deleting-op-secrets

To delete secrets from 1Password using the op CLI, you can permanently remove items that are no longer needed or have been compromised. This action irreversibly deletes the targeted credentials from your vault.

Yes, you can archive 1Password items instead of permanently deleting them. Archiving moves secrets to the archive for safekeeping, allowing for potential recovery if a decommissioned service needs auditing later.

Archive deprecated credentials when you might need them for audit purposes later, such as for decommissioned services. Permanently remove secrets when they are no longer in use and pose an active security risk.

Yes, this approach works for cleaning up unused API keys from 1Password vaults. You can either permanently delete compromised or old API keys, or archive them to maintain security and manage credentials effectively.

Permanent deletion irreversibly removes secrets from your 1Password vault, while archiving moves them to a secure archive for safekeeping. Archiving allows for potential recovery, whereas deletion does not.