diff --git a/client/flags/flags.go b/client/flags/flags.go
index 1afb55b467..62e4b15bca 100644
--- a/client/flags/flags.go
+++ b/client/flags/flags.go
@@ -110,7 +110,7 @@ func AddTxFlagsToCmd(cmd *cobra.Command) {
 	cmd.Flags().Bool(FlagGenerateOnly, false, "Build an unsigned transaction and write it to STDOUT (when enabled, the local Keybase is not accessible)")
 	cmd.Flags().Bool(FlagOffline, false, "Offline mode (does not allow any online functionality")
 	cmd.Flags().BoolP(FlagSkipConfirmation, "y", false, "Skip tx broadcasting prompt confirmation")
-	cmd.Flags().String(FlagKeyringBackend, DefaultKeyringBackend, "Select keyring's backend (os|file|kwallet|pass|test)")
+	cmd.Flags().String(FlagKeyringBackend, DefaultKeyringBackend, "Select keyring's backend (os|file|kwallet|pass|test|memory)")
 	cmd.Flags().String(FlagSignMode, "", "Choose sign mode (direct|amino-json), this is an advanced feature")
 	cmd.Flags().Uint64(FlagTimeoutHeight, 0, "Set a block timeout height to prevent the tx from being committed past a certain height")
 	cmd.Flags().String(FlagFeeAccount, "", "Fee account pays fees for the transaction instead of deducting from the signer")
diff --git a/docs/run-node/keyring.md b/docs/run-node/keyring.md
index 61636f27fd..4051bfd5ed 100644
--- a/docs/run-node/keyring.md
+++ b/docs/run-node/keyring.md
@@ -38,6 +38,8 @@ client.
 designed to meet users' most common needs and provide them with a comfortable
 experience without compromising on security.
 
+The recommended backends for headless environments are `file` and `pass`.
+
 ### The `file` backend
 
 The `file` backend more closely resembles the keybase implementation used prior to
@@ -82,12 +84,6 @@ $ pass init <GPG_KEY_ID>
 Replace `<GPG_KEY_ID>` with your GPG key ID. You can use your personal GPG key or an alternative
 one you may want to use specifically to encrypt the password store.
 
-### The `test` backend
-
-The `test` backend is a password-less variation of the `file` backend. Keys are stored
-unencrypted on disk. This backend is meant for testing purposes only and **should never be used
-in production environments**.
-
 ### The `kwallet` backend
 
 The `kwallet` backend uses `KDE Wallet Manager`, which comes installed by default on the
@@ -95,6 +91,19 @@ GNU/Linux distributions that ships KDE as default desktop environment. Please re
 [KWallet Handbook](https://docs.kde.org/stable5/en/kdeutils/kwallet5/index.html) for more
 information.
 
+### The `test` backend
+
+The `test` backend is a password-less variation of the `file` backend. Keys are stored
+unencrypted on disk.
+
+**Provided for testing purposes only. The `test` backend is not recommended for use in production environments**.
+
+### The `memory` backend
+
+The `memory` backend stores keys in memory. The keys are immediately deleted after the program has exited.
+
+**Provided for testing purposes only. The `memory` backend is not recommended for use in production environments**.
+
 ## Adding keys to the keyring
 
 ::: warning