diff --git a/home/.chezmoitemplates/secrets/APPLE_PASSWORD b/home/.chezmoitemplates/secrets/APPLE_PASSWORD
new file mode 100644
index 00000000..b64b9d2e
--- /dev/null
+++ b/home/.chezmoitemplates/secrets/APPLE_PASSWORD
@@ -0,0 +1,7 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMTU5odW1OamR2MUJFVHhu
+UThabC9Ed2hDalAvM2oyVGp5bmI3UmdzN2tjClN5VkpmNlVEK3RiY0ZvUDVOWlAw
+SUdFWFJSTmRBcjNKQXNNWUVSbC9sQWMKLS0tIE5WQlhzc3NEQWMxNVBmTjVtNW1M
+TlFUK2ZRODhIaWl1UnhxZUxlWDlXTTQKH+benWRZPeh4ahHhc7rLbhhR+r2MIkpM
+Qp4po6bkGBhDFNXY1DxWEEplbKKZj+c=
+-----END AGE ENCRYPTED FILE-----
\ No newline at end of file
diff --git a/home/.chezmoitemplates/secrets/APPLE_USERNAME b/home/.chezmoitemplates/secrets/APPLE_USERNAME
new file mode 100644
index 00000000..b4ce19d8
--- /dev/null
+++ b/home/.chezmoitemplates/secrets/APPLE_USERNAME
@@ -0,0 +1,7 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXUG5IM0VYdVZTVWE2WW9Z
+eG5NZnhRRDRHVktHR1lHcTV6SzRyV29Ka1NJCmZYOStxeEZ2QmdtVXhOZHVLaEhD
+alZnZnlNWklBTmkxODBrQ2ZKUTJTNzAKLS0tIENWOXl4a2lQNGhMRHhCN2FBeFdH
+NWVlem1MWlFaRytjT3hYOWRNRDVqS0UK37gPIHDbK2yXVuA8ZvjcxhLFzUpsFBOg
+vlEXCkLmMiHmpCYkX7EnMSLX+EVwrlu5q2nyDvs=
+-----END AGE ENCRYPTED FILE-----
\ No newline at end of file
diff --git a/home/dot_config/shell/exports.sh.tmpl b/home/dot_config/shell/exports.sh.tmpl
index 35afea97..6a3182a9 100644
--- a/home/dot_config/shell/exports.sh.tmpl
+++ b/home/dot_config/shell/exports.sh.tmpl
@@ -335,11 +335,6 @@ export WGETRC="$XDG_CONFIG_HOME/wget/wgetrc"
 ### Whalebrew
 export WHALEBREW_CONFIG_DIR="$XDG_CONFIG_HOME/whalebrew"
 
-### Xcodes
-# Apple ID username and password
-# export XCODES_USERNAME=""
-# export XCODES_PASSWORD=""
-
 ### CloudFlare Wrangler
 export WRANGLER_INSTALL_PATH="$XDG_DATA_HOME/wrangler"
 export WRANGLER_HOME="$XDG_DATA_HOME/wrangler"
diff --git a/home/dot_config/shell/private_private.sh.tmpl b/home/dot_config/shell/private_private.sh.tmpl
index ce2b3ff8..7229c9f8 100644
--- a/home/dot_config/shell/private_private.sh.tmpl
+++ b/home/dot_config/shell/private_private.sh.tmpl
@@ -59,4 +59,9 @@ export SURGE_TOKEN="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates"
 ### Vagrant Cloud
 export VAGRANT_CLOUD_TOKEN="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "VAGRANT_CLOUD_TOKEN")) }}{{ includeTemplate "secrets/VAGRANT_CLOUD_TOKEN" | decrypt }}{{ else }}{{ env "VAGRANT_CLOUD_TOKEN" }}{{ end }}"
 
+### Xcodes
+# Apple ID username and password
+export XCODES_USERNAME="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "APPLE_USERNAME")) }}{{ includeTemplate "secrets/APPLE_USERNAME" | decrypt }}{{ else }}{{ env "APPLE_USERNAME" }}{{ end }}"
+export XCODES_PASSWORD="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "APPLE_PASSWORD")) }}{{ includeTemplate "secrets/APPLE_PASSWORD" | decrypt }}{{ else }}{{ env "APPLE_PASSWORD" }}{{ end }}"
+
 {{ end -}}