diff --git a/.env.example b/.env.example
index f790ce09..ad7752c1 100644
--- a/.env.example
+++ b/.env.example
@@ -16,6 +16,8 @@ NUDGES_FLOW_ID=ebc01d31-1976-46ce-a385-b0240327226c
 # Set a strong admin password for OpenSearch; a bcrypt hash is generated at
 # container startup from this value. Do not commit real secrets.
 # must match the hashed password in secureconfig, must change for secure deployment!!!
+# NOTE: if you set this by hand, it must be a complex password: 
+The password must contain at least 8 characters, and must contain at least one uppercase letter, one lowercase letter, one digit, and one special character.
 OPENSEARCH_PASSWORD=
 
 # make here https://console.cloud.google.com/apis/credentials