Same credentials for IP range? Tags: Wildcard, Multiple Website

Fondussen
Fondussen
Community Member
edited September 6 in 1Password in the Browser

I need the same credentials for a large subnet of IPs; for example: 10.0.0.1 - 10.18.255.255.

URL wildcards, which 1P users have been begging for throughout the years, would be incredibly simple and effective for this purpose. For example, URL match 10...*

Adding multiple website field entries works, but manually doing this is impractical. CSV import/export does not seem to support the website field.

I exported to the unencrypted 1Password format .1PUX, decompressed the archive and modified the export.data file to expand multiple website field entries.

Using various products to repackage the updated export.data file into a .ZIP and renaming to .1PUX will not import back into 1P as I receive a 1Password cannot import the data. The file may be the wrong format.

I'm running out out idea how to make this work, any input would be greatly appreciated. Thanks in advance.

Scott


1Password Version: 8.10.40
Extension Version: 2.27.1
OS Version: macOS 15.1
Browser: Brave

Comments

  • Fondussen
    Fondussen
    Community Member

    I need the same credentials for a large subnet of IPs; for example: 10.0.0.1 - 10.18.255.255.

    URL wildcards, which 1P users have been begging for throughout the years, would be incredibly simple and effective for this purpose. For example, URL match 10...*

    Adding multiple website field entries works, but manually doing this is impractical. CSV import/export does not seem to support the website field.

    I exported to the unencrypted 1Password format .1PUX, decompressed the archive and modified the export.data file to expand multiple website field entries.

    Using various products to repackage the updated export.data file into a .ZIP and renaming to .1PUX will not import back into 1P as I receive a 1Password cannot import the data. The file may be the wrong format.

    I'm running out out idea how to make this work, any input would be greatly appreciated. Thanks in advance.

    Scott

  • Fondussen
    Fondussen
    Community Member

    I need the same credentials for a large subnet of IPs; for example: 10.0.0.1 - 10.18.255.255.

    URL wildcards, which 1P users have been begging for throughout the years, would be incredibly simple and effective for this purpose. For example, URL match 10 . * . * . *

    Adding multiple website field entries works, but manually doing this is impractical. CSV import/export does not seem to support the website field.

    I exported to the unencrypted 1Password format .1PUX, decompressed the archive and modified the export.data file to expand multiple website field entries.

    Using various products to repackage the updated export.data file into a .ZIP and renaming to .1PUX will not import back into 1P as I receive a 1Password cannot import the data. The file may be the wrong format.

    I'm running out out idea how to make this work, any input would be greatly appreciated. Thanks in advance.

    Scott


    1Password Version: 8.10.40
    Extension Version: 2.27.1
    OS Version: macOS 15.5
    Browser: Brave

  • Dave_1P
    edited August 28

    Hello @Fondussen! 👋

    Thank you for reaching out. Adding a range of IP addresses to the website address field in a login item isn't currently supported, as you mentioned, and you would need to add each individual IP address to the relevant item in 1Password.

    The best workflow that I can suggest is clicking on the 1Password icon in your browser's toolbar, searching for the correct login credentials, and then clicking Autofill to fill them into a certain page.

    While 1PUX and CSV do provide tools to export your data in the event you need to move it to another password manager, they're not really designed to be manually edited and I recommend being careful with exported files since they remove your passwords and other items from the encrypted and secure environment of 1Password. You might also run into duplicates when you re-import the 1PUX file into your account. That being said, I suspect that the reason that you're unable to re-import the 1PUX file after editing it is because most ZIP methods add extra folder depth to the file, which 1Password doesn't support.

    If you would like to edit your 1PUX file then you can add the IP addresses to the item in the export.data file using the following format:

    {
    "label": "website",
    "url": "192.168.0.1",
    "mode": "default"
    },
    

    Replace the IP address with the IP address that you'd like to add and save the file. Then open the Terminal app and run these commands:

    cd unzipped-data/
    zip 1password.1pux export.attributes export.data files/
    

    With "unzipped-data/" being the folder that contains the modified export.data file. Then import the 1PUX file into your 1Password account using the desktop app.

    I wanted to provide this workaround in case it helps but I do understand this is still a manual and tedious process and I've filed a feature request internally to have our product team look into a better solution in the future.

    -Dave

    ref: PB-41944080

  • Fondussen
    Fondussen
    Community Member

    Hi Dave,

    Thank you for your prompt response and feedback.

