diff --git a/.gitignore b/.gitignore
index 663887d..eee3658 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,6 @@
 # 敏感配置文件
 secrets.env
+passwords.txt
 *.env
 *.key
 *.pem
diff --git a/passwords.example.txt b/passwords.example.txt
new file mode 100644
index 0000000..80a0c70
--- /dev/null
+++ b/passwords.example.txt
@@ -0,0 +1,12 @@
+# 敏感密钥配置示例文件，真实密钥请放在 passwords.txt 中（已加入 .gitignore 不会提交到Git）
+# MySQL
+MYSQL_ONLINE_PASSWORD=***线上MySQL密码***
+MYSQL_TEST_PASSWORD=***测试MySQL密码***
+
+# PostgreSQL
+PG_ONLINE_PASSWORD=***线上PostgreSQL密码***
+PG_TEST_PASSWORD=***测试PostgreSQL密码***
+
+# Elasticsearch
+ES_TEST_PASSWORD=***测试ES密码***
+ES_ONLINE_PASSWORD=***线上ES密码***
diff --git a/passwords.txt b/passwords.txt
deleted file mode 100644
index 84b769e..0000000
--- a/passwords.txt
+++ /dev/null
@@ -1,6 +0,0 @@
-fsdo45ijfmfmuu77$%^&
-fdsfiidier^$*hjfdijjd232
-LdfjdjL83h3h3^$&**YGG*
-dsjsLGU&%$%FG*((yy9y8
-lPLYr2!ap%^4UQb#
-F%?QDcWes7N2WTuiYD11