diff --git a/src/content/docs/explanations/secrets/index.mdx b/src/content/docs/explanations/secrets/index.mdx
index 985c40f0..9ad63e93 100644
--- a/src/content/docs/explanations/secrets/index.mdx
+++ b/src/content/docs/explanations/secrets/index.mdx
@@ -85,12 +85,11 @@ into the string `"***"`.
 
 In general, Tenzir does not assume that a secret is valid UTF-8, although most
 operators will make that constraint. Conversely some secret stores may require
-your secrets to be UTF-8, while some operators expect a binary secret.
+your secrets to be UTF-8, while some operators expect a binary or otherwise
+encoded secret.
 
-To bridge this gap, you can base64-decode secrets using the
-[`decode_base64`](/reference/functions/decode_base64) function and
-base64-encode them using the [`encode_base64`](/reference/functions/encode_base64)
-function:
+To bridge this gap, you can use Tenzir's [encoding](/reference/functions#encoding)
+and [decoding](/reference/functions#decoding) functions:
 
 ```tql
 let $binary_secret = secret("my-encoded-secret").decode_base64()