Table: onepassword_item_login - Query 1Password Login Items using SQL

1Password is a password management service that stores sensitive information, such as passwords, secure notes, and software licenses, in secure, encrypted vaults. This service is widely used by individuals and businesses to manage and protect their sensitive information. A Login Item in 1Password is a type of item that contains the login details for a specific website or service, including the username and password.

Table Usage Guide

The onepassword_item_login table provides insights into Login Items within 1Password. As a security analyst or system administrator, explore each Login Item's details through this table, including the associated username, password, website, and other related information. Utilize it to manage and monitor the login information for various services, ensuring the security and integrity of sensitive data.

Examples

Basic info

Gain insights into the creation and modification dates of your login items, along with any tags associated with them. This allows for easy tracking and management of your login credentials over time.

select
  id,
  title,
  username,
  password,
  created_at,
  updated_at,
  tags
from
  onepassword_item_login;

select
  id,
  title,
  username,
  password,
  created_at,
  updated_at,
  tags
from
  onepassword_item_login;

List logins along with website details

Explore the details of your saved logins, including the associated websites, to better manage your online accounts. This can help in tracking account creation dates and ensuring password security.

select
  id,
  title,
  username,
  password,
  jsonb_pretty(u -> 'href') as website,
  created_at
from
  onepassword_item_login,
  jsonb_array_elements(urls) as u;

select
  id,
  title,
  username,
  password,
  u.value as website,
  created_at
from
  onepassword_item_login,
  json_each(urls) as u;

List logins of a particular vault

Explore which logins are associated with a specified secure vault. This is useful to assess the elements within a specific vault for better management and security.

select
  p.id,
  p.title,
  username,
  password,
  p.created_at,
  p.tags
from
  onepassword_item_login as p,
  onepassword_vault as v
where
  p.vault_id = v.id
  and v.name = 'my-creds';

select
  p.id,
  p.title,
  username,
  password,
  p.created_at,
  p.tags
from
  onepassword_item_login as p,
  onepassword_vault as v
where
  p.vault_id = v.id
  and v.name = 'my-creds';

Show logins that contain a specific tag

Explore which login items are associated with a specific tag to better manage and categorize your credentials. This can be particularly useful for identifying and organizing logins related to a certain project or platform, such as Amazon.

select
  id,
  title,
  username,
  password,
  created_at,
  tags
from
  onepassword_item_login
where
  tags @> '["amazon-use"]';

Error: SQLite does not support array operations.

List logins with password length less than 8 characters

Identify instances where user passwords may be less secure due to their short length. This is useful for auditing account security and identifying potential vulnerabilities.

select
  id,
  title,
  username,
  password,
  created_at
from
  onepassword_item_login
where
  length(password) < 8;

select
  id,
  title,
  username,
  password,
  created_at
from
  onepassword_item_login
where
  length(password) < 8;

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- onepassword

You can pass the configuration to the command with the --config argument:

steampipe_export_onepassword --config '<your_config>' onepassword_item_login