[{"data":1,"prerenderedAt":366},["ShallowReactive",2],{"globals":3,"cookie-settings":230,"post-claude-code-settings-file-secrets-leak":263},{"id":4,"title":5,"description":6,"logo_light":7,"logo_dark":7,"address":7,"contact_email":8,"contact_phone":7,"header_menu":9,"footer_menu":10,"favicon":7,"public_url":11,"meta_title":12,"meta_description":13,"robots":14,"head_scripts":15,"body_scripts":16,"default_header":17,"default_footer":196,"social_links":7},1,"CredenShare","Secure credential sharing for modern teams. Encrypted in your browser, with time-limited, access-controlled links.",null,"hello@credenshare.io","fafb0437-6fc7-409e-bcce-a2519eacef43","96f782ae-6d59-4601-abd1-a4fca64cc4de","https://credenshare.io","CredenShare - Secure Credential Sharing","Share passwords, API keys and secrets securely with CredenShare. Encrypted in your browser, time-limited access, and detailed access logs.","# CredenShare Robots.txt\nUser-agent: *\nAllow: /\n\n# Sitemap\nSitemap: https://credenshare.io/sitemap.xml\n\n# Disallow admin paths\nDisallow: /api/\nDisallow: /admin/\nDisallow: /dev/\n\n# Allow main content\nAllow: /blog/\nAllow: /features/\nAllow: /pricing/\nAllow: /security/\nAllow: /docs/\n\n# Crawl-delay\nCrawl-delay: 1\n",[],[],{"id":18,"sort":7,"user_created":19,"date_created":20,"user_updated":19,"date_updated":21,"name":22,"logo":7,"show_cta":23,"cta_label":24,"cta_link":25,"cta_style":26,"sticky":23,"transparent":27,"navigation":28},"d16d4c9e-b3f8-4ea8-988b-eab863efb29c","e7d5f744-1dbd-47ad-9e01-63a9303d109e","2026-02-03T16:36:10.957Z","2026-08-17T22:46:13.371Z","Default Header",true,"Get Started","https://app.credenshare.io/register","primary",false,{"id":9,"sort":7,"user_created":19,"date_created":29,"user_updated":7,"date_updated":7,"title":30,"location":31,"items":32},"2026-02-03T16:36:40.078Z","Main Navigation","main-menu",[33,44,52,56,64,72,80,87,90,97,106,113,118,125,133,138,145,153,161,169,172,180,188],{"id":34,"sort":35,"user_created":19,"date_created":36,"user_updated":19,"date_updated":37,"label":38,"type":39,"url":40,"parent":41,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":42,"description":43,"badge":7},"157a8094-f17f-4348-bd73-774c0573b088",0,"2026-10-04T15:58:24.950Z","2026-10-23T23:13:13.022Z","Guides & Templates","custom","/resources","bf76488c-e318-48a2-8561-c32f76c61383","i-heroicons-document-text","Free practical guides and checklists",{"id":45,"sort":4,"user_created":19,"date_created":46,"user_updated":7,"date_updated":7,"label":47,"type":39,"url":48,"parent":49,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":50,"description":51,"badge":7},"1ee916dd-34a1-41fc-ad80-64681d2440ed","2026-02-11T11:19:14.086Z","Features","/features","0a887c3c-a748-4217-9e34-daf852801d4e","i-heroicons-sparkles","Everything CredenShare offers",{"id":49,"sort":4,"user_created":19,"date_created":53,"user_updated":7,"date_updated":7,"label":54,"type":55,"url":7,"parent":7,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"2026-02-11T11:19:13.606Z","Product","dropdown",{"id":57,"sort":4,"user_created":19,"date_created":58,"user_updated":7,"date_updated":7,"label":59,"type":39,"url":60,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":62,"description":63,"badge":7},"fd3cae1e-592b-413d-91e5-b1258e0aff49","2026-02-11T11:19:16.508Z","Team Onboarding","/solutions/team-onboarding","daee37a1-a164-4b63-be67-1f91e4e9b497","i-heroicons-user-plus","Securely onboard new team members",{"id":65,"sort":4,"user_created":19,"date_created":66,"user_updated":7,"date_updated":7,"label":67,"type":39,"url":68,"parent":41,"post":7,"navigation":9,"target":69,"classes":7,"page":7,"icon":70,"description":71,"badge":7},"0bacbbcf-acfb-4054-94dd-b3388ed7f576","2026-10-23T23:13:21.028Z","Compare","/compare","_self","i-heroicons-scale","Password