# Config management of passwords/sensitive material

**URL:** <https://forum.ansible.com/t/config-management-of-passwords-sensitive-material/12528>\
**Category:** Ansible Project\
**Tags:** ansible-project\
**Created:** [March 19, 2013, 4:13am UTC](https://forum.ansible.com/t/config-management-of-passwords-sensitive-material/12528 "2013-03-19T04:13:06Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michael\_DeHaan](https://avatars.discourse-cdn.com/v4/letter/m/c4cdca/32.png) [@Michael\_DeHaan](https://forum.ansible.com/u/Michael_DeHaan)\
**Post date:** [March 19, 2013, 4:13am UTC](https://forum.ansible.com/t/config-management-of-passwords-sensitive-material/12528/1 "2013-03-19T04:13:06Z")

</div>

A popular way to do it is to keep your passwords outside of the tree,  
using something like:

vars\_files:  
&nbsp;&nbsp;&nbsp;&nbsp;- /some/dir/my\_passwords.yml

You could keep these in a different git repo.

I think someone else was doing this using a \*smudge\* filter in git,  
which I thought was pretty clever but haven't done this myself.