turbot/onepassword
steampipe plugin install onepassword

Table: onepassword_item_login - Query 1Password Login Items using SQL

1Password is a password management service that stores sensitive information, such as passwords, secure notes, and software licenses, in secure, encrypted vaults. This service is widely used by individuals and businesses to manage and protect their sensitive information. A Login Item in 1Password is a type of item that contains the login details for a specific website or service, including the username and password.

Table Usage Guide

The onepassword_item_login table provides insights into Login Items within 1Password. As a security analyst or system administrator, explore each Login Item's details through this table, including the associated username, password, website, and other related information. Utilize it to manage and monitor the login information for various services, ensuring the security and integrity of sensitive data.

Examples

Basic info

Gain insights into the creation and modification dates of your login items, along with any tags associated with them. This allows for easy tracking and management of your login credentials over time.

select
id,
title,
username,
password,
created_at,
updated_at,
tags
from
onepassword_item_login;
select
id,
title,
username,
password,
created_at,
updated_at,
tags
from
onepassword_item_login;

List logins along with website details

Explore the details of your saved logins, including the associated websites, to better manage your online accounts. This can help in tracking account creation dates and ensuring password security.

select
id,
title,
username,
password,
jsonb_pretty(u -> 'href') as website,
created_at
from
onepassword_item_login,
jsonb_array_elements(urls) as u;
select
id,
title,
username,
password,
u.value as website,
created_at
from
onepassword_item_login,
json_each(urls) as u;

List logins of a particular vault

Explore which logins are associated with a specified secure vault. This is useful to assess the elements within a specific vault for better management and security.

select
p.id,
p.title,
username,
password,
p.created_at,
p.tags
from
onepassword_item_login as p,
onepassword_vault as v
where
p.vault_id = v.id
and v.name = 'my-creds';
select
p.id,
p.title,
username,
password,
p.created_at,
p.tags
from
onepassword_item_login as p,
onepassword_vault as v
where
p.vault_id = v.id
and v.name = 'my-creds';

Show logins that contain a specific tag

Explore which login items are associated with a specific tag to better manage and categorize your credentials. This can be particularly useful for identifying and organizing logins related to a certain project or platform, such as Amazon.

select
id,
title,
username,
password,
created_at,
tags
from
onepassword_item_login
where
tags @> '["amazon-use"]';
Error: SQLite does not support array operations.

List logins with password length less than 8 characters

Identify instances where user passwords may be less secure due to their short length. This is useful for auditing account security and identifying potential vulnerabilities.

select
id,
title,
username,
password,
created_at
from
onepassword_item_login
where
length(password) < 8;
select
id,
title,
username,
password,
created_at
from
onepassword_item_login
where
length(password) < 8;

Schema for onepassword_item_login

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
categorytextThe category of the item.
created_attimestamp with time zoneDate and time when the item was created.
favoritebooleanWhether the item is marked as a favorite.
fieldsjsonbThe fields of the item.
filesjsonbThe files of the item.
idtext=The UUID of the item.
last_edited_bytextUUID of the user that last edited the item.
passwordtextThe password stored in the item.
sectionsjsonbThe sections of the item.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
tagsjsonbAn array of strings of the tags assigned to the item.
titletextThe title of the item.
trashedbooleanChecks if the item is trashed.
updated_attimestamp with time zoneDate and time when the item was last changed.
urlsjsonbArray of URL objects containing URLs for the item.
usernametextThe username stored in the item.
vault_idtext=The UUID of the vault the item is in.
versionbigintThe version of the item.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- onepassword

You can pass the configuration to the command with the --config argument:

steampipe_export_onepassword --config '<your_config>' onepassword_item_login