diff --git a/AGENTS.md b/AGENTS.md
index 89819ebe273f..95fe74ab2e2b 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -289,10 +289,10 @@ Each network has its own genesis, bootstrap peers, actor bundles, and upgrade ep
 
 ```bash
 # Mainnet (requires snapshot download)
-forest --encrypt-keystore false
+forest
 
 # Calibnet (testnet, auto-download snapshot)
-forest --chain calibnet --auto-download-snapshot --encrypt-keystore false
+forest --chain calibnet --auto-download-snapshot
 
 # Using Docker
 docker run --init -it --rm ghcr.io/chainsafe/forest:latest --chain calibnet --auto-download-snapshot
@@ -326,7 +326,7 @@ forest-tool snapshot fetch --chain calibnet
 forest-tool snapshot export --output snapshot.car
 
 # Import snapshot
-forest --import-snapshot snapshot.car --encrypt-keystore false
+forest --import-snapshot snapshot.car
 ```
 
 ### Debugging
diff --git a/README.md b/README.md
index 96494748e395..80964c7eaf71 100644
--- a/README.md
+++ b/README.md
@@ -232,7 +232,7 @@ categories:
 
 | Binary                                                                          | Role                                                     | Command example                                    |
 | ------------------------------------------------------------------------------- | -------------------------------------------------------- | -------------------------------------------------- |
-| [`forest`](https://docs.forest.chainsafe.io/reference/cli#forest)               | Forest daemon, used to connect to the Filecoin network   | `forest --chain calibnet --encrypt-keystore false` |
+| [`forest`](https://docs.forest.chainsafe.io/reference/cli#forest)               | Forest daemon, used to connect to the Filecoin network   | `forest --chain calibnet --auto-download-snapshot` |
 | [`forest-wallet`](https://docs.forest.chainsafe.io/reference/cli#forest-wallet) | Manage Filecoin wallets and interact with accounts       | `forest-wallet new secp256k1`                      |
 | [`forest-cli`](https://docs.forest.chainsafe.io/reference/cli#forest-cli)       | Human-friendly wrappers around the Filecoin JSON-RPC API | `forest-cli info show`                             |
 | [`forest-tool`](https://docs.forest.chainsafe.io/reference/cli#forest-tool)     | Handle tasks not involving the Forest daemon             | `forest-tool snapshot fetch`                       |
diff --git a/docs/docs/users/guides/methods_filtering.md b/docs/docs/users/guides/methods_filtering.md
index 907af2b07046..4e99e5f0b351 100644
--- a/docs/docs/users/guides/methods_filtering.md
+++ b/docs/docs/users/guides/methods_filtering.md
@@ -33,7 +33,7 @@ In this example, will disallow the `Filecoin.ChainExport` method which is used t
 2. Run `forest` with the `--rpc-filter-list` argument:
 
 ```shell
-forest --chain calibnet --encrypt-keystore false --rpc-filter-list filter-list.txt
+forest --chain calibnet --rpc-filter-list filter-list.txt
 ```
 
 3. Try to export the snapshot using the `forest-cli`:
diff --git a/docs/docs/users/knowledge_base/jwt_handling.md b/docs/docs/users/knowledge_base/jwt_handling.md
index 628656d6db86..3c1faab45ebb 100644
--- a/docs/docs/users/knowledge_base/jwt_handling.md
+++ b/docs/docs/users/knowledge_base/jwt_handling.md
@@ -25,7 +25,7 @@ Technically, tokens have an expiration date, the default is 100 years, so there'
 :::
 
 :::danger
-**Keep your tokens safe!** Anyone with access to the admin token can control your node if the RPC API is exposed to the internet. The private key is stored in an optionally encrypted file in the node's data directory. The default location on Linux is `$HOME/.local/share/forest/keystore` or `$HOME/.local/share/forest/keystore.json` if encryption is disabled.
+**Keep your tokens safe!** Anyone with access to the admin token can control your node if the RPC API is exposed to the internet. The private key is stored in an optionally encrypted file in the node's data directory. The default location on Linux is `$HOME/.local/share/forest/keystore` or `$HOME/.local/share/forest/keystore.json` if encryption is disabled. You should **not** disable keystore encryption in production environments.
 :::
 
 ```shell