diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml
index 5cfd4e9c..847a12cb 100644
--- a/.github/workflows/pythonpublish.yml
+++ b/.github/workflows/pythonpublish.yml
@@ -5,6 +5,7 @@ on:
     types: [published]
 
 permissions:
+  id-token: write # trusted publishing
   contents: read
 
 jobs:
@@ -26,5 +27,3 @@ jobs:
         run: python -m build
       - name: Publish a Python distribution to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}