diff --git a/README.md b/README.md
index 5de9037..37e9f69 100644
--- a/README.md
+++ b/README.md
@@ -50,12 +50,33 @@ I manage my dotfiles using [dotdrop](https://github.com/deadc0de6/dotdrop).
    brew bundle install --file=~/.files/config/brew/Brewfile
    ```
 
-## Import new files
+## Encrypted files
+
+### Initially import a dot file as encrypted file
 
 ```shell
 dotdrop import --transw=_encrypt --transr=_decrypt <file>
 ```
 
+Installs/updates will now be automatically decrypted/encrypted.
+
+### Decrypt a dotfile manually
+
+```shell
+age --decrypt -i ~/.ssh/identities/phg-age-dotfiles -o <ouput paht for decrypted file> <path to encrypted file>
+```
+
+### Encrypt a dotfile manually
+
+```shell
+cat <path to plain file> | age -R ~/.ssh/identities/phg-age-dotfiles.pub > <path to encrypted file>
+```
+
+### Edit an encrypted dotfile
+
+TBD
+
+
 ## Backup/Restore settings for macOS native user preferences
 
 See here for a defaults documentation: <https://macos-defaults.com/>