    I created a script to iterate and format a subnet of 4,096 IPs in the style used by export.data for the Multiple Website field. However, I was unable to import it successfully, possibly due to the archiving application creating a subfolder, as you suggested. I'll investigate this further and provide an update.

    Additionally, do you foresee any issues with having thousands of Multiple Website fields for a single entry? My initial script generated a range of 4,096 Multiple Website IPs, but my application requires a much larger range, approximately 65,000.

    While I appreciate the workflow you suggested, it's the same solution I've seen in several older posts that I reviewed before starting this thread. If the workflow were practical, there wouldn't be repeated requests for a more streamlined process. There seems to be widespread support and demand for wildcard functionality. Do you have any insight into why 1Password has chosen not to address this?

    Thank you in advance.

    Best regards,
    Scott

  • @Fondussen

    To be clear, I don't recommend manually editing 1PUX files since they're meant to be used for exporting your data to another password manager, not manipulating the data and reimporting it to 1Password. I just wanted to share how it was possible to unzip a 1PUX file, edit it, and then import it back into 1Password since you were running into issues.

    Additionally, do you foresee any issues with having thousands of Multiple Website fields for a single entry? My initial script generated a range of 4,096 Multiple Website IPs, but my application requires a much larger range, approximately 65,000.

    It's very possible that you'll run into performance issues with so many fields. I'm not sure of the upper limit of fields that an item can have but having so many fields isn't something that would be recommended.

    For now, I would recommend the workflow that I mentioned above: Clicking on the 1Password icon in your browser's toolbar, searching for the correct login credentials, and then clicking Autofill to fill them into a certain page.

    If the workflow were practical, there wouldn't be repeated requests for a more streamlined process. There seems to be widespread support and demand for wildcard functionality. Do you have any insight into why 1Password has chosen not to address this?

    I agree that a more streamlined process, using a feature built in to the app, would be helpful here and I've made sure to share this need with the team internally. This particular request is still open. Which features are implemented (and when) depends on a variety of factors that include: consideration for our existing product roadmap and planned features, urgent bug fixes that need to be prioritized over feature requests, available development resources, other customer feedback, and more.

    Our product team considers every request but isn't able to guarantee which requests will be put into development or how quickly they'll be released.

    -Dave

  • Fondussen
    Fondussen
    Community Member

    Thanks @Dave_1P for your reply. Given the 1Password limitations I will need to use an alternative product for this application.

    1. Is there a way to disable the 1Password browser integration from prompting the user to save credentials across the same range of IPs space? It seems that the same limitations which prohibit saving credentials also prohibits selecting "Never fill on this website" for a large range of websites/IPs. Unless there is an alternative solution?

    2. The Autofill Behavior Box is not viewable when macOS is in Dark Appearance, see screenshot:

    3. As a workaround I'm using an application (yKey) to create a shortcut key executable macro that types in the login credentials for the devices within my large IP range. Is there a keyboard shortcut that can be added to close the 1Password prompt to save credentials?

    Thanks in advance,
    Scott

  • @Fondussen

    Thank you for the reply. I'll respond below:

    Is there a way to disable the 1Password browser integration from prompting the user to save credentials across the same range of IPs space? It seems that the same limitations which prohibit saving credentials also prohibits selecting "Never fill on this website" for a large range of websites/IPs. Unless there is an alternative solution?

    Autofill behaviour is based on the website address which only supports a single URL/IP address at this time. I've let the team know that you'd like see the website address field expanded to include IP ranges.

    The Autofill Behavior Box is not viewable when macOS is in Dark Appearance, see screenshot:

    This is a known issue that our development team is testing a fix for in the beta version. Hopefully the fix makes it to the stable version soon as well. I'm sorry for the inconvenience.

    As a workaround I'm using an application (yKey) to create a shortcut key executable macro that types in the login credentials for the devices within my large IP range. Is there a keyboard shortcut that can be added to close the 1Password prompt to save credentials?

    At the moment, the "Save Login" prompt can't be dismissed using the keyboard unless you press TAB multiple times in order to focus the X in the prompt. I've filed a feature request to add a keyboard shortcut for this functionality with the team.

    Let me know if you have any other questions. 🙂

    -Dave

    ref: dev/core/core#31190
    ref: PB-41986261