diff --git a/manifest/config/config.example.yaml b/manifest/config/config.example.yaml
index 7110929..2d34771 100644
--- a/manifest/config/config.example.yaml
+++ b/manifest/config/config.example.yaml
@@ -44,6 +44,10 @@ jwt:
   adminMaxSessions:  5
   tenantMaxSessions: 10
 
+# Crypto (AES-256 encryption key, 32 bytes hex-encoded = 64 hex chars)
+crypto:
+  encryptionKey: "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2"
+
 # Email SMTP (fallback defaults, override via opt_options or env vars)
 email:
   smtp: