# Using BFG (simplest) bfg --delete-files password.txt my-repo.git git push --force Stop using password.txt . Use environment variables ( .env ) and ensure the .env file is listed in your .gitignore file.
But in the age of automated credential scraping, convenience is a liability. Before you commit that next password.txt , remember: a bot is already waiting. password txt github
Search your own GitHub for password.txt . You might be surprised at what you find. # Using BFG (simplest) bfg --delete-files password