Get started with 1Password Developer

1Password Developer is a collection of features that allows you to discover and set up developer tools, view and create SSH keys, review your recent SSH activity, and check your local disk for vulnerable credentials.

Before you can use 1Password Developer, you’ll need to sign up for a 1Password account and set up 1Password for Mac, Windows, or Linux.

Turn on 1Password Developer

To turn on the 1Password Developer setting in 1Password for Mac, Windows, or Linux:

1. Open and unlock the 1Password desktop app.
2. Select your account or collection at the top of the sidebar and choose Settings > Developer.
3. Turn on Show 1Password Developer in Sidebar.
4. To view activity logs with your SSH activity, make sure Record and display activity is also turned on.

   This setting is turned on by default when you turn on 1Password Developer in the sidebar.

1Password SSH Agent

In the 1Password desktop app, select Developer in the sidebar, then select View SSH agent.

After you set up the 1Password SSH Agent, you’ll be able to securely manage your SSH keys, sign Git commits, and authorize all your SSH connections with 1Password. You can then use the Developer section in the app to view and create private keys and review your recent SSH agent activity.

Available SSH keys

This list shows SSH keys you’ve saved in 1Password that are available to use with the SSH agent.

• Select View details to open an SSH Key item in 1Password.
• Select Show all SSH keys to see a list of all the SSH keys you’ve saved in 1Password.
• Select New SSH Key to generate a new SSH key or import an existing key into 1Password.

  Learn more about supported key types.

If you use multiple accounts in the 1Password app, you may see “Key name unavailable” for an SSH key saved in a locked account. To show the key name, select Unlock account or turn on Display key names when authorizing connections in the Developer settings.

SSH activity log

The activity log includes details about your recent SSH activity, including:

• the application the SSH request originated from, the SSH key that was used, and when the request was authorized
• SSH requests made from apps running in the background
• SSH and Git commands run in the terminal
  (for example, git pull or ssh ubuntu@app-server)

To clear the activity log, select Clear activity.

Learn more about data retention and privacy with 1Password Developer.

1Password CLI

In the 1Password desktop app, select Developer in the sidebar, then select View CLI.

To install 1Password CLI, select View installation instructions and follow the steps for your operating system.

You can also use the app to sign in to 1Password in the terminal. From the CLI page, select Settings and turn on Integrate with 1Password CLI.

After you set up 1Password CLI, you’ll be able to use 1Password from the command line to provision secrets, automate administrative tasks, and more.

1Password Developer Watchtower

In the 1Password desktop app, select Developer in the sidebar, then select View Developer Watchtower.

To turn on 1Password Developer Watchtower, select Check for developer credentials on disk.

After you turn on Developer Watchtower, 1Password will check your local ~/.ssh directory for SSH private keys in OpenSSH, PKCS#8, or PKCS#1 formats. You can then use the Developer section in the app to review alerts and recommendations for SSH keys that don’t follow best security practices.

If 1Password detects SSH keys on disk, you’ll see them listed in one of the following categories:

• Needs attention: Vulnerable SSH keys that pose some level of security risk.
• Recommendations: SSH keys you can import into 1Password and unsupported keys you might want to replace with supported SSH key types.

Developer Watchtower will also provide SSH key alerts to identify keys that are insecure, unencrypted, or already saved in 1Password so you can remediate any issues.

If there are specific files in your ~/.ssh folder you want 1Password to ignore, you can use ignore files.

Learn more about data retention and privacy with 1Password Developer.

Data retention and privacy

1Password Developer only uses your local disk to check for developer credentials or store information, such as your activity log data. No one at 1Password can see or access your data.

Your activity log data is encrypted on your device. Older entries get purged regularly, and you can manually clear your activity log data at any time. If you don’t want to use activity logging, turn off Record and display activity in the 1Password Developer settings.