diff --git a/README.md b/README.md
index 97e2343..3869a60 100644
--- a/README.md
+++ b/README.md
@@ -56,3 +56,7 @@ docker run -p 3000:3000 \
 ```
 
 4. Open http://localhost:3000 in your browser.
+
+## Authorization
+
+This application does not perform authorisation of users. I recommend using a proxy such as [oauth2-proxy](https://github.com/oauth2-proxy/oauth2-proxy) to protect your application.