diff --git a/.gitignore b/.gitignore
index 55f015b..2da5536 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,5 @@
 home_config/nvim/lazy-lock.json
 __pycache__/
 *.bak
+# zellij web-pilot auth tokens — credentials, never commit
+home_config/zellij/pilot-tokens/