diff --git a/synapse/config/password.py b/synapse/config/password.py
index ea822f2bb5..7c5cb5f0e1 100644
--- a/synapse/config/password.py
+++ b/synapse/config/password.py
@@ -31,6 +31,7 @@ class PasswordConfig(Config):
         password_config:
            enabled: true
            # Uncomment for extra security for your passwords.
+           # Change to a secret random string.
            # DO NOT CHANGE THIS AFTER INITIAL SETUP!
            #pepper: "HR32t0xZcQnzn3O0ZkEVuetdFvH1W6TeEPw6JjH0Cl+qflVOseGyFJlJR7ACLnywjN9"
         """
\ No newline at end of file