diff --git a/docs/credentials/extract_credentials.md b/docs/credentials/extract_credentials.md
new file mode 100644
index 0000000000..7234d56517
--- /dev/null
+++ b/docs/credentials/extract_credentials.md
@@ -0,0 +1,11 @@
+Extract credentials
+===================
+
+Credentials and encrypted settings can be extracted using the following snippet:
+
+```python
+# awx-manage shell_plus
+>>> from awx.main.utils import decrypt_field
+>>> cred = Credential.objects.get(name="my private key")
+>>> decrypt_field(cred, "ssh_key_data")
+```