diff --git a/secrets.md b/secrets.md
index d369c8b..252779c 100644
--- a/secrets.md
+++ b/secrets.md
@@ -175,7 +175,7 @@ imports = [
 >
 > Important: never commit the private key (the `AGE-SECRET-KEY-...` line) into the repository - only the `age1...` public recipient belongs in *[.sops.yaml](.sops.yaml)*.
 
-> [!NOTE]
+> [!TIP]
 > After you add a new public `age1...` recipient to *[.sops.yaml](.sops.yaml)*, update any existing encrypted files so the new recipient is included in each file's recipients list. Use `sops updatekeys <file>` to update a single file; sops must be able to decrypt the file locally (for example by having a private key available or by setting `SOPS_AGE_KEY_FILE`).
 >
 > Examples: