diff --git a/README.md b/README.md
index a95caea..a651c2b 100644
--- a/README.md
+++ b/README.md
@@ -32,7 +32,7 @@ Add this to your `.env` (**required**: `MONGO_URI`, `JWT_SECRET`):
 ```bash
 # required
 MONGO_URI=mongodb://127.0.0.1:27017/oscars-pool
-JWT_SECRET=change-me
+JWT_SECRET=replace-with-a-random-string
 
 # optional
 DOG_NAMES=woof,WOOF,Woof
@@ -41,6 +41,12 @@ GITHUB_OWNER=quoije
 GITHUB_REPO=oscars-pool
 ```
 
+Generate a good `JWT_SECRET`:
+
+```bash
+openssl rand -hex 32
+```
+
 ## Database (MongoDB)
 This app uses **MongoDB** via Mongoose. Provide a connection string in `MONGO_URI`.