managers and sharing tools compared",{"id":73,"sort":74,"user_created":19,"date_created":75,"user_updated":7,"date_updated":7,"label":76,"type":39,"url":77,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":78,"description":79,"badge":7},"63e46db0-4bed-4f24-b7bd-a79e821f3d89",2,"2026-02-11T11:19:16.976Z","Third-Party Access","/solutions/third-party-access","i-heroicons-users","Safe contractor credentials",{"id":81,"sort":74,"user_created":19,"date_created":82,"user_updated":7,"date_updated":7,"label":83,"type":39,"url":84,"parent":41,"post":7,"navigation":9,"target":69,"classes":7,"page":7,"icon":85,"description":86,"badge":7},"704e9cab-d404-4b7a-b5c1-d8d66aa45862","2026-10-23T23:13:21.131Z","How-to Guides","/guides","i-heroicons-light-bulb","Share passwords and secrets safely",{"id":61,"sort":74,"user_created":19,"date_created":88,"user_updated":7,"date_updated":7,"label":89,"type":55,"url":7,"parent":7,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"2026-02-11T11:19:16.058Z","Solutions",{"id":91,"sort":74,"user_created":19,"date_created":92,"user_updated":7,"date_updated":7,"label":93,"type":39,"url":94,"parent":49,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":95,"description":96,"badge":7},"6eb63ded-6ac9-4595-a55f-8795b193fe04","2026-02-11T11:19:14.648Z","How It Works","/how-it-works","i-heroicons-play-circle","See CredenShare in action",{"id":98,"sort":99,"user_created":19,"date_created":100,"user_updated":19,"date_updated":101,"label":102,"type":39,"url":103,"parent":41,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":104,"description":105,"badge":7},"8a9a4df2-3f19-4897-948a-a4d520b9389b",3,"2026-02-11T11:19:20.202Z","2026-10-23T23:13:13.401Z","Documentation","https://docs.credenshare.io","i-heroicons-book-open","Guides and API reference",{"id":107,"sort":99,"user_created":19,"date_created":108,"user_updated":7,"date_updated":7,"label":109,"type":39,"url":110,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":111,"description":112,"badge":7},"1cf2f869-1bb4-447a-b9d7-738b45995379","2026-02-11T11:19:17.466Z","Credential Collection","/solutions/secure-requests","i-heroicons-inbox-arrow-down","Request credentials securely",{"id":114,"sort":99,"user_created":19,"date_created":115,"user_updated":7,"date_updated":7,"label":116,"type":39,"url":117,"parent":7,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"790829b5-6e85-45a2-b729-01a224f1c816","2026-02-11T11:19:18.867Z","Pricing","/pricing",{"id":119,"sort":99,"user_created":19,"date_created":120,"user_updated":7,"date_updated":7,"label":121,"type":39,"url":122,"parent":49,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":123,"description":124,"badge":7},"5c9151ac-94e1-4d54-8032-768568b9ad02","2026-02-11T11:19:15.116Z","Security","/security","i-heroicons-shield-check","Our security architecture",{"id":126,"sort":127,"user_created":19,"date_created":128,"user_updated":7,"date_updated":7,"label":129,"type":39,"url":130,"parent":49,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":131,"description":132,"badge":7},"d7882f47-9f94-4860-93df-0025ff5ac8bc",4,"2026-02-11T11:19:15.577Z","Integrations","/integrations","i-heroicons-puzzle-piece","Slack, API, and more",{"id":134,"sort":127,"user_created":19,"date_created":135,"user_updated":7,"date_updated":7,"label":136,"type":39,"url":137,"parent":7,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"e696e64d-65e1-4b67-aef9-60db78b9f4cf","2026-02-11T11:19:19.313Z","Blog","/blog",{"id":139,"sort":127,"user_created":19,"date_created":140,"user_updated":7,"date_updated":7,"label":141,"type":39,"url":142,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":143,"description":144,"badge":7},"2ac2df39-fbae-45a2-b87a-313bebb4a87b","2026-02-11T11:19:17.957Z","Development