diff --git a/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx b/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx
index 24e760c92..6f964b533 100644
--- a/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx
+++ b/website/content/docs/job-specification/hcl2/functions/crypto/rsadecrypt.mdx
@@ -6,6 +6,18 @@ description: The rsadecrypt function decrypts an RSA-encrypted message.
 
 # `rsadecrypt` Function
 
+<Note title="Deprecated">
+This function is deprecated and may be removed in the future.
+</Note>
+
+<Warning>
+While it is possible to use safely, it encourages use of cryptographic
+primitives with <a href="https://en.wikipedia.org/wiki/PKCS_1#Attacks">known
+weaknesses</a>. <a href="/nomad/docs/concepts/variables">Nomad Variables</a>
+and <a href="/nomad/docs/integrations/vault-integration">HashiCorp Vault</a> are
+the recommended ways to provide secrets to workloads.
+</Warning>
+
 `rsadecrypt` decrypts an RSA-encrypted ciphertext, returning the corresponding
 cleartext.
 
diff --git a/website/data/docs-nav-data.json b/website/data/docs-nav-data.json
index 93ee0ca23..5e2b99706 100644
--- a/website/data/docs-nav-data.json
+++ b/website/data/docs-nav-data.json
@@ -1308,7 +1308,12 @@
                   },
                   {
                     "title": "rsadecrypt",
-                    "path": "job-specification/hcl2/functions/crypto/rsadecrypt"
+                    "path": "job-specification/hcl2/functions/crypto/rsadecrypt",
+                    "badge": {
+                      "text": "Deprecated",
+                      "type": "outlined",
+                      "color": "neutral"
+                    }
                   },
                   {
                     "title": "sha1",