diff --git a/sonar-project.properties b/sonar-project.properties
index b70c88cc2..3e6241fe7 100644
--- a/sonar-project.properties
+++ b/sonar-project.properties
@@ -53,3 +53,14 @@ sonar.coverage.exclusions=\
 
 # Locale files are large near-identical literal objects — keep them out of duplication metrics
 sonar.cpd.exclusions=shared/src/i18n/**
+
+# Locale files are UI copy — strings like "Password", "API key", "token" are labels,
+# not credentials, and the secret detectors false-positive on them constantly.
+# Ignore the secrets analyzer and the hard-coded-credential rules on i18n only.
+sonar.issue.ignore.multicriteria=i18nsec1,i18nsec2,i18nsec3
+sonar.issue.ignore.multicriteria.i18nsec1.ruleKey=secrets:*
+sonar.issue.ignore.multicriteria.i18nsec1.resourcePattern=shared/src/i18n/**
+sonar.issue.ignore.multicriteria.i18nsec2.ruleKey=typescript:S2068
+sonar.issue.ignore.multicriteria.i18nsec2.resourcePattern=shared/src/i18n/**
+sonar.issue.ignore.multicriteria.i18nsec3.ruleKey=typescript:S6418
+sonar.issue.ignore.multicriteria.i18nsec3.resourcePattern=shared/src/i18n/**