Skip to main content
March 31, 2022
Question

Feature request: Make the SSH agent work with any vault

  • March 31, 2022
  • 27 replies
  • 1931 views

Currently, the 1Password SSH agent only works with keys in the Personal or Private vaults. It would be great to expand this feature to work for shared vaults. That would be very helpful for development teams, particularly, to prevent everyone in the team from adding the private keys to their machines which is less safe and makes rotation troublesome.


1Password Version: 1Password 8.7.0
Extension Version: Not Provided
OS Version: MacOS 12.3

27 replies

October 21, 2022

I am also very keen for this to be implemented!

If this were implemented then I would likely have a vault dedicated to ssh keys I'm comfortable with using like this, so for me, I would prefer an opt in per vault.

January 3, 2023

+1 on this for many of the same reasons above!

January 3, 2023

+1. It's almost mandatory on an enterprise environment.

Jack_P_1P
1Password Employee
January 5, 2023

Hi @gparera / @wojo:

Thanks for your feedback! While I can't promise any timelines, as my colleague Marton mentioned, we are working on it. :)

Jack

January 9, 2023

Big +1. It would be amazing to have this.

Jack_P_1P
1Password Employee
January 9, 2023

Hey @Raggaer:

Thanks for your feedback! 🙂

Jack

February 9, 2023

+1 Would really looking forward to see this feature implemented. I Have spend like days figuring out why some ssh keys didn't work with the 1password agent till checked if they are in different vaults.

The 1Password SSH Agent is such a great feature to securely sync ssh key between devices and makes it so easy to use different keys per server. Please make this feature even better !!!

Jack_P_1P
1Password Employee
February 9, 2023

Hi @clowa:

Thanks for sharing, and glad to hear you like 1Password SSH Agent so far! 🙂

Jack

April 1, 2023

Same here. The SSH agent has been a game changer, especially for my work account. But having to duplicate the teams SSH key into private makes it onerous. Great to see you're working on it.

floris_1P
1Password Employee
April 19, 2023

@ismael092 @BobW @zfreeds @1Jeff @JustSomeNobody @TinTheParkin @nowayswiveltyro @wojo @gparera @Raggaer @clowa @lantrix

I wanted to let you know that we're currently working on a solution that allows for the following:
- Enable keys from other vaults than the Private vault.
- Create isolated setups with certain keys offered on a separate socket.
- Control the order in which keys are offered to SSH servers.

It would be great to get your feedback on our proposal, if you're (still) interested. You can do so by joining the #ssh-agent-config channel in our Slack workspace.