Is the 3rd party 1Pass command line API secure? [AgileBits does not endorse such utilities]

michaelbehan

https://github.com/georgebrock/1pass

1pass isn't officially sanctioned or supported by
AgileBits <https://agilebits.com/>_. I do hope they like it though.

michaelbehan

For what it's worth, here is the pylint output: http://dpaste.com/08NN367

Ben

Hi @michaelbehan‌

1Password does not have an API that is open to third parties, and our official recommendation is that you never type your Master Password into anything that isn't 1Password.

This particular project is not using an API at all -- the script simply reads your data from your keychain (which requires you give it your Master Password).

We've made the data format for 1Password open, so anyone is welcome to create a utility to read it, but we cannot endorse such utilities. You may be interested in this (somewhat related) blog post:

• http://blog.agilebits.com/2013/03/06/you-have-secrets-we-dont-why-our-data-format-is-public/

Thanks!

Ben