A command line interface for 1Password
Switch branches/tags
Clone or download
Pull request Compare This branch is 23 commits ahead, 7 commits behind georgebrock:master.
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
onepassword
tests
.gitignore
CHANGES.txt
LICENSE
Makefile
README.md
requirements_dev.txt
setup.cfg
setup.py

README.md

===== 1pass

A command line interface (and Python library) for reading passwords from 1Password.

Command line usage

To get a password::

1pass unlock mail.google.com

By default this will look in ~/Dropbox/1Password.agilekeychain. If that's not where you keep your keychain::

1pass unlock --path ~/whatever/1Password.agilekeychain mail.google.com

Or, you can set your keychain path as an enviornment variable::

export ONEPASSWORD_KEYCHAIN=/path/to/keychain

1pass unlock mail.google.com

By default, the name you pass on the command line must match the name of an item in your 1Password keychain exactly. To avoid this, fuzzy matching is made possible with the --fuzzy flag::

1pass unlock --fuzzy mail.goog

If you don't want to be prompted for your password, you can use the --no-prompt flag and provide the password via standard input instead::

emit_master_password | 1pass unlock --no-prompt mail.google.com

You can list the items you have in your keychain by using the subcommand list::

1pass list

Python usage

The interface is very simple::

from onepassword import Keychain

my_keychain = Keychain(path="~/Dropbox/1Password.agilekeychain")
my_keychain.unlock("my-master-password")
my_keychain.item("An item's name").password

An example of real-world use

I wrote this so I could add the following line to my .muttrc file::

set imap_pass = "`1pass unlock 'Google: personal'`"

Now, whenever I start mutt, I am prompted for my 1Password Master Password and not my Gmail password.

The --no-prompt flag is very useful when configuring mutt and PGP. mutt passes the PGP passphrase via standard in, so by inserting 1pass into this pipline I can use my 1Password master password when prompted for my PGP keyphrase::

set pgp_decrypt_command="1pass unlock --no-prompt pgp-passphrase | gpg --passphrase-fd 0 ..."

Contributors

License

1pass is licensed under the MIT license. See the license file for details.

While it is designed to read .agilekeychain bundles created by 1Password, 1pass is not officially sanctioned or supported by AgileBits. I do hope they like it though.