From 2ff66fc090110dcf384e74bc26e73481eb780253 Mon Sep 17 00:00:00 2001
From: Colin Wilk <colin@wilk.cx>
Date: Sat, 27 Jun 2026 14:59:14 +0200
Subject: docs: add passphrase warning for true e2ee

We should mention that users need to add a passphrase for true E2EE.
---
 README.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/README.md b/README.md
index 7165469..d556818 100644
--- a/README.md
+++ b/README.md
@@ -116,6 +116,11 @@ supported modes see:
 You can configure a passphrase for the encryption keys in `borg_passphrase`of
 your Borg backups, but it is not used by default.
 
+> [!WARNING]
+> **Enable a passphrase for true end-to-end encryption.**
+> If you want true end-to-end encryption, you should configure a passphrase
+> Read more: [BorgBackup Security](https://borgbackup.readthedocs.io/en/stable/internals/security.html#offline-key-security)
+
 `borg_included_dirs` and `borg_excluded_dirs` finally picks what directories
 will be backed up by Borg.
 
-- 
cgit v1.2.3