diff --git a/fern/products/sdks/project-structure.mdx b/fern/products/sdks/project-structure.mdx
index cd14112a0..49476aa22 100644
--- a/fern/products/sdks/project-structure.mdx
+++ b/fern/products/sdks/project-structure.mdx
@@ -132,3 +132,13 @@ See [Project structure (API Definitions)](/api-definitions/overview/project-stru
 1. **Create repositories**: Set up your source repository, plus one repository for each SDK
 2. **Install Fern GitHub App**: Install the [Fern GitHub App](https://github.com/apps/fern-api) on all repositories
 3. **Configure `generators.yml`**: In your `generators.yml`, add a reference to each SDK repository.
+
+## Secret management
+
+The Fern GitHub App automatically syncs secrets from your source repository to your SDK repositories during each generation run. This ensures your SDK repositories always have up-to-date credentials for publishing to package registries like npm, PyPI, and Maven Central.
+
+Configure secrets only in your source repository (where `generators.yml` lives). The Fern GitHub App copies these secrets to each SDK repository's GitHub Actions secrets, so you don't need to manually configure secrets in multiple places. If you update a credential in your source repository, the next generation run automatically propagates the change to all SDK repositories.
+
+<Note>
+If you notice secrets updated in your SDK repository that you didn't change directly, this is the Fern GitHub App syncing credentials from your source repository.
+</Note>