[15] Best (securest) way to pass credentials to Keyboard Maestro?

Question

I'm planning to use the CLI to fetch credentials (username, password, OTP code) for some web services that I use in an App instead of a browser (so I can't use the 1Password App/extension to log in). Keyboard Maestro should use these credentials to log me in (I already have a working macro that logs me in after fetching those credentials in the 1Password App).

What would be the best (securest) way to pass credentials from the CLI to Keyboard Maestro?

(My current macro uses Copy/Paste in 1Password Quick Access, but I'm afraid that using pbcopy might result in those credentials showing up in my clipboard manager, which excludes data from the 1Password App)

1Password Version: CLI 2.0 beta
Extension Version: n/a
OS Version: macOS Big Sur 11.6.1

Anonymous · Answer

Hi @XIII, and thank you for trying out our beta!

I understand that, currently, the main security concern about your workflow is the residue sensitive details that might remain in your clipboard after Copy/Pasting them, is this right? With this in mind, what do you think about a secure clipboard, that would clear itself after a certain period of time? For example, I imagine something like op item get ITEM --fields username --clip would save the username to the clipboard, and would clear after 30 seconds. Would such a feature be helpful for you?
Let us know what you think, and if you have any additional ideas for features that may ease your life as a dev.
Once again, thanks for trying out 1Password CLI 2.0 beta!

Horia

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded