diff --git a/SECRETS.md b/SECRETS.md
index 7500471..87d49fa 100644
--- a/SECRETS.md
+++ b/SECRETS.md
@@ -1,12 +1,12 @@
 # Secrets — not stored in this repo
 
-Live passwords/keys live in sibling **`koopa-admin-secrets`**.
+Live passwords/keys live in sibling **`koopa-admin-secrets-enc-enc`**.
 
 ## Map
 
 ### Taler — host `/root`
 
-| What | Mirror (`koopa-admin-secrets/…`) | Live |
+| What | Mirror (`koopa-admin-secrets-enc/…`) | Live |
 |------|----------------------------------|------|
 | Bank admin/exchange/explorer/demo/bench | `koopa/host-root/taler-bank/*.txt` | `/root/bank-*-password.txt` |
 | Merchant instance goa-demo | `koopa/host-root/taler-merchant/…` | `/root/merchant-*-password.txt` |
@@ -28,8 +28,8 @@ Live passwords/keys live in sibling **`koopa-admin-secrets`**.
 ## Rules
 
 - **koopa-admin-log**: paths only; `@inline-secret@` in configs, never password/key material.
-- Pull/deploy: `koopa-admin-secrets/scripts/{pull,deploy}-from-koopa.sh`
-- Full inventory: `koopa-admin-secrets/MAP.md`
+- Pull/deploy: `koopa-admin-secrets-enc/scripts/{pull,deploy}-from-koopa.sh`
+- Full inventory: `koopa-admin-secrets-enc/MAP.md`
 
 ## Public (OK here)