Teams","/solutions/development-teams","i-heroicons-code-bracket-square","Secure credentials for dev workflows",{"id":146,"sort":127,"user_created":19,"date_created":147,"user_updated":19,"date_updated":148,"label":149,"type":39,"url":150,"parent":41,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":151,"description":152,"badge":7},"719ce073-d71f-4450-b45a-f08a05db21b2","2026-02-11T11:19:20.640Z","2026-10-23T23:13:13.301Z","About","/about","i-heroicons-information-circle","Our mission and team",{"id":154,"sort":155,"user_created":19,"date_created":156,"user_updated":7,"date_updated":7,"label":157,"type":39,"url":158,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":159,"description":160,"badge":7},"e18246ff-9a00-449a-88f8-09490a3cead2",5,"2026-08-24T23:17:28.605Z","Vendor Access","/solutions/vendor-access","i-heroicons-building-office-2","Share credentials with outside vendors",{"id":162,"sort":155,"user_created":19,"date_created":163,"user_updated":19,"date_updated":164,"label":165,"type":39,"url":166,"parent":41,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":167,"description":168,"badge":7},"567bc13d-4499-4dc5-a346-5eba54c1c500","2026-02-11T11:19:21.085Z","2026-10-23T23:13:13.212Z","Tools","/tools","i-heroicons-wrench-screwdriver","Free security & developer tools",{"id":41,"sort":155,"user_created":19,"date_created":170,"user_updated":7,"date_updated":7,"label":171,"type":55,"url":7,"parent":7,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"2026-02-11T11:19:19.768Z","Resources",{"id":173,"sort":174,"user_created":19,"date_created":175,"user_updated":7,"date_updated":7,"label":176,"type":39,"url":177,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":178,"description":179,"badge":7},"99bda669-3c3a-4521-815b-a1eb22a4098e",6,"2026-08-24T23:17:28.791Z","AI Agents","/solutions/ai-agents","i-heroicons-cpu-chip","Give agents scoped, expiring credentials",{"id":181,"sort":174,"user_created":19,"date_created":182,"user_updated":19,"date_updated":183,"label":184,"type":39,"url":185,"parent":41,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":186,"description":187,"badge":7},"1f787a64-8e12-484d-ae97-b6349bc82e52","2026-02-11T11:19:21.524Z","2026-10-23T23:13:13.121Z","Pastebin","https://paste.credenshare.io","i-heroicons-clipboard-document","Secure encrypted pastebin",{"id":189,"sort":190,"user_created":19,"date_created":191,"user_updated":19,"date_updated":192,"label":193,"type":39,"url":194,"parent":61,"post":7,"navigation":9,"target":7,"classes":7,"page":7,"icon":159,"description":195,"badge":7},"1f06247b-4633-4341-a388-95ffa524a27a",7,"2026-02-11T11:19:18.416Z","2026-08-24T23:17:03.952Z","Enterprise","/enterprise","Compliance and audit-ready security",{"id":197,"sort":7,"user_created":19,"date_created":198,"user_updated":19,"date_updated":199,"name":200,"logo":7,"tagline":201,"show_social":23,"copyright_text":202,"show_newsletter":23,"newsletter_heading":203,"newsletter_description":204,"navigation_columns":205,"bottom_links":206},"355d9ac1-c909-4cda-9071-cd3abb00a0b5","2026-02-03T16:36:11.825Z","2026-11-02T14:01:12.933Z","Default Footer","Secure credential sharing for modern teams.","© {year} CredenShare Inc. All Rights Reserved.","Stay updated","Credential incidents explained and practical guides, every two weeks. Unsubscribe any time.",[],{"id":207,"sort":7,"user_created":19,"date_created":208,"user_updated":7,"date_updated":7,"title":209,"location":210,"items":211},"861b9a44-206d-4778-9251-f5269206fdf9","2026-02-03T16:36:41.786Z","Legal