diff --git a/credentials.md b/credentials.md
new file mode 100644
index 0000000..6cf0b5c
--- /dev/null
+++ b/credentials.md
@@ -0,0 +1,11 @@
+# Senior Kiosk — Credentials
+
+> **Keep this file private.** Do not share publicly.
+
+## Gmail App Password (for Roundcube IMAP)
+
+- **Account**: Gmail account used on the kiosk
+- **Purpose**: Roundcube webmail IMAP/SMTP access
+- **App Password**: `zrhe ncfw zvgb qqfs`
+- **Created**: 2026-05-21
+- **Note**: Spaces are part of the display only — enter without spaces when configuring Roundcube: `zrhencfwzvgbqqfs`