1Password/Dev/Doc/SSHnGit/SSH Agent/Overview

• 1Password SSH agent | 1Password Developer

  • Configuration

    • By default, the 1Password SSH agent will make every eligible key in the built-in Personal, Private, or Employee vault of your 1Password accounts available to offer to SSH servers. This configuration is automatically set up when you turn on the SSH agent.
    • If you need to use the SSH agent with keys saved in shared or custom vaults, you can create and customize an SSH agent config file (~/.config/1Password/ssh/agent.toml) to override the default agent configuration.

  • Eligible Keys

    • For the 1Password SSH agent to work with your SSH keys, your 1Password SSH key items must meet the following requirements. They must be:
      • Generated or imported using the SSH Key item type (which supports Ed25519 or RSA key types).
      • Stored in the vaults the SSH agent is configured to use in 1Password. By default, this is the Personal, Private, or Employee vault of any 1Password account you're signed in to.
      • Active items (not archived or deleted).
    • Any key meeting these requirements will automatically be available in the SSH agent for authentication. You will still be required to explicitly authorize any request an SSH client makes to use your keys.
    • To see a list of all keys that the agent has available, set the SSH_AUTH_SOCK environment variable and run:
      • ssh-add -l