Links","legal-menu",[212,218,224],{"id":213,"sort":4,"user_created":19,"date_created":214,"user_updated":19,"date_updated":215,"label":216,"type":39,"url":217,"parent":7,"post":7,"navigation":207,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"3e16a067-ce9f-4e4d-aea6-7a602094f9df","2026-02-03T16:37:32.902Z","2026-08-25T00:24:57.325Z","Terms of Service","/legal/terms",{"id":219,"sort":74,"user_created":19,"date_created":220,"user_updated":19,"date_updated":221,"label":222,"type":39,"url":223,"parent":7,"post":7,"navigation":207,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"6e9bc58b-b6d0-46f8-8c7b-123ea3273f5b","2026-02-03T16:37:32.360Z","2026-08-25T00:24:57.850Z","Privacy Policy","/legal/privacy",{"id":225,"sort":99,"user_created":19,"date_created":226,"user_updated":19,"date_updated":227,"label":228,"type":39,"url":229,"parent":7,"post":7,"navigation":207,"target":7,"classes":7,"page":7,"icon":7,"description":7,"badge":7},"78a410a6-802d-4920-a915-d8e5d2155f0c","2026-02-03T16:37:33.462Z","2026-08-25T00:24:59.086Z","Cookie Policy","/legal/cookies",{"enabled":23,"banner_position":231,"banner_title":232,"banner_text":233,"accept_all_text":234,"decline_all_text":235,"preferences_text":236,"save_preferences_text":237,"policy_page":238,"privacy_page":240,"categories":242,"id":4},"bottom","We value your privacy","We use cookies to enhance your browsing experience, serve personalized content, and analyze our traffic. By clicking \"Accept All\", you consent to our use of cookies.","Accept All","Decline All","Manage Preferences","Save Preferences",{"slug":239},"legal/cookies",{"slug":241},"legal/privacy",[243,248,253,258],{"id":244,"name":245,"key":246,"description":247,"required":23,"default_enabled":23},"1","Essential","essential","Required for the website to function. Cannot be disabled.",{"id":249,"name":250,"key":251,"description":252,"required":27,"default_enabled":27},"2","Analytics","analytics","Help us understand how visitors interact with our website.",{"id":254,"name":255,"key":256,"description":257,"required":27,"default_enabled":27},"3","Marketing","marketing","Used to deliver relevant advertisements and track campaign performance.",{"id":259,"name":260,"key":261,"description":262,"required":27,"default_enabled":27},"4","Preferences","preferences","Remember your settings and preferences for a better experience.",{"id":264,"status":265,"sort":7,"user_created":19,"date_created":266,"user_updated":19,"date_updated":267,"date_published":268,"user_published":19,"date_scheduled_publish":268,"title":269,"slug":270,"seo":271,"excerpt":279,"tags":280,"categories":293,"blocks":299,"featured_image":346,"author":360},"4a4df26f-fb9a-48e1-9ef0-863f7be89ad8","published","2026-11-09T14:41:18.149Z","2026-11-09T15:08:14.824Z","2026-11-09T15:08:14.825Z","Claude Code settings files leaked 31,088 secrets on GitHub","claude-code-settings-file-secrets-leak",{"title":272,"meta_description":273,"no_index":27,"no_follow":27,"og_title":274,"og_description":274,"og_image":7,"sitemap_change_frequency":275,"sitemap_priority":276,"additional_fields":277},"Claude Code settings files leaked secrets on GitHub","GitGuardian found 31,088 secrets in Claude Code settings files on public GitHub, 5,343 valid at detection. How approved commands leak keys and what to do.","","monthly",0.6,{"canonical_url":278},"https://credenshare.io/blog/claude-code-settings-file-secrets-leak","Approving a command with \"don't ask again\" can save the API key inside it to a project file. GitGuardian counted 31,088 such secrets on public GitHub and more in Docker Hub images. How it happens, why deleting the file is not enough, and what to