> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# 1Password sync

> Learn how to configure a 1Password Sync for Infisical.

A 1Password Secret Sync pushes secrets from Infisical into a 1Password vault. Each Infisical secret becomes a 1Password item whose title matches the secret's key, with the secret value stored in a field of your choice.

> [!NOTE]
>
> The 1Password Secret Sync requires a [1Password app connection](https://infisical.com/docs/integrations/app-connections/1password.md). This guide walks you through creating a project-scoped app connection.

## Prerequisites

* A [project with secrets configured](https://infisical.com/docs/documentation/platform/secrets-mgmt/quick-starts/deliver-first-secret.md)

## Step 1: Set up in 1Password

First, deploy a Connect server for the vaults you want Infisical to have access to.

> [!NOTE]
>
> If you already have a Connect server for your vault, you can skip this step.

### 1. Create a Connect server

In 1Password, open the **Developer** section and select **Other**.

![Developer Page](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/1password/developer-page.png)

Then, select **Create a Connect Server**.

![Select Connect Server](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/1password/click-connect-server.png)

### 2. Configure the Connect server

In the **Environment Name** field, enter a name for the Connect server. Then, select **Choose Vaults** and pick the vaults you want Infisical to reach:

![Configure Connect Server](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/1password/configure-connect-server.png)

For each vault, select **Edit Access** > **Enable All**. When you're done, select **Add Environment**.

### 3. Set up an access token

Infisical needs an access token to authenticate with the Connect server and sync your secrets.

Set a name and expiration for the token in the **Token Name** and **Expires After** fields. Then, select **Choose Vaults** and pick the vaults you want Infisical to have access to:

![Set Up Access Token](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/1password/set-up-access-token.png)

For each vault, select **Edit Access** > **Enable All**. When you're done, select **Issue Token**.

### 4. Deploy the Connect server

Download the credentials file, then follow [1Password's deployment guide](https://developer.1password.com/docs/connect/get-started#step-2-deploy-1password-connect-server) to bring the server up. Save the **Access Token** you were shown; you'll paste it into Infisical in the next section.

![Deploy Server](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/1password/deploy-server.png)

## Step 2: Set up the sync in Infisical

> [!TIP]
>
> To create the sync using the API, use the [Create 1Password Sync](https://infisical.com/docs/api-reference/endpoints/secret-syncs/1password/create.md) endpoint.

### 1. Add the sync

In your Infisical project, go to **Integrations** and open the **Secret Syncs** tab. Select **+ Add Sync**.

![Secret Syncs Tab](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/general/secret-sync-tab.png)

Then, select the **1Password** sync:

![Select 1Password](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/select-option.png)

### 2. Configure the source

Configure the **Source** from where secrets should be retrieved in Infisical:

![Configure Source](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/configure-source.png)

* **Environment**: The project environment to retrieve secrets from.
* **Secret Path**: The folder path to retrieve secrets from.

> [!TIP]
>
> If you need to sync secrets from multiple folder locations, check out [secret imports](https://infisical.com/docs/documentation/platform/secret-reference.md#secret-imports).

Then select **Continue** to configure the sync's destination.

### 3. Configure the app connection

The sync needs a 1Password [app connection](https://infisical.com/docs/integrations/app-connections.md) to function:

> [tab] Create a new app connection
>
> Under **1Password Connection**, select an existing app connection, or select **+ Create New Connection** and complete the form:
>
> * **Name**: A descriptive name for the connection.
> * **Description** (optional): A note for future reference.
> * **Instance URL**: The URL where your 1Password Connect server is hosted.
> * **API Token**: The access token you copied when [deploying your 1Password Connect server](#deploy-the-connect-server)
>
>   ![1Password Connection Modal](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/configure-connection.png)
>
> Then, select **Connect to 1Password**.
>
> > [!NOTE]
> >
> > This creates a connection scoped to the current project. To share the connection across other projects, you can [create it at the organization level](https://infisical.com/docs/integrations/app-connections/1password.md#step-2-create-the-app-connection) first, then select it here.

> [tab] Use an existing connection
>
> Under **1Password Connection**, select the app connection you'd like to use.

### 4. Configure the target vault

Next, configure the vault where secrets should be deployed:

![Configure Destination](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/configure-destination.png)

* **Vault**: The 1Password vault to sync secrets to.
* **Value Label**: The label of the 1Password item field that will hold your secret value.

When you're done, select **Continue**.

### 5. Configure the sync options

Configure the **Sync Options** to specify how secrets should be synced.

![Configure Sync Options](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/configure-sync-options.png)

* **Initial Sync Behavior**: How Infisical resolves the initial sync.
  * **Overwrite Destination Secrets**: Removes any secrets at the destination not present in Infisical.
  * **Import Secrets (Prioritize Infisical)**: Imports secrets from the destination before syncing, prioritizing values from Infisical when keys conflict.
  * **Import Secrets (Prioritize 1Password)**: Imports secrets from the destination before syncing, prioritizing values from 1Password when keys conflict.
* **Key Schema**: Template that transforms secret names when syncing. Use `{{secretKey}}` for the original secret name and `{{environment}}` for the environment.
  > [!NOTE]
  >
  > We highly recommend using a Key Schema so Infisical only manages the specific keys you intend, keeping everything else untouched.
* **Auto-Sync Enabled**: When enabled, secrets sync automatically as the source changes. Disable to sync manually only.
* **Disable Secret Deletion**: When enabled, Infisical does not remove secrets from the destination. Enable this if you intend to manage some secrets manually outside of Infisical.

When you're done, select **Continue**.

### 6. Configure the details

Give the sync a **Name** and an optional **Description**, then select **Next**. The name must be slug-friendly.

![Configure Details](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/configure-details.png)

### 7. Review and create

Review your 1Password Sync configuration, then select **Create Sync**.

![Review Configuration](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/review-configuration.png)

![Sync Created](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/secret-syncs/1password/sync-created.png)

> [!TIP]
>
> The sync is created. If [auto-sync](#configure-the-sync-options) is enabled, it begins syncing your secrets to the selected context right away.

## FAQ

> [accordion] How are different 1Password item types treated?
>
> Infisical can only perform CRUD operations on the following item types:
>
> * API Credentials

> [accordion] What is a 'Value Label'?
>
> It's the label of the 1Password item field which will hold your secret value. For example, if you were to sync the Infisical secret 'API\_KEY: sk-1234', the 1Password item equivalent would have an item title of 'API\_KEY', and a field on that item 'value: sk-1234'. The field label 'value' is what gets changed by this option.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.