1Password CLI

Manage secrets through the 1Password CLI (op).

Setup

1. Install: brew install 1password-cli
2. Enable desktop app integration in 1Password preferences
3. Sign in: op signin
4. Verify: op whoami

Common Commands

# List vaults
op vault list

# Get an item
op item get "Item Name" --vault "Vault"

# Read a secret field
op read "op://Vault/Item/field"

# Run a command with secrets injected
op run --env-file=.env -- your-command

# Inject secrets into a template
op inject -i template.env -o .env

Best Practices

• Use op run or op inject instead of writing secrets to disk
• Never paste secrets into logs, chat, or code
• Use --account flag for multi-account setups