rotate.",[281,288],{"tags_id":282},{"id":283,"status":284,"user_created":19,"date_created":285,"user_updated":7,"date_updated":7,"slug":286,"name":287},"26cdb14a-ced0-4366-b112-7370c97f4026","draft","2026-02-09T19:40:46.566Z","credentials","Credentials",{"tags_id":289},{"id":290,"status":284,"user_created":19,"date_created":291,"user_updated":7,"date_updated":7,"slug":292,"name":121},"c3b30a85-9580-418c-953e-cf29032755a0","2026-02-09T19:40:48.946Z","security",[294],{"categories_id":295},{"id":296,"status":284,"sort":7,"user_created":19,"date_created":297,"user_updated":7,"date_updated":7,"parent":7,"name":121,"description":298,"image":7,"slug":292},"53da492a-49b5-4508-92b5-fe173c23891d","2026-02-09T19:40:43.953Z","Deep dives into encryption, data protection, and credential security.",[300,307,320],{"id":301,"collection":302,"item":303},88,"block_markdown",{"id":304,"sort":7,"user_created":19,"date_created":305,"user_updated":7,"date_updated":7,"content":306},"df9ab668-cebb-4eb7-bdcd-2e8e44ffca33","2026-11-09T14:41:18.156Z","*What we know as of November 9, 2026, from GitGuardian's report of November 9, 2026. Figures are theirs.*\n\nClaude Code asks before it runs a shell command, and it offers a shortcut for commands you expect to approve all afternoon. GitGuardian researcher Guillaume Valadon has published an account of what that shortcut has left behind in Claude Code projects on public GitHub: 31,088 distinct secrets in the file `.claude/settings.local.json`, spread across 23,276 repositories between January 2025 and November 7, 2026. GitGuardian says 5,343 of those secrets were valid when it detected them.\n\nThe report builds on an analysis Apiiro published on November 5. Apiiro looked at what is exposed in current copies of the file; GitGuardian counted every version it saw pushed, including versions that were later deleted or rewritten, and checked whether each credential still worked. The leak is not a breach of any one company. It is a habit, repeated by thousands of developers, that turned a local convenience into a public record of their keys.\n\n## How does an approved command end up holding a key?\n\nGitGuardian walks through the case that first put it on the trail. A developer asks Claude Code to list the workflows on an n8n server, and the agent proposes a `curl` command with the n8n API key in a header. The developer answers \"Yes, and don't ask again.\" According to the report, Claude Code then writes an allow rule into `.claude/settings.local.json` in the project folder, and that rule is the command string itself, key included.\n\nThe report says Claude Code keeps that file out of git on the machine where it creates it, but nothing in the repository does. On another machine, in an older clone, or where the file was already tracked, it gets committed along with everything else. In a sample of about 3,000 occurrences, GitGuardian found every secret it could place sitting in an allow rule or an environment block, in the exact shape the permission prompt writes.\n\nBy GitGuardian's count, `curl` commands carrying bearer tokens and API keys make up about half of the volume. The credentials that most often still worked came from database and SSH commands: the file held 1,955 distinct valid Postgres connection strings and 292 valid SSH passwords, along with valid Google API keys, Telegram bot tokens and AI service keys. The researchers add that 63% of occurrences came from generic detectors, such as a password after `PGPASSWORD=`, which has no provider prefix for a pattern-based scanner to match.\n\n## Why doesn't deleting the file fix it?\n\nBecause copies have already travelled. GitGuardian also looked at public Docker Hub images and found the same files in 543 image repositories and 7,625 tags. The report explains why: a `COPY . .