diff --git a/.gitignore b/.gitignore
index d2d8b91..d18a85a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,16 @@
+# Secrets / credentials
+.env
+.env.*
+!.env.example
+secrets.md
+.secrets.md
+*token*.json
+*credential*.json
+*.key
+*.pem
+*.pfx
+*.p12
+
 # Data directories (large files, not for version control)
 CLM_Data/
 LogFiles/