliance recently published the Credential Exchange Format (CXF) as a Proposed Standard. This will help provide a consistent way to move from one provider to another without exporting sensitive data to a plaintext CSV file.

How an internal hack became a 1Password integration for Vals

In this developer spotlight, learn how Zois Pagoulatos built his own solution for handling secret injection in Kubernetes apps using 1Password’s SDKs, Helm, and some additional dev tools. 

Keep your cryptocurrency wallet keys out of .env files

Zak Cole shares how his private wallet key – stored in a local .env file – was stolen via a malicious IDE extension. The extension had an intentional typo in it (a lowercase L replaced by a capital i) making it easy to mistake for the legitimate extension. 

Community corner

We’ve seen lots of great contributions from developers in the 1Password Community. Here are some that caught our eye:

1Password runtime secret injection for Azure container apps

You already know we love anything that keeps dev secrets from being written in plaintext. In this tutorial, you’ll learn how to inject environment variables stored as secret reference URIs from 1Password into an Azure Container App (ACA) at runtime.

opx – a 1Password companion CLI

opx is an open source CLI that builds on the 1Password CLI. Try it out or reach out to the project owner in the 1Password Community discussion to learn more.

Join the 1Password team!

Love 1Password, coding, and cybersecurity as much as we do? 

Check out our job board and apply to one of our many remote positions. There’s a wide range of open technical roles, including those with a focus in AI, management, or Rust. 

Keep this conversation going on 1Password Community

That's it for this month. If you want to chat about anything covered in this newsletter, join the 1Password developer Slack or start a new discussion thread here in 1Password Community!

– The developer team at 1Password