Why is secrets.yaml in plain txt? and not hidden/encrypted

And then Home Assistant will have credentials to access your password manager. So any one with access to the host running HA will be able to get those 1password credentials too. That is far more dangerous than plain text secrets.yaml. It is like putting your 1password credentials in plaintext in secrets.yaml. Does that sound safe to you?

1 Like