diff --git a/docs/build/tools/flow-cli/flow.json/security.md b/docs/build/tools/flow-cli/flow.json/security.md
index c5e760e581..22694cf556 100644
--- a/docs/build/tools/flow-cli/flow.json/security.md
+++ b/docs/build/tools/flow-cli/flow.json/security.md
@@ -281,6 +281,18 @@ secrets.json
 }
 ```
 
+:::info Extracting Existing Inline Keys
+
+If you already have inline keys in your `flow.json`, you can easily extract them to separate files:
+
+```bash
+flow config extract-key --all
+```
+
+This command creates `.pkey` files with restricted permissions, updates your `flow.json` to reference them, and adds the key files to `.gitignore`.
+
+:::
+
 ## Troubleshooting
 
 ### Environment Variables Not Loading