diff --git a/docs/docs/guides/installation/crd.md b/docs/docs/guides/installation/crd.md
index e010de8a3c..a3512bc1ef 100644
--- a/docs/docs/guides/installation/crd.md
+++ b/docs/docs/guides/installation/crd.md
@@ -21,7 +21,14 @@ zitadelctl takeoff
 kubectl apply --filename ./database.yml,./zitadel.yml
 
 # Write the encryption keys
-wget https://raw.githubusercontent.com/caos/zitadel/main/site/docs/start/templates/example_keys && zitadelctl writesecret zitadel.keys.existing --file ./example_keys
+cat EOF << zitadelctl writesecret zitadel.keys.existing --stdin
+otpverificationkey_1: $(openssl rand -base64 22)
+cookiekey_1: $(openssl rand -base64 22)
+domainverificationkey_1: $(openssl rand -base64 22)
+idpconfigverificationkey_1: $(openssl rand -base64 22)
+oidckey_1: $(openssl rand -base64 22)
+userverificationkey_1: $(openssl rand -base64 22)
+EOF
 
 # Write the Twiilio sender ID and auth token so that ZITADEL is able to send your users SMS.
 TWILIO_SID=<My Twilio Sender ID>
diff --git a/docs/docs/guides/installation/templates/example_keys b/docs/docs/guides/installation/templates/example_keys
deleted file mode 100644
index 5cba015387..0000000000
--- a/docs/docs/guides/installation/templates/example_keys
+++ /dev/null
@@ -1,6 +0,0 @@
-otpverificationkey_1: passphrasewhichneedstobe32bytes!
-cookiekey_1: passphrasewhichneedstobe32bytes!
-domainverificationkey_1: passphrasewhichneedstobe32bytes!
-idpconfigverificationkey_1: passphrasewhichneedstobe32bytes!
-oidckey_1: passphrasewhichneedstobe32bytes!
-userverificationkey_1: passphrasewhichneedstobe32bytes!