{
  "id": 19812568,
  "title": "Secrets in AI prompts: did the AI leak my password?",
  "url": "https://urgent.news/2026/11/13/secrets-in-ai-prompts-did-the-ai-leak-my-password",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-13T13:34:45.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/systemdesignsimple/secrets-in-ai-prompts-did-the-ai-leak-my-password-2646"
  },
  "original_language": "en",
  "account": "The article discusses the potential for secrets, such as passwords, to be leaked through AI prompts. When a password is included in an API request to a model provider, the provider receives it even if it doesn't appear in the response. Any log that captures request bodies will also retain a copy of the password. In a local simulation using Node.js, 40 out of 40 simulated prompts contained a fake password, and the same password appeared in 40 out of 40 log lines. However, only 22 out of 40 scripted answers contained the password. A redactor tool was used to remove sensitive information from the request before it was sent or logged, but even with redaction, the password appeared in 0 out of 40 responses. The article explains the process of how secrets can be included in AI prompts through various inputs, such as user input, retrieved documents, file contents, and tool results. It also highlights the importance of logging configuration and the potential for secrets to remain in subsequent requests while that history is retained.",
  "summary": "Secrets in AI prompts are exposed by the request, whatever the reply says. If a password is in the request your app sends, the provider receives it even when the answer never repeats it, and any log that captures request bodies keeps a copy. In our local simulation a fake password was in 40 of 40 outgoing prompts and 40 of 40 body-capture log lines but only 22 of 40 scripted answers, and a…",
  "key_points": [
    "Passwords can leak via AI prompts even if not in response.",
    "Logs capturing request bodies retain passwords.",
    "Redaction fails to prevent passwords from appearing in 0/40 responses."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}