# Secret file (`content.secret_file`)

HTTP 422. Files like .env*, private keys (*.pem, *.key, id_rsa*, id_ed25519*…), .npmrc, .netrc and similar usually hold secrets, so they're never uploaded by mistake.

What to do:

- Remove them or add them to .lobsiteignore.
- To upload them anyway, pass `--include-secrets` (not available in the browser).