diff --git a/secrets/universal/net/README.md b/secrets/universal/net/README.md
new file mode 100644
index 00000000..3407617b
--- /dev/null
+++ b/secrets/universal/net/README.md
@@ -0,0 +1,5 @@
+## to add a new network
+- connect to it (via GUI or `iwctl` TUI)
+- find it under `/var/lib/iwd`
+- `sops ./<NETWORK_NICKNAME>.psk.bin` and paste the contents from `/var/lib/iwd/SSID.psk`
+        - in same file: add `# SSID=UNQUOTED_NETWORK_NAME` to the top