Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Unofficial 1Password SDK for Rust
For some small projects I wanted to use a secure way of handling secrets in my backend code, without taking out the big guns and adding a ton of infrastructure overhead (e.g: Azure Key Vault). After some "research" and diving into the op cli options and official Python, Javascript and Go SDKs, I thought I could probably build a simple wrapper around the core SDK library used in the Python SDK. After some trial implementations across multiple rust projects I thought it would be a nice addition to 1passwords ecosystem. If you're interested using the SDK head over to the github page at: https://github.com/Trendium-Labs/corteq-onepassword Curious about the security and inner workings? it's documented at https://github.com/Trendium-Labs/corteq-onepassword/blob/main/docs/ARCHITECTURE.md Please share your feedback, thoughts and use cases to improve this unofficial SDK. Ps:1P_Phil and team have been notified to see if and how to take this unofficial approach forward. Happy holidays! Brian
Frustrations with .env File Handling and Environments in 1Password
To whom it may concern, I just tried to add some basic .env files to 1Password and was honestly surprised at how difficult and unsatisfying the experience was. I’ve always considered 1Password a premium, polished product, and I’ve really enjoyed using it so far. But in this case, the lack of functionality is pretty disappointing. I know you recently launched the Environments beta, which seems like a step in the right direction, but it’s clearly not fully fleshed out. Most programming projects of mine include multiple environment files, not just one. Some values in these files are sensitive, and others aren’t, so we should be able to choose which fields are masked (as passwords) and which are shown normally. Importing and exporting environment files should also be seamless, currently, it’s anything but. But the biggest issue with Environments right now is that they apparently don’t belong to vaults. That means I can’t share them with coworkers, which makes them basically useless for team projects. What’s the point of having them at all if they can’t be shared? So I tried workarounds: First, I attempted to store the variables in a secure note. While you can manually add fields, that’s clunky and time-consuming. Then I tried uploading the .env file to the note, but on macOS, the file picker doesn’t show hidden files, and apparently there’s no way to make it do so. This made it impossible to upload the file with its original name, a really basic oversight, and one that shouldn’t exist in a premium product. Next, I tried using a Document item. At least the drag-and-drop upload worked (unlike Secure Notes), but now I’m locked into a document type that only allows a single file. That’s just not workable when a project has multiple secret environment files. Even worse, if I want to replace the file, the drag-and-drop UI disappears entirely, so I can’t upload a hidden file again. I’d have to delete the entire document and start over. That’s absurd. I genuinely respect the work you’ve done on 1Password; it’s one of the few tools I’ve used that felt reliable and trustworthy out of the box. But these gaps in functionality around something as basic as handling environment files are frustrating. And for a product at this price point, I expect this sort of workflow to just work. It’s hard to believe these limitations haven’t already been addressed. On top of that, it was surprisingly difficult to even find a proper way to give feedback like this. That feels like a mistake, if users can’t easily tell you where the product falls short, you miss the chance to improve it. Anyway, I needed to get this off my chest. I hope this feedback is helpful, and that we’ll see improvements to these features soon. Best regards, Joël Grosjean
Educational: TypeScript implementation of 1Password's security model + interactive explainer
Hi all! Not sure if this fits here, but since this concerns a TypeScript library I wrote, the 'developer' category seemed appropriate. -- I recently dove into the 1Password white paper and built a TypeScript library that implements the security model it describes. This was a purely educational exercise for me to gain a deeper grasp on how password managers, and 1Password in particular, work. I'm a web developer, not a cryptographer or security expert, so please don't use it in production or trust it with real credentials. I'm also not affiliated with 1Password or AgileBits, though they did greenlight publication of the library, which I really appreciate. I verified the implementation is fully compatible with real vault data by testing against actual API responses from the official web application, which I think proves I actually learned something :) and that the white paper is very complete and pretty digestible. After finishing the library, I built an interactive explainer[1] based on it, that walks through the security model step-by-step, hoping others might learn from it as well. The library is open source[2], and I've written a blog post[3] giving some more context. I'd love to hear any feedback on claims, terminologies, or other issues I got wrong, suggestions for improvement, whatever you've got. Thanks again to the 1Password team for publishing their excellent white paper, which enabled this learning opportunity! Cheers, Ely [1] https://passwords.lgtm.it [2] https://github.com/edeckers/lib1password-unofficial [3] https://medium.branie.it/stopping-bad-actors-inside-1passwords-security-model-8c65c6acb9ff
1Password Connect and Plan Upgrade
Hi im currently using 1password team edition and looking to upgrade to Buisness, and have a question. Upgrading will that affect the token that i have and will i have to reissue it? Secondly, we'd also be looking to enable SSO would that also impact the usage of the token, also when troubleshooting we make use of 1password desktop would that impact the desktop usage as well?
Service Account Permissions Issue: Vault Access Restricted to Read-Only
Hi all, I'm having trouble with the permissions of the service account. Even though I grant it read, write and share permissions on a vault when creating the service account, the account is actually created with read-only permissions. This is evident both from the attached image and from the code I am running (Python SDK) which can access the vault for reading, but not for writing. The error I am getting is: you do not have the right permissions to perform this action: not sufficient permissions for the item update operation I also tried to create the service account again with all the necessary permissions, but the problem persists, even though I grant it permission to create vaults. I have no idea what it could be or what else I could try. ThanksImprovements to 1Password Community coming May 22nd
Since re-launching 1Password Community in February, we’ve been taking note of every piece of feedback you’ve all shared so we can continue to make improvements. One trend we’ve seen in the feedback is that we need to make it clearer what posts should go where. The feedback also made it clear that we needed to simplify the navigation so people can get where they want to go quickly and easily. To that end, on Thursday, May 22nd we’ll be re-organizing 1Password Community to make it easier to navigate, find what you’re looking for, and know where to post. We’ll be simplifying the discussion board structure, reducing clutter on the 1Password Community homepage and in the navigation bar at the top of every page. We know lots of folks come here for support, so we’ve also added Get help to the main navigation to help you find existing answers, post a new question in the community, or contact 1Password Support. We hope you’ll find these updates helpful! What’s changing? In the new structure, we’ll have the following discussion boards: Announcements: This is a new discussion board where 1Password staff can share news and updates. 1Password at work: If you’re using 1Password products in your business, this is the best place to get help and share what you’ve learned. 1Password at home: This is the place to get help and talk about all things 1Password for personal cybersecurity and privacy. Developers: Just like before, we’ll continue to have a space for developers to chat with each other and members of the 1Password team. Lounge: Just like before, this space is for off-topic, just-for-fun, and 1Password-adjacent topics. Current discussion boards New discussion boards Lounge Lounge Password Manager 1Password at home Device Trust 1Password at work Passage Developers Developers Developers 1Password Administrators 1Password at work 1Password Developers: SDKs Developers Announcements Do I need to do anything? Nope! Your profile and credentials will stay the same. Will any posts be going away? No, any posts in discussion boards that are being retired will be moved to other discussion boards so that nothing is lost. For any bookmarked discussions that are moved, their old url will redirect you to the new one. When will these changes happen? These changes are scheduled for Thursday, May 22nd. We will share any updates if that changes. Staff will be standing by to help with any questions or concerns. If you have any feedback, please don’t hesitate to reply to this thread. We love to hear from you and will continue to make improvements based on your feedback. Beyond these imminent changes, you can also start new discussion threads in the Lounge and use the tag Community Feedback at any time to share your suggestions!
