1Password

Connect 1Password to PostHog to sync your data into the PostHog data warehouse for analysis and modeling.

Pull your 1Password security event streams — sign-in attempts, item usages, and audit events — into the PostHog Data warehouse.

This uses the 1Password Events API, which requires a 1Password Business or Enterprise plan. Create an Events Reporting integration in your 1Password admin console and issue a bearer token with the event types you want to sync:

• Sign-in attempts
• Item usages
• Audit events

Select the region where your 1Password account is hosted — the Events API is served from a region-specific address.

Configuration

Option	Type	Required
Account region	select	Yes
Events Reporting token	password	Yes

Linking 1Password to PostHog

1. Go to the Data pipeline page in PostHog
2. Click New source and select 1Password
3. Fill in the required configuration fields
4. Click Next, select the tables you want to sync, and then press Import

Supported tables

Table	Description	Sync method	Incremental field	Primary key
sign_in_attempts	Attempts to sign in to a 1Password account: who attempted to sign in, from which client and IP address, when the attempt was made, and — for failed attempts — the cause of the failure.	Incremental, Full refresh	timestamp	—
item_usages	Usage of items in shared vaults: which item was modified, accessed, or used, by whom, from which client and IP address, and the vault where the item is stored.	Incremental, Full refresh	timestamp	—
audit_events	Administrative actions performed by team members within a 1Password account: when an action was performed and by whom, along with the type and object of the action.	Incremental, Full refresh	timestamp	—