diff --git a/README.md b/README.md
index 99123cf..63454df 100644
--- a/README.md
+++ b/README.md
@@ -126,3 +126,17 @@ Querying disks map example:
 ```
 
 \- will return the system disk device name
+
+
+## Encryption
+
+Currently, Talm does not have built-in encryption support, but you can transparently encrypt your secrets using the [git-encrypt](https://github.com/AGWA/git-crypt) extension.
+
+Example `.gitattributes` file:
+
+```
+kubeconfig filter=git-crypt diff=git-crypt
+secrets.yaml filter=git-crypt diff=git-crypt
+talosconfig filter=git-crypt diff=git-crypt
+.gitattributes !filter !diff
+```