diff --git a/.gitignore b/.gitignore
index 5a18b7dd63..01fdfb27fb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -48,11 +48,6 @@ local.properties
 
 # Gradle
 .gradle/
-example/properties/
-gradle.properties
-tests.properties
-api.properties
-tests.properties-extra
 .gradletasknamecache
 
 # Generated by gradle
@@ -70,9 +65,16 @@ WordPress/src/main/res/values/com_crashlytics_export_strings.xml
 # libs
 libs/utils
 
+# Non-vendored dependencies
+/vendor
+
+# Possible credentials locations
+example/properties/
+gradle.properties
+tests.properties
+api.properties
+tests.properties-extra
 # Ignore non-encrypted files in .configure-files
 .configure-files/*
 !.configure-files/*.enc
 
-# Non-vendored dependencies
-/vendor
diff --git a/example/properties-example/README.md b/example/properties-example/README.md
index 4a839e3c04..ff86f8e640 100644
--- a/example/properties-example/README.md
+++ b/example/properties-example/README.md
@@ -3,8 +3,8 @@
 We use gradle property files to store sensitive information under the git ignored `example/properties/` folder.
 There are 2 ways to set these up:
 
-1. If you work at Automattic, you should have a mobile secrets folder which should contain all the necessary properties.
-You can run `./gradlew applyConfiguration` from the root of the project to copy these.
+1. If you work at Automattic, you should have a mobile secrets folder which should contain the necessary decryption key.
+You can run `./gradlew applyConfiguration` from the root of the project to decrypt the files in `.configure-files`.
 2. Otherwise, you can copy the `properties-example` folder with the following command and use your own credentials: `cp -a example/properties-example/ example/properties/`
 
 ### Deprecated Properties