diff --git a/modules/reference/pages/command/featureUtility-commands.adoc b/modules/reference/pages/command/featureUtility-commands.adoc
index 627931c11..27da457de 100644
--- a/modules/reference/pages/command/featureUtility-commands.adoc
+++ b/modules/reference/pages/command/featureUtility-commands.adoc
@@ -82,6 +82,10 @@ a|Configures the outbound HTTP proxy.
 |`proxyHost`, `proxyPort`, `proxyUser`, and `proxyPassword`
 a|Configures the outbound HTTPS proxy.
 
+|`WLP_AES_ENCRYPTION_KEY`
+|`wlp.password.encryption.key` or `wlp.aes.encryption.key`
+|Specifies a custom AES encryption key for decrypting passwords. If not specified, featureUtility uses the Liberty default AES encryption key. featureUtility also automatically loads the encryption key from the `bootstrap.properties` or `server.env` file of the specified server when running `featureUtility installServerFeatures`.
+
 |===
 {empty} +
 
@@ -132,6 +136,10 @@ remoteRepo2.user=operator
 remoteRepo2.password={aes}KM8dhwcv892Ss1sawu9R+
 ----
 
+=== Encrypt repository passwords
+
+For security, passwords in the `featureUtility.properties` file should be encrypted. The AES encryption algorithm is recommended. Use the `securityUtility encode` command to encrypt passwords before adding them to the properties file. For more information, see xref:command/securityUtility-encode.adoc[securityUtility encode].
+
 
 == Disable Maven Central fallback