# Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Source: [The Hacker News](https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html) · 2026-11-07 · Security
Page: https://themorning.dev/story/claude-code-s-don-t-ask-again-file-exposes-passwords-and-keys-in-1-122-public-co-804a43c3361e7807
Kind: security · Impact: high

## In brief

- Passwords and API keys typed into commands approved in Claude Code can be saved word-for-word when a user selects "Yes, and don't ask again".
- The saved approvals are sitting in 1,122 public copies on GitHub, where anyone can read them.
- The reporting refers to Anthropic's AI coding assistant, Claude Code.

## Why it matters

Developers who approved commands containing credentials may have leaked those secrets into public repositories, which means exposed keys should be treated as compromised.

## What to do

- Search your repositories for the Claude Code "don't ask again" approval file and remove any credentials stored in it.
- Rotate any passwords or API keys that were typed into approved Claude Code commands and may have been committed publicly.

## Timeline

- 2026-11-07: Reported that passwords and keys from Claude Code "Don't Ask Again" approvals are exposed in 1,122 public GitHub copies

## Coverage

- [Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files](https://dev.to/technoblogger14o3/claude-codes-dont-ask-again-exposes-passwords-in-1122-public-github-files-5amj) — DEV Community: ai, 2026-11-08
- [Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly](https://dev.to/paullovelace/claude-codes-dont-ask-again-leaked-developers-secrets-to-public-github-explained-honestly-4dck) — DEV Community: ai, 2026-11-08
- [Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files](https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again) — Hacker News: Front Page, 2026-11-07
- [Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub](https://thehackernews.com/2026/11/claude-codes-dont-ask-again-file.html) — The Hacker News, 2026-11-07

Tags: claude-code, security, secrets-leak, github, api-keys, ai-coding-assistants

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev