Update README.md

diff --git a/README.md b/README.md
index 45309fd3267317e0ad206e549426b6880e9f964e..0800ae388d894c66ca07b90fedaa2546838c69b1 100644 (file)
--- a/README.md
+++ b/README.md
@@ -303,7 +303,11 @@ general =
   // ... other general settings
 };
 ```
-(Remember, anything preceded by `//` is a comment and will have no effect on the setting of Shairport Sync.) No backend is specified here, so it will default to the `alsa` backend if more than one back end has been compiled. To route the output to PulseAudio, add:
+(Remember, anything preceded by `//` is a comment and will have no effect on the setting of Shairport Sync.)
+
+**Important:** You should *never* use an important password as the AirPlay password for a Shairport Sync player -- the password is stored in Shairport Sync's configuration file in plain text and is thus completely vulnerable.
+
+No backend is specified here, so it will default to the `alsa` backend if more than one back end has been compiled. To route the output to PulseAudio, add:
 
 ```
   output_backend = "pa";