diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a149dbc..34ca4c4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -13,3 +13,9 @@ repos:
     - id: name-tests-test
     - id: requirements-txt-fixer
     - id: trailing-whitespace
+- repo: git://github.com/Yelp/detect-secrets
+  rev: 0.9.1
+  hooks:
+    - id: detect-secrets
+      args: ['--baseline', '.secrets.baseline']
+      exclude: tests/.*
diff --git a/.secrets.baseline b/.secrets.baseline
new file mode 100644
index 0000000..0cf9624
--- /dev/null
+++ b/.secrets.baseline
@@ -0,0 +1,19 @@
+{
+  "exclude_regex": "tests/.*",
+  "generated_at": "2018-07-12T23:43:31Z",
+  "plugins_used": [
+    {
+      "base64_limit": 4.5,
+      "name": "Base64HighEntropyString"
+    },
+    {
+      "hex_limit": 3,
+      "name": "HexHighEntropyString"
+    },
+    {
+      "name": "PrivateKeyDetector"
+    }
+  ],
+  "results": {},
+  "version": "0.9.1"
+}