Forum Discussion

tariqmi's avatar
tariqmi
New Member
1 hour ago

CLI: Hidden, cleartext password fields in JSON output

When using the 1Password CLI, I am seeing a field labeled "password" with the value stored as a string. For example:

    {
      "id": "",
      "type": "STRING",
      "label": "password",
      "value": "xxxxxxxxxxxxxxxxxxxx",
      "reference": "op://Private/XYZ/password"
    }

This field does not appear in the UI for the login entry. (I see this pattern in about 53 of the 475 items I analyzed, so, it's not universal). For the few items I took a deeper look at, it seems like the value of this string field matches the value I see in the "history" entry of the concealed password field (which also shows up for password history in the UI):

{
      "id": "password",
      "type": "CONCEALED",
      "purpose": "PASSWORD",
      "label": "logonPasswordVerify",
      "value": "yyyyyyyyyyyyyyyyyyyy",
      "entropy": 118.28349304199219,
      "reference": "op://Private/XYZ/logonPasswordVerify",
      "password_details": {
        "entropy": 118,
        "generated": true,
        "strength": "FANTASTIC",
        "history": ["xxxxxxxxxxxxxxxxxxxx"]
      }

Does anyone know what the purpose of these "hidden" cleartext password fields on a login entry are? Is this some data inconsistency or legacy artifact?

Regards,
- Tariq

No RepliesBe the first to reply