From e31233c473a0f08f0798c3442dffa59774ccb69b Mon Sep 17 00:00:00 2001
From: Matthias Radestock <matthias.radestock@gmail.com>
Date: Wed, 3 Jun 2015 17:09:27 +0100
Subject: [PATCH] recommend strong password

Closes #641.
---
 site/features.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/site/features.md b/site/features.md
index ae1a85c7..6a56209a 100644
--- a/site/features.md
+++ b/site/features.md
@@ -157,6 +157,13 @@ or
 _NOTE: The command line option takes precedence over the environment
 variable._
 
+The password needs to be reasonably strong to guard against brute
+forcing by an attacker attempting to establish connections to a
+peer. We recommend at least 50 bits of entropy. An easy way to
+generate a random password which satsifies this requirement is
+
+    < /dev/urandom tr -dc A-Za-z0-9 | head -c9 ; echo
+
 The same password must be specified for all weave peers.
 
 ### <a name="host-network-integration"></a>Host network integration