Table: onepassword_item_login - Query 1Password Login Items using SQL
1Password is a password management service that stores sensitive information, such as passwords, secure notes, and software licenses, in secure, encrypted vaults. This service is widely used by individuals and businesses to manage and protect their sensitive information. A Login Item in 1Password is a type of item that contains the login details for a specific website or service, including the username and password.
Table Usage Guide
The onepassword_item_login
table provides insights into Login Items within 1Password. As a security analyst or system administrator, explore each Login Item's details through this table, including the associated username, password, website, and other related information. Utilize it to manage and monitor the login information for various services, ensuring the security and integrity of sensitive data.
Examples
Basic info
Gain insights into the creation and modification dates of your login items, along with any tags associated with them. This allows for easy tracking and management of your login credentials over time.
select id, title, username, password, created_at, updated_at, tagsfrom onepassword_item_login;
select id, title, username, password, created_at, updated_at, tagsfrom onepassword_item_login;
List logins along with website details
Explore the details of your saved logins, including the associated websites, to better manage your online accounts. This can help in tracking account creation dates and ensuring password security.
select id, title, username, password, jsonb_pretty(u -> 'href') as website, created_atfrom onepassword_item_login, jsonb_array_elements(urls) as u;
select id, title, username, password, u.value as website, created_atfrom onepassword_item_login, json_each(urls) as u;
List logins of a particular vault
Explore which logins are associated with a specified secure vault. This is useful to assess the elements within a specific vault for better management and security.
select p.id, p.title, username, password, p.created_at, p.tagsfrom onepassword_item_login as p, onepassword_vault as vwhere p.vault_id = v.id and v.name = 'my-creds';
select p.id, p.title, username, password, p.created_at, p.tagsfrom onepassword_item_login as p, onepassword_vault as vwhere p.vault_id = v.id and v.name = 'my-creds';
Show logins that contain a specific tag
Explore which login items are associated with a specific tag to better manage and categorize your credentials. This can be particularly useful for identifying and organizing logins related to a certain project or platform, such as Amazon.
select id, title, username, password, created_at, tagsfrom onepassword_item_loginwhere tags @> '["amazon-use"]';
Error: SQLite does not support array operations.
List logins with password length less than 8 characters
Identify instances where user passwords may be less secure due to their short length. This is useful for auditing account security and identifying potential vulnerabilities.
select id, title, username, password, created_atfrom onepassword_item_loginwhere length(password) < 8;
select id, title, username, password, created_atfrom onepassword_item_loginwhere length(password) < 8;
Schema for onepassword_item_login
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
category | text | The category of the item. | |
created_at | timestamp with time zone | Date and time when the item was created. | |
favorite | boolean | Whether the item is marked as a favorite. | |
fields | jsonb | The fields of the item. | |
files | jsonb | The files of the item. | |
id | text | = | The UUID of the item. |
last_edited_by | text | UUID of the user that last edited the item. | |
password | text | The password stored in the item. | |
sections | jsonb | The sections of the item. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
tags | jsonb | An array of strings of the tags assigned to the item. | |
title | text | The title of the item. | |
trashed | boolean | Checks if the item is trashed. | |
updated_at | timestamp with time zone | Date and time when the item was last changed. | |
urls | jsonb | Array of URL objects containing URLs for the item. | |
username | text | The username stored in the item. | |
vault_id | text | = | The UUID of the vault the item is in. |
version | bigint | The version of the item. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- onepassword
You can pass the configuration to the command with the --config
argument:
steampipe_export_onepassword --config '<your_config>' onepassword_item_login