` instruction in a Dockerfile takes the working tree rather than the git index, so a file that git ignores still ships unless `.dockerignore` lists `.claude/`. That produced 613 distinct secrets, 99 of them valid, and the report describes one valid Cloudflare API token that appears in 559 tags of a single image. Deleting the file from the repository does nothing for images already pushed, nor for forks and git history.\n\nThe report notes two related exposures. `CLAUDE.md`, the instructions file developers give the agent, held 6,155 distinct secrets, 2,537 of them valid, which GitGuardian calls the highest validity rate of any file it examined. And it found the agent's own login file, `.claude/.credentials.json`, in 371 repositories, which it reads as whole home directories being committed. It reports a similar pattern for another agent's `.codex/auth.json`.\n\nThere is some encouraging news in the data. Monthly leaks in `settings.local.json` peaked at 12,535 occurrences in April 2026 and fell to 959 by October, a 92% drop. GitGuardian says it does not yet know why, and lists possible causes on both its own side and the tool's.\n\n## What has Anthropic said?\n\nGitGuardian cites a reply on Hacker News, reported by iTnews, from Anthropic's Claude Code lead. According to that account, the team is looking into the problem, Claude Code has not historically scrubbed secrets, and auto mode and built-in secret scanning are being prototyped but may not fully solve it. The reply also said Claude Code gitignores the file when it creates it, so exposed copies were likely created manually and committed. GitGuardian responds that, in the occurrences it inspected, the contents matched what the permission prompt writes rather than hand-typed rules.\n\n## What should teams do now?\n\nGitGuardian's advice for developers starts with rotation, because history, forks and images keep copies that a cleanup cannot reach. The order matters:\n\n1. Rotate every credential the file ever held.\n2. Add `.claude/` to the repository's own `.gitignore` and `.dockerignore`.\n3. Open the file, or run `/permissions`, and delete every rule that contains a secret.\n\nFrom then on, the report recommends referring to secrets by variable, such as `$N8N_API_KEY`, so that a saved rule records the name rather than the value, and approving narrow command prefixes rather than a broad rule that approves any `curl`. For security teams, it suggests treating agent configuration folders and files such as `CLAUDE.md` and `.mcp.json` the way they already treat `.env` files: scanned before commit, in CI, in history and in the container registry.\n\n## What is the wider lesson for credentials you share at work?\n\nA key pasted into a command does not stay in that command. It can be written to a settings file, kept in a transcript, baked into an image and pushed somewhere public, long after the task that needed it is done. The same is true of a key pasted into a team chat so a colleague can try something quickly: the convenient copy is the one that outlives the work.\n\nThe habit that helps in both places is to keep the value out of the text people and tools save. Load keys from the environment or a secrets manager rather than typing them into commands, and when a teammate needs a key or a `.env` file, hand it over in an encrypted link that expires after it is read rather than in a message thread. Our guides to [sharing an API key](https://credenshare.io/guides/share-an-api-key) and [sharing .env files](https://credenshare.io/guides/share-env-files) cover the handover; with CredenShare, browser-created shares are encrypted before they leave the browser, while shares created from Slack are encrypted on CredenShare's servers. And if a key does turn up somewhere public, our post on [the LiteLLM key that was deleted but not revoked](https://credenshare.io/blog/litellm-deleted-key-not-revoked) shows why rotation, not deletion, is what closes the door.