Get started

Get started with 1Password Developer (beta)

Learn how to set up and use 1Password Developer in the desktop apps to help manage your developer tools and credentials.

1Password Developer is a collection of features that allows you to discover and set up developer tools, view and create SSH keys, review your recent SSH activity, and check your local disk for vulnerable credentials.

Before you can use 1Password Developer, you’ll need to sign up for a 1Password account and set up 1Password for Mac, Windows, or Linux.

The 1Password Developer overview screen in the 1Password desktop app with sections for SSH Agent, CLI, and Developer Watchtower.


1Password Developer icon Turn on 1Password Developer

To turn on the 1Password Developer setting in 1Password for Mac, Windows, or Linux:

  1. Open and unlock the 1Password desktop app.
  2. Select your account or collection at the top of the sidebar and choose Settings > Developer.
  3. Turn on Show 1Password Developer in Sidebar.
  4. To view activity logs with your SSH activity, make sure Record and display activity is also turned on.

    This setting is turned on by default when you turn on 1Password Developer in the sidebar.

1Password SSH icon 1Password SSH Agent

In the 1Password desktop app, select Developer in the sidebar, then select View SSH agent.

After you set up the 1Password SSH Agent, you’ll be able to securely manage your SSH keys, sign Git commits, and authorize all your SSH connections with 1Password. You can then use the Developer section in the app to view and create private keys and review your recent SSH agent activity.

Available SSH keys

This list shows SSH keys you’ve saved in 1Password that are available to use with the SSH agent.

  • Select View details to open an SSH Key item in 1Password.
  • Select Show all SSH keys to see a list of all the SSH keys you’ve saved in 1Password.
  • Select New SSH Key to generate a new SSH key or import an existing key into 1Password.

    Learn more about supported key types.

The SSH agent screen showing a list of available SSH keys stored in 1Password

SSH activity log

The activity log includes details about your recent SSH activity, including:

  • the application the SSH request originated from, the SSH key that was used, and when the request was authorized
  • SSH requests made from apps running in the background
  • SSH and Git commands run in the terminal
    (for example, git pull or ssh ubuntu@app-server)
The SSH activity log showing recent SSH authorization events.

To clear the activity log, select Clear activity.

Learn more about data retention and privacy with 1Password Developer.

1Password CLI icon 1Password CLI

In the 1Password desktop app, select Developer in the sidebar, then select View CLI.

To install 1Password CLI, select View installation instructions and follow the steps for your operating system.

You can also use the app to sign in to 1Password in the terminal. From the CLI page, select Settings and turn on Integrate with 1Password CLI.

After you set up 1Password CLI, you’ll be able to use 1Password from the command line to provision secrets, automate administrative tasks, and more.

1Password Developer Watchtower icon 1Password Developer Watchtower

In the 1Password desktop app, select Developer in the sidebar, then select View Developer Watchtower.

To turn on 1Password Developer Watchtower, turn on Check for developer credentials on disk.

After you turn on Developer Watchtower, 1Password will check your local ~/.ssh directory for SSH private keys in OpenSSH, PKCS#8, or PKCS#1 formats. You can then use the Developer section in the app to review alerts and recommendations for SSH keys that don’t follow best security practices.

If 1Password detects SSH keys on disk, you’ll see them listed in one of the following categories:

  • Needs attention: Vulnerable SSH keys that pose some level of security risk.
  • Recommendations: SSH keys you can import into 1Password and unsupported keys you might want to replace with supported SSH key types.

Developer Watchtower will also provide SSH key alerts to identify keys that are insecure, unencrypted, or already saved in 1Password so you can remediate any issues.

If there are specific files in your ~/.ssh folder want 1Password to ignore, you can use ignore files.

The 1Password Developer Watchtower screen showing SSH keys found on disk with alerts and recommended actions for each key.

Learn more about data retention and privacy with 1Password Developer.

Data retention and privacy

1Password Developer only uses your local disk to check for developer credentials or store information, such as your activity log data. No one at 1Password can see or access your data.

Your activity log data is encrypted on your device. Older entries get purged regularly, and you can manually clear your activity log data at any time. If you don’t want to use activity logging, turn off Record and display activity in the 1Password Developer settings.

Published: