1Password sync

​

Prerequisites

• A project with secrets configured

​

Step 1: Set up in 1Password

1

Create a Connect server

In 1Password, open the Developer section and select Other.Then, select Create a Connect Server.

2

Configure the Connect server

In the Environment Name field, enter a name for the Connect server. Then, select Choose Vaults and pick the vaults you want Infisical to reach:For each vault, select Edit Access > Enable All. When you’re done, select Add Environment.

3

Set up an access token

Infisical needs an access token to authenticate with the Connect server and sync your secrets.Set a name and expiration for the token in the Token Name and Expires After fields. Then, select Choose Vaults and pick the vaults you want Infisical to have access to:For each vault, select Edit Access > Enable All. When you’re done, select Issue Token.

4

Deploy the Connect server

Download the credentials file, then follow 1Password’s deployment guide to bring the server up. Save the Access Token you were shown; you’ll paste it into Infisical in the next section.

​

Step 2: Set up the sync in Infisical

1

Add the sync

In your Infisical project, go to Integrations and open the Secret Syncs tab. Select + Add Sync.Then, select the 1Password sync:

2

Configure the source

Configure the Source from where secrets should be retrieved in Infisical:

• Environment: The project environment to retrieve secrets from.
• Secret Path: The folder path to retrieve secrets from.

If you need to sync secrets from multiple folder locations, check out secret imports.

Then select Continue to configure the sync’s destination.

3

Configure the app connection

The sync needs a 1Password app connection to function:

• Create a new app connection
• Use an existing connection

Under 1Password Connection, select an existing app connection, or select + Create New Connection and complete the form:

• Name: A descriptive name for the connection.
• Description (optional): A note for future reference.
• Instance URL: The URL where your 1Password Connect server is hosted.
• API Token: The access token you copied when deploying your 1Password Connect server

Then, select Connect to 1Password.

This creates a connection scoped to the current project. To share the connection across other projects, you can create it at the organization level first, then select it here.

Under 1Password Connection, select the app connection you’d like to use.

4

Configure the target vault

Next, configure the vault where secrets should be deployed:

• Vault: The 1Password vault to sync secrets to.
• Value Label: The label of the 1Password item field that will hold your secret value.

When you’re done, select Continue.

5

Configure the sync options

Configure the Sync Options to specify how secrets should be synced.

• Initial Sync Behavior: How Infisical resolves the initial sync.
  • Overwrite Destination Secrets: Removes any secrets at the destination not present in Infisical.
  • Import Secrets (Prioritize Infisical): Imports secrets from the destination before syncing, prioritizing values from Infisical when keys conflict.
  • Import Secrets (Prioritize 1Password): Imports secrets from the destination before syncing, prioritizing values from 1Password when keys conflict.
• Key Schema: Template that transforms secret names when syncing. Use {{secretKey}} for the original secret name and {{environment}} for the environment.
  We highly recommend using a Key Schema so Infisical only manages the specific keys you intend, keeping everything else untouched.
• Auto-Sync Enabled: When enabled, secrets sync automatically as the source changes. Disable to sync manually only.
• Disable Secret Deletion: When enabled, Infisical does not remove secrets from the destination. Enable this if you intend to manage some secrets manually outside of Infisical.

When you’re done, select Continue.

6

Configure the details

Give the sync a Name and an optional Description, then select Next. The name must be slug-friendly.

7

Review and create

Review your 1Password Sync configuration, then select Create Sync.

The sync is created. If auto-sync is enabled, it begins syncing your secrets to the selected context right away.

​

FAQ