diff --git a/.gitignore b/.gitignore
index a87384b..9fcf1e0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,8 @@
 *.blg
 *.synctex.gz
 *.synctex(busy)
+
+# secrets (never commit)
+moodle/TOKEN.md
+TOKEN.md
+*.token