diff --git a/FAQ.md b/FAQ.md
new file mode 100644
index 0000000..2b8d355
--- /dev/null
+++ b/FAQ.md
@@ -0,0 +1,15 @@
+# faq
+
+While this file may imply I'm answering *your* questions about my dotfiles & workflow, I'm actually trying to answer my own.
+
+> [!WARNING]
+> This file is completely unstructed, incomplete and is in progress, potentially indefinitely until I delete it.
+
+- Encryption Workflow
+  - How does `age` work?
+  - Where is my encryption key kept?
+- SSH Management
+  - Private SSH hosts will be encrypted with `age` and stored in the repository.
+- GPG Key Management
+  - GPG Keys will be stored in BitWarden and pulled down with the associated CLI.
+  - A default GPG key will be used for all signing and encryption purposes, but can use the local configuration to change it.
\ No newline at end of file