diff --git a/.config/CredScanSuppressions.json b/.config/CredScanSuppressions.json
index 984a86f68e69e6..618d5e9bda7e9e 100644
--- a/.config/CredScanSuppressions.json
+++ b/.config/CredScanSuppressions.json
@@ -53,7 +53,9 @@
                 "src/libraries/System.Net.Http/tests/UnitTests/HttpEnvironmentProxyTest.cs",
                 "src/libraries/System.Net.Mail/tests/Functional/SmtpClientTest.cs",
                 "src/libraries/System.Security.Cryptography.Xml/tests/SignedXmlTest.cs",
-                "src/libraries/System.Security.Cryptography.Xml/tests/TestHelpers.cs"
+                "src/libraries/System.Security.Cryptography.Xml/tests/TestHelpers.cs",
+                "src/libraries/System.Security.Cryptography.Csp/tests/PasswordDeriveBytesTests.cs",
+                "src/libraries/System.Security.Cryptography.Csp/tests/TrimmingTests/PasswordDeriveBytesTest.cs"
             ],
             "placeholder": [
                 "\"anotherpassword\"",
@@ -63,7 +65,9 @@
                 "\"rightpassword\"",
                 "\"testcertificate\"",
                 "\"unused\"",
-                "\"wrongpassword\""
+                "\"wrongpassword\"",
+                "\"PasswordGoesHere\"",
+                "\"FakePasswordsAreHard\""
             ]
         }
     ]