diff --git a/.env.example b/.env.example
index dcf6db0..527eaaa 100644
--- a/.env.example
+++ b/.env.example
@@ -1,23 +1,43 @@
 # Kuma Strapper Environment Variables
 
-# Required: Base64-encoded SSH private key
+# =============================================================================
+# 1Password Connect (Optional - for secure secret management)
+# =============================================================================
+# When configured, secrets below can use op:// references instead of raw values
+# Example: SSH_PRIVATE_KEY=op://Vault/SSH Key/private key
+
+# 1Password Connect server URL
+#OP_CONNECT_HOST=http://op-connect-api:8080
+
+# 1Password Connect access token
+#OP_CONNECT_TOKEN=
+
+# =============================================================================
+# Required Settings
+# =============================================================================
+
+# Base64-encoded SSH private key (or op:// reference)
 # To encode your key: base64 -w 0 ~/.ssh/id_rsa
 SSH_PRIVATE_KEY=
 
-# Required: Uptime Kuma instance URL
+# Uptime Kuma instance URL
 UPTIME_KUMA_URL=http://localhost:3001
 
-# Required: Uptime Kuma API token
+# Uptime Kuma API token (or op:// reference)
 # Get this from Uptime Kuma Settings > API Keys
 UPTIME_KUMA_API_KEY=
 
-# Required: Claude/Anthropic API key
+# Claude/Anthropic API key (or op:// reference)
 # Get this from https://console.anthropic.com/
 CLAUDE_API_KEY=
 
-# Optional: Enable dev mode on startup
+# =============================================================================
+# Optional Settings
+# =============================================================================
+
+# Enable dev mode on startup
 # When enabled, Claude-suggested SSH commands require approval
 DEV_MODE=false
 
-# Optional: Enable debug mode for development
+# Enable debug mode for development
 DEBUG=false