If there has ever been data in a repository that you don't want to show to anyone, will it go down in history?

Question

git

During development, he did something stupid, made index.php, in which he directly wrote a password, login and api token for testing, while pushing it into the repository is the whole thing.
Then he came to his senses, deleted this data from index.php, pushed it again, and now there is a question:
if someone does a git clone of this repository, will he be able to see that the password, login and token were in the history? If so, what's the best way to go about wiping it out? Force push?

Answer 1

If the data is pushed into the turnip, it is already compromised, you need to change the real login, password and token.
Tool for cleaning such data from the reference github: link