# faq While this file may imply I'm answering *your* questions about my dotfiles & workflow, I'm actually trying to answer my own. > [!WARNING] > This file is completely unstructed, incomplete and is in progress, potentially indefinitely until I delete it. - Encryption Workflow - How does `age` work? - Where is my encryption key kept? - SSH Management - Private SSH hosts will be encrypted with `age` and stored in the repository. - GPG Key Management - GPG Keys will be stored in BitWarden and pulled down with the associated CLI. - A default GPG key will be used for all signing and encryption purposes, but can use the local configuration to change it.