\n\n---\n\n**Sources** (checked on November 9, 2026):\n[GitGuardian: Claude Code settings.local.json Secrets: 17 months of exposure on GitHub, & Docker Hub (November 9, 2026)](https://blog.gitguardian.com/claude-code-settings-local-json-secrets-docker-hub/)\n\n*Product names are trademarks of their respective owners. CredenShare is not affiliated with them.*",{"id":308,"collection":309,"item":310},89,"block_newsletter",{"id":311,"sort":7,"user_created":19,"date_created":312,"user_updated":7,"date_updated":7,"headline":313,"description":314,"placeholder_text":315,"button_text":316,"button_style":26,"form_action":7,"success_message":317,"error_message":318,"layout":319,"show_name_field":7,"background_color":7,"text_color":7,"style":7},"f61b7329-7e22-4426-b6b9-e3ca757a0cb5","2026-11-09T14:41:18.188Z","Get the next one in your inbox","Every two weeks: one credential incident explained, three things worth knowing, and the practical steps from our latest guides. Unsubscribe any time.","Your work email","Subscribe","Almost there: check your inbox for a confirmation link.","Something went wrong. Please try again.","card",{"id":321,"collection":322,"item":323},90,"block_cta",{"id":324,"sort":7,"user_created":19,"date_created":325,"user_updated":7,"date_updated":7,"headline":326,"description":327,"alignment":328,"layout":329,"background_type":330,"background_color":7,"background_image":7,"gradient_start":331,"gradient_end":332,"gradient_direction":333,"text_color":7,"style":7,"buttons":334},"94585da6-e833-43ab-8cd2-1865b7c71d7f","2026-11-09T14:41:18.208Z","Hand over a key without pasting it into chat","Free plan: 3 shares a day, encrypted in your browser.","center","stacked","gradient","#4c1d95","#7c3aed","to-right",[335,341],{"id":336,"sort":4,"user_created":19,"date_created":337,"user_updated":7,"date_updated":7,"cta_id":324,"label":338,"url":339,"variant":340,"size":7,"icon":7,"open_new_tab":7},"8a5809ba-638f-4f23-9a80-b52b5f47d247","2026-11-09T14:41:18.216Z","Get started free","https://app.credenshare.io/register?utm_source=credenshare.io&utm_medium=blog&utm_campaign=claude-code-settings-file-secrets-leak","solid",{"id":342,"sort":74,"user_created":19,"date_created":343,"user_updated":7,"date_updated":7,"cta_id":324,"label":344,"url":84,"variant":345,"size":7,"icon":7,"open_new_tab":7},"7aeac7b8-fef8-4630-b1a7-67b2bf6f1d19","2026-11-09T14:41:18.225Z","Read the guides","outline",{"id":347,"storage":348,"filename_disk":349,"filename_download":350,"title":351,"type":352,"folder":7,"uploaded_by":19,"created_on":353,"modified_by":7,"modified_on":354,"charset":7,"filesize":355,"width":356,"height":357,"duration":7,"embed":7,"description":7,"location":7,"tags":7,"metadata":358,"focal_point_x":7,"focal_point_y":7,"tus_id":7,"tus_data":7,"uploaded_on":359},"b0520259-a126-4864-8fe9-25172a984edc","s3","b0520259-a126-4864-8fe9-25172a984edc.png","blog-claude-code-settings-file-secrets-leak.png","Claude Code settings files leaked 31,088 secrets on GitHub (illustration)","image/png","2026-11-09T14:41:17.770Z","2026-11-09T14:41:18.056Z","451370",1600,900,{},"2026-11-09T14:41:18.054Z",{"id":361,"status":265,"sort":7,"user_created":19,"date_created":362,"user_updated":19,"date_updated":363,"name":5,"bio":364,"slug":365,"social_links":7,"seo":7,"avatar":7},"5fd13617-6298-4746-90f0-1c5c09ae18a3","2026-02-09T19:40:40.523Z","2026-02-09T19:43:37.635Z","The CredenShare team writes about secure credential sharing, password management, and enterprise security best practices.","credenshare",1794237320583]