diff --git a/docs/install/docker.md b/docs/install/docker.md
index a9831978366..e8cbade0a55 100644
--- a/docs/install/docker.md
+++ b/docs/install/docker.md
@@ -176,6 +176,12 @@ Docker Compose bind-mounts `OPENCLAW_CONFIG_DIR` to `/home/node/.openclaw` and
 `OPENCLAW_WORKSPACE_DIR` to `/home/node/.openclaw/workspace`, so those paths
 survive container replacement.
 
+That mounted config directory is where OpenClaw keeps:
+
+- `openclaw.json` for behavior config
+- `auth-profiles.json` for stored provider OAuth/API-key auth
+- `.env` for env-backed runtime secrets such as `OPENCLAW_GATEWAY_TOKEN`
+
 For full persistence details on VM deployments, see
 [Docker VM Runtime - What persists where](/install/docker-vm-runtime#what-persists-where).
 
diff --git a/docs/install/gcp.md b/docs/install/gcp.md
index 3714d9bcb1b..d5c513280b7 100644
--- a/docs/install/gcp.md
+++ b/docs/install/gcp.md
@@ -25,6 +25,9 @@ Pricing varies by machine type and region; pick the smallest VM that fits your w
 - Persist `~/.openclaw` + `~/.openclaw/workspace` on the host (survives restarts/rebuilds)
 - Access the Control UI from your laptop via an SSH tunnel
 
+That mounted `~/.openclaw` state includes `openclaw.json`, `auth-profiles.json`,
+and `.env`.
+
 The Gateway can be accessed via:
 
 - SSH port forwarding from your laptop
@@ -229,6 +232,9 @@ For the generic Docker flow, see [Docker](/install/docker).
 
     **Do not commit this file.**
 
+    This `.env` file is for container/runtime env such as `OPENCLAW_GATEWAY_TOKEN`.
+    Stored provider OAuth/API-key auth lives in the mounted `~/.openclaw/auth-profiles.json`.
+
   </Step>
 
   <Step title="Docker Compose configuration">
diff --git a/docs/install/hetzner.md b/docs/install/hetzner.md
index b123b3d92f6..75ff4f1ce85 100644
--- a/docs/install/hetzner.md
+++ b/docs/install/hetzner.md
@@ -33,6 +33,9 @@ See [Security](/gateway/security) and [VPS hosting](/vps).
 - Persist `~/.openclaw` + `~/.openclaw/workspace` on the host (survives restarts/rebuilds)
 - Access the Control UI from your laptop via an SSH tunnel
 
+That mounted `~/.openclaw` state includes `openclaw.json`, `auth-profiles.json`,
+and `.env`.
+
 The Gateway can be accessed via:
 
 - SSH port forwarding from your laptop
@@ -150,6 +153,9 @@ For the generic Docker flow, see [Docker](/install/docker).
 
     **Do not commit this file.**
 
+    This `.env` file is for container/runtime env such as `OPENCLAW_GATEWAY_TOKEN`.
+    Stored provider OAuth/API-key auth lives in the mounted `~/.openclaw/auth-profiles.json`.
+
   </Step>
 
   <Step title="Docker Compose configuration">