diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 5059cf6..1d9246d 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -61,11 +61,11 @@ jobs:
           name: release-dists
           path: dist/
 
+      # Authentication is via PyPI Trusted Publishing (OIDC) — no token needed.
+      # Configure the trusted publisher once on PyPI (see below) with:
+      #   owner: krichelj  repo: PyDiffGame
+      #   workflow: python-publish.yml  environment: pypi
       - name: Publish release distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           packages-dir: dist/
-          # Authenticate with a PyPI API token stored as the repository secret
-          # PYPI_API_TOKEN. (Leave this secret unset to fall back to OIDC
-          # Trusted Publishing instead.)
-          password: ${{ secrets.PYPI_API_TOKEN }}