diff --git a/README.md b/README.md
index 91ad78a..145e2c6 100644
--- a/README.md
+++ b/README.md
@@ -35,9 +35,10 @@ Low latency, high quality voice chat application.
     $ abra app deploy <YOURTRAEFIKCOMAIN> --force
     ```
 3. `abra app new mumble`
-4. `abra app config <YOURAPPDOMAIN>`
-5. `abra app deploy <YOURAPPDOMAIN>`
-6. Connect with a [Mumble client] to port 64738 on your domain
+4. `abra app secret generate <YOURAPPDOMAIN> --all`
+5. `abra app config <YOURAPPDOMAIN>`
+6. `abra app deploy <YOURAPPDOMAIN>`
+7. Connect with a [Mumble client] to port 64738 on your domain
 
 ## Web Client
 
@@ -50,6 +51,23 @@ overlay. To enable it:
 2. `abra app deploy <YOURAPPDOMAIN> --force`
 3. Open `https://<YOURAPPDOMAIN>` in a browser
 
+## Server Password
+By default, the server is not password-restricted. To enable a server password,
+1. uncomment the relevant lines in the config:
+```
+COMPOSE_FILE="$COMPOSE_FILE:compose.serverpassword.yml"
+SECRET_SERVER_PASSWORD_VERSION=v1
+```
+2. set the password as a secret:
+```bash
+$ abra app secret insert <YOURAPPDOMAIN> server-pw v1
+? specify secret value:
+```
+3. Redeploy your app:
+```bash
+$ abra app deploy <YOURAPPDOMAIN> --force
+```
+
 [`abra`]: https://git.coopcloud.tech/coop-cloud/abra
 [`coop-cloud/traefik`]: https://git.coopcloud.tech/coop-cloud/traefik
 [Mumble client]:(https://www.mumble.info/downloads/)