diff --git a/README.md b/README.md
index fb1bb4f..318ad2b 100644
--- a/README.md
+++ b/README.md
@@ -68,9 +68,8 @@ Files like `.envrc` (direnv) and `.environment-*` are intentionally **not** trac
 # 1. Install the encryption tool
 brew install age
 
-# 2. Download the secrets tool
-#    Replace <you> with your GitHub username or org
-git clone git@github.com:<you>/secrets.git ~/dev/secrets
+# 2. Download the secrets tool (this repo — contains only the CLI, no secret files)
+git clone https://github.com/bmajewski/secrets.git ~/dev/secrets
 
 # 3. Make the 'secrets' command available everywhere
 #    Add this line to your shell config file (~/.zshrc on Mac):
@@ -99,7 +98,7 @@ On each new machine (your desktop, a teammate's laptop, etc.):
 ```bash
 # 1. Install prerequisites and the tool (same as steps 1-3 above)
 brew install age
-git clone git@github.com:<you>/secrets.git ~/dev/secrets
+git clone https://github.com/bmajewski/secrets.git ~/dev/secrets
 export PATH="$HOME/dev/secrets:$PATH"  # add to ~/.zshrc
 
 # 2. Clone the encrypted secrets repo