# 1Password Connect

1Password Connect is a self-hosted service that exposes a REST API so applications, pipelines, and cloud infrastructure can securely retrieve 1Password vault items without storing static credentials. It is open source and self-hosted, installable on Kubernetes (Helm) and TrueNAS.

Canonical page: https://ourlocalhost.com/app/4437/1password-connect

## Description

1Password Connect is a self-hosted service that exposes a REST API so applications, pipelines, and cloud infrastructure can securely retrieve 1Password vault items without storing static credentials.

## Platform availability

Available on 2 of 9 platforms: TrueNAS, Helm.

## Health score

61/100 (Good), based on 4 of 4 factors.
- Maintained: 81 (last commit 34 days ago)
- Popular: 46 (191 GitHub stars)
- Easy to install: 35 (2 install platforms, install notes)
- Light to run: 70 (1 GB minimum RAM)

## Links

- GitHub: https://github.com/1Password/connect-sdk-go
- Documentation: https://developer.1password.com/docs/connect/
- Kubernetes (Helm): https://artifacthub.io/packages/helm/onepassword-connect/connect
- Official website: https://www.1password.dev/connect/
- TrueNAS: https://apps.truenas.com/catalog/onepassword-connect/

## Common questions

### Do Connect servers hit request quotas for repeated secret reads?

Connect servers cache data in your infrastructure, so unlimited re-requests are allowed after the server fetches secrets. 1Password internal rate limits apply only when the server fetches secrets for the first time, such as at startup.

### Does a Connect server store secrets locally after startup?

Yes, it caches your data in your infrastructure after fetching secrets. This cache allows repeated requests without going back to 1Password each time.

### Can I use Connect with a custom HTTP integration instead of an SDK?

You can integrate a Connect server into your infrastructure and communicate with it over HTTP. You can use one of the Connect SDK libraries or use a custom integration.

### Can CI/CD jobs avoid managing service account tokens?

The 1Password Credential Broker gives CI/CD and other machine workflows short-lived access to secrets. It is intended to avoid managing service account tokens.

## Alternatives

- APIANT: APIANT offers Data Integration Software Solutions for Citizen Integrators, Integration Specialists, IT Managers, SaaS Companies and Enterpr…
- AliasVault: AliasVault is an open-source password manager with built-in email aliases that helps protect your privacy by creating a unique digital iden…
- Bitwarden: Open-source password manager with AES-256 encryption and device sync.
- Dashlane: Password manager that can generate unique passwords and also record purchase history across websites.
- KeePass: Free and open source password manager storing passwords in a local encrypted database with strong AES or Twofish encryption and master key…
- KeePassDX: KeePassDX is a material design KeePass client for managing keys and passwords in an encrypted database for your Android device.
- KeePassXC: KeePassXC is a free and open-source password manager for storing and managing your credentials in an encrypted local vault.
- KeeWeb: Web and desktop password manager compatible with KeePass.
- LastPass: Online encrypted password storage with password generation, dark web monitoring, and two-factor authentication.
- Passbolt: Passbolt Community Edition (CE) API.
- Passky Server: With Passky, you can easily and securely store all of your passwords in one place.
- PearPass: Fully local, open-source password manager with end-to-end encryption, no cloud storage, peer-to-peer sync between devices, offline access,…

---
Source: Our Local Host (https://ourlocalhost.com/app/4437/1password-connect), the self-hosted and open-source app directory.